Latest Cybersecurity News and Articles
14 February 2023
Malicious actors have published more than 451 unique Python packages on the official Python Package Index (PyPI) repository in an attempt to infect developer systems with clipper malware.
Software supply chain security company Phylum, which spotted the libraries, said the ongoing activity is a follow-up to a campaign that was initially disclosed in November 2022.
The initial vector entails using
14 February 2023
New findings from researchers at the security firm Sophos show how pig butchering scammers are tweaking and refining their strategies to try to ensnare more unsuspecting victims.
14 February 2023
As part of the $1.2 trillion infrastructure spending deal signed into law last year, $1 billion was allocated to state and local governments to upgrade their cybersecurity defenses.
14 February 2023
North Korean hackers have found a way around U.S.-imposed sanctions to launder the cryptocurrency proceeds from their heists, according to evidence discovered by blockchain analysts.
14 February 2023
One thing is clear. The "business value" of data continues to grow, making it an organization's primary piece of intellectual property.
From a cyber risk perspective, attacks on data are the most prominent threat to organizations.
Regulators, cyber insurance firms, and auditors are paying much closer attention to the integrity, resilience, and recoverability of organization data – as well as
14 February 2023
Almost 4 in 5 organizations are making cybersecurity decisions without any insight into the attackers they are facing off with, according to a report from Mandiant, a unit of Google Cloud.
14 February 2023
Fortinet uncovered a wave of zero-day attacks targeting PyPI packages by a cybercriminal group dubbed Core1337. It has published five packages to the public repository - all designed to launch different types of attacks. All the malicious packages have similar code in the setup.py file, the only major difference between them is the webhook URL. Developers are suggested to stay extra cautious when downloading PyPI packages.
14 February 2023
Apple has released emergency security updates to address a new actively exploited zero-day vulnerability, tracked as CVE-2023-23529, that impacts iOS, iPadOS, and macOS. The flaw is a type confusion issue in WebKit.
14 February 2023
Microsoft on Monday attributed a China-based cyber espionage actor to a set of attacks targeting diplomatic entities in South America.
The tech giant's Security Intelligence team is tracking the cluster under the emerging moniker DEV-0147, describing the activity as an "expansion of the group's data exfiltration operations that traditionally targeted government agencies and think tanks in Asia
14 February 2023
The cybercrime gang specializes in online scams, employing social engineering, phishing, and smishing to collect sensitive victim details and then use that information to commit financial fraud.
14 February 2023
Nearly 40,000 consumers will be handed their share of the funds, which were forfeited by MoneyGram in 2018 as part of a deferred prosecution agreement (DPA). That action was led by the FTC and the Department of Justice (DoJ).
14 February 2023
Researchers have unearthed four game modes that could successfully exploit a critical vulnerability that remained unpatched in the popular Dota 2 video game for 15 months after a fix had become available.
14 February 2023
The Clop ransomware group claimed to have successfully infected more than 130 organizations by abusing the zero-day in Fortra’s GoAnywhere MFT secure file transfer solution. The bug, tracked as CVE-2023-0669, is an RCE issue. The company immediately issued a patch and urged organizations using the software to immediately apply it. Hackers, who failed to share proof, said they did it in just ten days.
14 February 2023
Many Californians are reporting that scammers drained their inflation relief debit cards before they could use the money. What's worse? They're now finding out they may have to pay income taxes on the money they never received.
14 February 2023
Coincover, a digital asset protection company, has raised $30 million in funding led by Foundation Capital to protect people and their digital assets from hacks or human error, David Janczewski, CEO and co-founder, shared with TechCrunch.
14 February 2023
The Tor Project’s Executive Director, Isabela Dias Fernandes, reported on Tuesday that the network has been targeted by a wave of DDoS attacks for at least the past seven months.
14 February 2023
EXECUTIVE SUMMARY: One wrong click to heartache? Valentine’s Day is a serious, seasonal opportunity for scammers. This Valentine’s Day, red roses, heart-shaped boxes of candies, heart-themed cards, and other popular, expressive, and traditional gifts are expected to collectively account for $26 billion in retail revenue. This reflects a two billion dollar increase over last year’s […]
The post Top 5 Valentine’s Day cyber scams appeared first on CyberTalk.
14 February 2023
Web infrastructure company Cloudflare on Monday disclosed that it thwarted a record-breaking distributed denial-of-service (DDoS) attack that peaked at over 71 million requests per second (RPS).
"The majority of attacks peaked in the ballpark of 50-70 million requests per second (RPS) with the largest exceeding 71 million," the company said, calling it a "hyper-volumetric" DDoS attack.
It's also
13 February 2023
Apple on Monday rolled out security updates for iOS, iPadOS, macOS, and Safari to address a zero-day flaw that it said has been actively exploited in the wild.
Tracked as CVE-2023-23529, the issue relates to a type confusion bug in the WebKit browser engine that could be activated when processing maliciously crafted web content, culminating in arbitrary code execution.
The iPhone maker said the
13 February 2023
Proofpoint security experts uncovered a threat actor, tracked as TA886, infecting companies in the U.S. and Germany with the new WasabiSeed and Screenshotter malware. The custom malware can perform surveillance and steal data. Hackers push their malware via phishing emails that include Microsoft Publisher (.pub) attachments with malicious macros or PDFs containing URLs that download JavaScript files.