Latest Cybersecurity News and Articles

---

DOD Notifying People Who May be Impacted by a Year-Old Data Breach

The breach occurred from February 3, 2023, through February 20, 2023, and involved email messages containing personally identifiable information (PII) associated with individuals supporting or seeking employment with the DOD.

---

Iranian Cyberattacks Targeting U.S. and Israeli Entities

Iranian state-backed actors have consistently targeted the U.S. and Israel with cyberattacks, including destructive malware and influence campaigns, before and after the Israel-Hamas war.

---

Urgent Patches Available for QNAP Vulnerabilities, One Zero-Day

The vulnerabilities, CVE-2023-50358 and CVE-2023-47218, are command injection flaws in the QTS firmware, with potential for remote code execution, impacting a large number of devices globally.

---

Update: Southern Water Notifies Customers and Employees of Data Breach

The company plans to notify 5-10% of its customer base, potentially affecting 230,000 to 460,000 people. The breach, attributed to the Black Basta ransomware group, led to the theft of data from a limited part of the company's server estate.

---

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

A newly disclosed security flaw in the Microsoft Defender SmartScreen has been exploited as a zero-day by an advanced persistent threat actor called Water Hydra (aka DarkCasino) targeting financial market traders. Trend Micro, which began tracking the campaign in late December 2023, said it entails the exploitation of CVE-2024-21412, a security bypass vulnerability related to Internet

---

Report: Stealthy “Hunter-Killer” Malware Detections Surge 333% Annually

Defenders must adopt a proactive approach, employing multiple security controls with a defense-in-depth strategy to detect and mitigate the impact of stealth-oriented "hunter-killer" malware.

---

Raspberry Robin Worm Rides on New One-Day Flaws to Launch Stealthy Attacks

Check Point Research revealed a concerning trend in the tactics of the notorious malware, Raspberry Robin, indicating a transition towards purchasing exploits for swifter cyber assaults. Previously, the malware operators integrated exploits for year-old vulnerabilities but now prioritize exploits less than a month old, emphasizing speed for increased attack success rates.

---

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

Microsoft has released patches to address 73 security flaws spanning its software lineup as part of its Patch Tuesday updates for February 2024, including two zero-days that have come under active exploitation. Of the 73 vulnerabilities, 5 are rated Critical, 65 are rated Important, and three and rated Moderate in severity. This is in addition to 24 flaws that have been fixed

---

Fat Patch Tuesday, February 2024 Edition

Microsoft Corp. today pushed software updates to plug more than 70 security holes in its Windows operating systems and related products, including two zero-day vulnerabilities that are already being exploited in active attacks.

---

Security experts discuss recent Bank of America data breach

The Bank of America experienced a security breach, revealing the personal identifiable information of more than 50,0000 affected users.

---

CISOs share 5 priorities for 2024

Info-Tech research group analyzed the priorities of several chief information security officers (CISOs) for 2024 in their recent report.

---

91% of organizations faced a software supply chain attack last year

According to a recent cybersecurity report by Data Theorem, 91% of organizations experienced a software supply chain attack over the last year. 

---

Diving Into Glupteba's UEFI Bootkit

The Pay-Per-Install (PPI) ecosystem, originally intended for distributing advertisements, has evolved into a profitable platform for spreading spyware and malware, including threats like Glupteba.

---

Notorious Bumblebee Malware Re-emerges with New Attack Methods

The Bumblebee malware has re-emerged with a significantly different attack chain after a four-month absence, utilizing social engineering techniques and unique characteristics in its new campaign.

---

Glupteba Botnet Evades Detection with Undocumented UEFI Bootkit

The Glupteba botnet has been found to incorporate a previously undocumented Unified Extensible Firmware Interface (UEFI) bootkit feature, adding another layer of sophistication and stealth to the malware. "This bootkit can intervene and control the [operating system] boot process, enabling Glupteba to hide itself and create a stealthy persistence that can be extremely difficult to

---

PikaBot Resurfaces with Streamlined Code and Deceptive Tactics

The threat actors behind the PikaBot malware have made significant changes to the malware in what has been described as a case of "devolution." "Although it appears to be in a new development cycle and testing phase, the developers have reduced the complexity of the code by removing advanced obfuscation techniques and changing the network communications," Zscaler ThreatLabz researcher Nikolaos

---

LectureNotes Learning App breach affects over 2 million users

Millions of users of the LectureNotes Learning App have had their sensitive information leaked in this data breach. 

---

Report: Over 1.76 billion phishing emails were sent in 2023

A new report reveals that 2023 saw the highest amount of phishing emails sent globally. 

---

Jet Engine Dealer to Major Airlines Discloses ‘Unauthorized Activity’

The Black Basta ransomware group claims to have stolen 910 GB of sensitive company data from Willis Lease Finance Corporation, including passport scans and personal information of staff and customers.

---

SiCat: Open-Source Exploit Finder

The tool has key features such as an easy-to-understand code structure, reporting/output system in HTML and JSON formats, and the ability to run via Nmap scan results in XML format.