Latest Cybersecurity News and Articles

---

Mirai Botnet Variant V3G4 Exploiting IoT Devices for DDoS Attacks

Dubbed V3G4 by researchers, it is a type of malware that specifically targets Internet of Things (IoT) devices. Like the original Mirai botnet, V3G4 infects IoT devices by exploiting default data login credentials such as usernames and passwords.

---

APT37 Exploits Hangul Vulnerability with Highly-Evasive M2RAT Malware

North Korean APT37 was spotted using a highly evasive M2RAT malware and steganography to target individuals for intelligence collection. It exploits an old EPS bug, tracked as CVE-2017-8291, in the Hangul word processor (commonly used in South Korea). The malware uses a shared memory region for executing commands and exfiltrating data from infected machines.

---

GAO Calls for Improved Data Privacy Protections

The most recent in a series of US Government Accountability Office (GAO) reports on the state of cybersecurity across the federal government makes specific recommendations about the collection, use, and sharing of PII.

---

Breaking the Security "Black Box" in DBs, Data Warehouses and Data Lakes

Security teams typically have great visibility over most areas, for example, the corporate network, endpoints, servers, and cloud infrastructure. They use this visibility to enforce the necessary security and compliance requirements. However, this is not the case when it comes to sensitive data sitting in production or analytic databases, data warehouses or data lakes. Security teams have to

---

ProxyShellMiner Campaign Creating Dangerous Backdoors

As the name suggests, ProxyShellMiner exploits the ProxyShell vulnerabilities CVE-2021-34473 and CVE-2021-34523 in Windows Exchange servers for initial access and compromise of an organization to deliver crypto miners.

---

New Threat Actor WIP26 Targeting Telecom Service Providers in the Middle East

Telecommunication service providers in the Middle East are being targeted by a previously undocumented threat actor as part of a suspected espionage-related campaign. Cybersecurity firms SentinelOne and QGroup are tracking the activity cluster under the former's work-in-progress moniker WIP26. "WIP26 relies heavily on public cloud infrastructure in an attempt to evade detection by making

---

Report: Pentagon Personnel Use Unauthorized, Unsafe Apps on Work Devices

The Defense Department’s inspector general found that unsanctioned apps downloaded onto government-issued mobile devices “could pose operational and cybersecurity risks to DOD information and information systems.”

---

Hyundai Says Its Cars Will No Longer Be Easy to Steal Using Viral TikTok Instructions

Hyundai will issue a software patch that the company says will thwart would-be thieves from stealing its cars using instructions from viral TikTok videos, according to a company announcement.

---

ESXiArgs Ransomware Hits Over 500 New Targets in European Countries

More than 500 hosts have been newly compromised en masse by the ESXiArgs ransomware strain, most of which are located in France, Germany, the Netherlands, the U.K., and Ukraine. The findings come from attack surface management firm Censys, which discovered "two hosts with strikingly similar ransom notes dating back to mid-October 2022, just after ESXi versions 6.5 and 6.7 reached end of life."

---

GitHub Copilot update stops AI model from revealing secrets

GitHub has updated the AI model of Copilot, a programming assistant that generates real-time source code and function recommendations in Visual Studio, and says it's now safer and more powerful.

---

Splunk Enterprise Updates Patch High-Severity Vulnerabilities

The most severe vulnerabilities are CVE-2023-22939 and CVE-2023-22935 (CVSS score of 8.1), two issues that could lead to the bypass of search processing language (SPL) safeguards for risky commands.

---

Google lets a few Android devices into its Privacy Sandbox

Google on Tuesday began rolling out a beta test of its Privacy Sandbox software for a small portion of Android 13 devices to learn how its purportedly privacy-protecting ad tech actually performs.

---

OT Network Security Myths Busted in a Pair of Hacks

As IT and OT network lines continue to blur in the rapidly digitalized industrial sector, new vulnerabilities and threats imperil conventional OT security measures that once isolated and guarded physical processes from cyberattacks.

---

Intel issues patches for SGX vulnerabilities

Intel's Software Guard Extensions (SGX) are under the spotlight again after the chipmaker disclosed several newly discovered vulnerabilities affecting the tech, and recommended users update their firmware.

---

Passport Breach Hits Over 500 Cricket Stars, From Wasim Akram To Ian Bell

The data appears to relate to teams involved in both the Pakistan Super League and the Abu Dhabi T10 competitions. Often, cricketers have to provide their passports and other personal data to event organizers.

---

Medibank class action launched after massive hack put private information of millions on dark web

Law firm Baker McKenzie says company failed to protect privacy of customers in Australia and overseasFollow our Australia news live blog for the latest updatesGet our morning and afternoon news emails, free app or daily news podcastThe law firm Baker McKenzie has launched a class action lawsuit against Medibank over the health insurer’s massive cyber attack last year that resulted in the personal details of up to 10 million customers being posted on the dark web.In what became the largest breach of its kind to date in Australia, the hack on Medibank resulted in the personal details of 9.7 million current and former customers, including 5.1 million Medibank customers, 2.8 million ahm customers and 1.8 million international customers, being leaked.Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup Continue reading...

---

How Concerned Should You be about Your Hardware Wallet?

Security company Unciphered successfully breached OneKey, the maker of hardware wallets for cryptocurrencies, in a matter of seconds, underlining security gaps in the emerging crypto world. Unciphered posted a video on YouTube demonstrating its ability to exploit a critical flaw that enabled it to infiltrate a OneKey Mini. It is important that organizations routinely scan their system for bugs and security gaps.

---

Everything you need to know – Netflix password sharing

EXECUTIVE SUMMARY: Netflix once tweeted “Love is sharing a password,” but the company is breaking up with password sharing. At that point in time, the company’s strategy focused on getting eyeballs glued to screens. Netflix didn’t much care about who shared passwords, as long as millions of people were watching Netflix shows and movies. But […] The post Everything you need to know – Netflix password sharing appeared first on CyberTalk.

---

Organizations fought an average of 29.3 attacks daily in late 2022

2022 Radware threat analysis report defined DDoS attack profiles by gains in number, frequency, volume, power, duration and complexity.

---

Dark Caracal APT Reappears with a New Version of Bandook Spyware

Lookout Security published a report describing the activities of a new APT actor dubbed Dark Caracal that has claimed hundreds of infections in more than a dozen countries since March of 2022. The APT is currently using a new version of Bandook spyware to target Windows systems. Organizations in vulnerable regions organizations must watch out for IOCs associated with the threat actors and the malware to take necessary preventive measures.