Latest Cybersecurity News and Articles
14 February 2023
EXECUTIVE SUMMARY: Pepsi Bottling Ventures, the largest bottler of Pepsi-Cola beverages in the United States, is responsible for manufacturing, selling and distributing a variety of popular consumer brands. The company operates 18 bottling facilities across North and South Carolina, Virginia, Maryland and Delaware. On the 23rd of December, a network intrusion occurred, resulting in a […]
The post Pepsi Bottling Ventures breached, extensive employee data stolen appeared first on CyberTalk.
14 February 2023
Microsoft is sending the world a whole bunch of love today, in the form of patches to plug dozens of security holes in its Windows operating systems and other software. This year's special Valentine's Day Patch Tuesday includes fixes for a whopping three different "zero-day" vulnerabilities that are already being used in active attacks.
14 February 2023
Cybercriminals are becoming more adept at creating a sense of urgency for victims and motivating them to engage in their agenda, reveals the Avast Q4 2022 report. Refund and invoice fraud saw a 22% jump in December 2022, with perpetrators utilizing emails originating from a trustworthy organization to create the illusion of unauthorized charges and false receipts.
14 February 2023
Research on the risks of industrial wireless IoT was released finding that they can provide a path to internal operational technology (OT) networks.
14 February 2023
According to Sucuri’s research, the backdoor redirects users to sites that show fraudulent views of Google AdSense ads. The company’s SiteCheck remote scanner has detected more than 10,890 infected sites.
14 February 2023
The threat actors behind the black hat redirect malware campaign have scaled up their campaign to use more than 70 bogus domains mimicking URL shorteners and infected over 10,800 websites.
"The main objective is still ad fraud by artificially increasing traffic to pages which contain the AdSense ID which contain Google ads for revenue generation," Sucuri researcher Ben Martin said in a report
14 February 2023
International high-speed rail operator, Eurostar, is emailing its users this week and forcing them to reset their account passwords in a bid to "upgrade" security. But users who visit the password reset link are met with "technical problems."
14 February 2023
In an SEC filing, Community Health Systems (CHS), one of the largest US healthcare services providers, revealed that a “security breach experienced by Fortra” resulted in the exposure of personal info and PHI belonging to patients of CHS affiliates.
14 February 2023
Robot process automation (RPA) has expanded to meet workforce needs. Unfortunately, RPA can put the sensitive data that it touches at risk.
14 February 2023
The Sunday dump, which appears to include sensitive data including staff medical diagnoses and student bank account information, came days after the Irish High Court issued a temporary injunction prohibiting ransomware attackers from leaking data.
14 February 2023
Only two cyberattacks targeted ESXi with ransomware in 2020, but in 2021, Recorded Future identified more than 400 incidents. Last year the number ballooned, growing almost threefold to 1,118 in 2022, the research found.
14 February 2023
Software supply chain security company Phylum, which spotted the libraries, said the ongoing activity is a follow-up to a campaign that was initially disclosed in November 2022.
14 February 2023
Acquiring the privately held cyber defence, risk management, and cyber threat intelligence services provider is set to enable Accenture to widen its cybersecurity footprint within the region.
14 February 2023
Talos observed the actor scanning the internet for victim machines with an exposed remote desktop protocol (RDP) port 3389, using one of their download servers that run an RDP crawler and also facilitates MortalKombat ransomware.
14 February 2023
Hackers said they had taken down the websites of Bahrain’s international airport and state news agency on Tuesday to mark the 12-year anniversary of an Arab Spring uprising in the small Gulf country.
14 February 2023
Recently, Kaspersky researchers shared with VPNOverview details of two separate campaigns — a scam designed to inject PCs with malware and a phishing ploy designed to steal banking information and other financial data.
14 February 2023
Hackers are sending tailored phishing messages to their intended targets by language and location via geotargeting tool known as Geo Targetly, according to Avanan. The threat actors have been following the spray-and-pray technique that ensures they can target a massive number of individuals in one go. As phishing attacks keep evolving, organizations and individuals should take their security game to the next level.
14 February 2023
In January, cybersecurity company Sonatype said it found 691 malicious npm packages and 49 malicious PyPI components containing crypto-miners, remote access Trojans (RATs), and more.
14 February 2023
A new joint advisory warns of North Korean hackers that are involved in ongoing ransomware attacks against healthcare systems in South Korea and the U.S. According to the advisory, the modus operandi of the attacks includes North Korean hackers acquiring and purchasing infrastructure to conceal their identities. The cybersecurity agencies have shared a list of recommendations and mitigation measures to stay safe.
14 February 2023
"The majority of attacks peaked in the ballpark of 50-70 million requests per second (RPS) with the largest exceeding 71 million," Cloudflare said, calling it a "hyper-volumetric" DDoS attack.