Latest Cybersecurity News and Articles

---

Law Firm Reports Data Breach Affecting More Than 325,000 People

The breached data included names, Social Security numbers, financial account information, and medical information. An unauthorized third party accessed the firm's network, leading to a data breach.

---

Update: Irish Foreign Affairs Ministry Says ‘No Evidence’ of Cyber Breach Following Extortion Claim

The Department of Foreign Affairs in Ireland has found no evidence to support the claim of a cyber extortion group called Mogilevich that it stole data from their IT systems.

---

New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

A novel phishing kit has been observed impersonating the login pages of well-known cryptocurrency services as part of an attack cluster designed to primarily target mobile devices. “This kit enables attackers to build carbon copies of single sign-on (SSO) pages, then use a combination of email, SMS, and voice phishing to trick the target into sharing usernames, passwords, password reset URLs,

---

Abyss Locker Ransomware Attacks Both Windows And Linux Users

This ransomware steals and encrypts files, demanding ransom for decryption and not releasing stolen data. It is based on the HelloKitty ransomware source code and has been observed in various regions.

---

Research finds that cybersecurity leaders are taking on multiple roles

A new study shows trends in cybersecurity leader employment, compensation and retention.

---

Chinese PC-Maker Acemagic Shipped Machines Infected with Malware

The company attributed the infection to software adjustments made by developers to reduce boot times, which inadvertently affected network settings and omitted digital signatures.

---

New Silver SAML Attack Bypasses Golden SAML MItigations

The technique works with identity providers like Microsoft Entra ID and can enable attackers to access applications by forging SAML responses with compromised private keys.

---

Utility Regulators Take Steps to Raise Sector’s Cybersecurity ‘Baselines’

The cybersecurity baselines aim to improve the security of distribution systems and distributed energy resources by including cybersecurity requirements in utilities’ procurement processes.

---

4 Instructive Postmortems on Data Downtime and Loss

More than a decade ago, the concept of the ‘blameless’ postmortem changed how tech companies recognize failures at scale. John Allspaw, who coined the term during his tenure at Etsy, argued postmortems were all about controlling our natural reaction to an incident, which is to point fingers: “One option is to assume the single cause is incompetence and scream at engineers to make them

---

20 Million Cutout.Pro User Records Leaked on Data Breach Forum

Users of Cutout.Pro are advised to reset their passwords immediately and be cautious of targeted phishing scams due to the potential threat of threat actors brute-forcing the leaked password hashes.

---

New BIFROSE Linux Malware Variant Using Deceptive VMware Domain for Evasion

Cybersecurity researchers have discovered a new Linux variant of a remote access trojan (RAT) called BIFROSE (aka Bifrost) that uses a deceptive domain mimicking VMware. "This latest version of Bifrost aims to bypass security measures and compromise targeted systems," Palo Alto Networks Unit 42 researchers Anmol Maurya and Siddharth Sharma said. BIFROSE is one of the long-standing

---

Epic Games Says “Zero Evidence” of Hacking by Mogilevich Gang

Epic Games found no evidence of a cyberattack or data theft after the Mogilevich group claimed to have breached their servers. The group offered to sell stolen data for $15,000 but only shared samples with those who proved they had the funds.

---

New Variant of AMOS Stealer Targets Safari Cookies and Crypto Wallets

The new Atomic variant of the AMOS Stealer targets macOS users, combining multiple malware functionalities to steal sensitive data and has an unusual technique of combining Python with Apple Scripting.

---

Airbnb Scammers Pose as Hosts, Redirect Users to Fake Tripadvisor Site

The scammers use emails and fake websites to trick users into making off-platform bookings and sharing their payment card details. Airbnb warns against off-platform activity and urges users to be cautious of emails and websites impersonating it.

---

Okta Reports ‘Minimal’ Financial Impact Following Support Portal Attack

Despite the attack, the company is focusing on enhancing security and regaining customer trust. Okta plans to prioritize security in the upcoming fiscal year, with a $50 million investment in cybersecurity initiatives.

---

JPCERT/CC Warns of Malicious PyPI Packages Created by North Korean Hackers

The malicious packages were disguised as legitimate Python packages, and although they have been removed from PyPI, they were downloaded over 3,000 times, compromising thousands of systems.

---

Kali Linux 2024.1 Released with New Tools, New Look, New Kali NetHunter Kernels

The latest release of Kali Linux, version 2024.1, includes new tools, an updated kernel, and improvements to the desktop environments. The release also features updates to the Kali NetHunter mobile platform.

---

Savvy Seahorse Gang Uses DNS CNAME Records to Power Investor Scams

Personal data of victims is collected through registration forms on fake investment platforms, and the actor tracks user information while preventing revisits from crawlers and security vendors.

---

Lazarus Hackers Exploited Windows Zero-Day to Gain Kernel Privileges

The exploit allowed Lazarus to enhance its FudModule rootkit, enabling it to evade detection and disable security protections. Additionally, a previously undocumented remote access trojan (RAT) used by Lazarus was discovered.

---

Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities

The Five Eyes (FVEY) intelligence alliance has issued a new cybersecurity advisory warning of cyber threat actors exploiting known security flaws in Ivanti Connect Secure and Ivanti Policy Secure gateways, noting that the Integrity Checker Tool (ICT) can be deceived to provide a false sense of security. "Ivanti ICT is not sufficient to detect compromise and that a cyber threat actor may be able