Latest Cybersecurity News and Articles

---

Hackers Hijack Industrial Control System at US Water Utility 

Municipal Water Authority of Aliquippa in Pennsylvania confirms that hackers took control of a booster station, but says no risk to drinking water or water supply. The post Hackers Hijack Industrial Control System at US Water Utility  appeared first on SecurityWeek.

---

General Electric Investigates Claims of Cyberattack, Data Theft

As proof of the breach, the threat actor shared screenshots of what they claim is stolen GE data, including a database from GE Aviations that appears to contain information on military projects. GE confirmed that they are investigating the claim.

---

East Texas Hospital Network Affected by Potential Cybersecurity Incident

The East Texas healthcare system is just the latest hospital group that has been forced to turn ambulances away because of an apparent cybersecurity incident. The cyber incident at UT Health East Texas began on Thursday.

---

Gulf Air Exposed to Data Breach, 'Vital Operations Not Affected'

The agency quoted the company as saying that "as a result of this illegal breach some information from the company's email system and customers' database could be compromised."

---

U.S., U.K., and Global Partners Release Secure AI System Development Guidelines

The U.K. and U.S., along with international partners from 16 other countries, have released new guidelines for the development of secure artificial intelligence (AI) systems. "The approach prioritizes ownership of security outcomes for customers, embraces radical transparency and accountability, and establishes organizational structures where secure design is a top priority," the U.S.

---

Pentagon’s AI Initiatives Accelerate Hard Decisions on Lethal Autonomous Weapons

The U.S. military is increasing use of AI technology that will fundamentally alter the nature of war. The post Pentagon’s AI Initiatives Accelerate Hard Decisions on Lethal Autonomous Weapons appeared first on SecurityWeek.

---

UK and US develop new global guidelines for AI security

New guidelines for secure AI system development will help developers of any systems that use AI make informed cyber security decisions at every stage of the development process.

---

UK and US develop new global guidelines for AI security

New guidelines for secure AI system development will help developers of any systems that use AI make informed cyber security decisions at every stage of the development process.

---

Critical Vulnerabilities Expose ownCloud Users to Data Breaches

The three critical vulnerabilities include disclosure of sensitive credentials and configuration, authentication bypass using pre-signed URLs, and subdomain validation bypass.

---

Crypto Investor Losses Near $1M in Rug Pull Scheme

The recently identified scam involved the creation of counterfeit tokens and manipulated trading activities to attract investors before swiftly withdrawing liquidity and causing substantial losses.

---

App Used by Hundreds of Schools Leaking Children’s Data

The leaked data poses a significant threat to children, as it can be exploited by malicious actors for extortion, impersonation, identity theft, fraud, and even potential child abuse.

---

Vanderbilt University Medical Center Investigating Cybersecurity Incident

The hospital system was added to the leak site of the Meow ransomware gang. VUMC has confirmed the incident but has not provided details on when it occurred or the effects of the attack.

---

New 'HrServ.dll' Web Shell Detected in APT Attack Targeting Afghan Government

An unspecified government entity in Afghanistan was targeted by a previously undocumented web shell called HrServ in what’s suspected to be an advanced persistent threat (APT) attack. The web shell, a dynamic-link library (DLL) named “hrserv.dll,” exhibits “sophisticated features such as custom encoding methods for client communication and in-memory execution,” Kaspersky security researcher Mert

---

Warning: 3 Critical Vulnerabilities Expose ownCloud Users to Data Breaches

The maintainers of the open-source file-sharing software ownCloud have warned of three critical security flaws that could be exploited to disclose sensitive information and modify files. A brief description of the vulnerabilities is as follows - Disclosure of sensitive credentials and configuration in containerized deployments impacting graphapi versions from 0.2.0 to 0.3.0. (CVSS score: 10.0)

---

North Korean Supply Chain Attacks Prompt Joint Warning From South Korea and the UK

The United Kingdom and South Korea have issued a joint advisory warning about software supply chain attacks carried out by North Korean state-linked hackers, highlighting the increasing volume and sophistication of such attacks.

---

Bahrain Government Websites Briefly Inaccessible After Cyberattack Over Israel-Hamas War

The Al-Toufan hacker group targeted the Foreign Ministry and the Information Affairs Ministry's websites and also released scans of passports allegedly obtained from the hack.

---

Hackers Demand $60M From TransUnion and Experian in South Africa, Claiming Data Theft

The hacker group, known as N4ughtySecTU, demanded a ransom of $30 million from both the credit reporting agencies and claims to have direct access to their data and infrastructure.

---

Taj Hotel Data Breach Potentially Impacts 1.5 Million Customers

The breach occurred in November and a threat actor named "Dnacookies" is demanding $5,000 for the full dataset, which includes customers' addresses, mobile numbers, and membership IDs.

---

Rhysida, the new ransomware gang behind British Library cyber-attack

Gang thought to be from Russia or CIS has attacked companies and institutions in several countriesA new name was added to the cyber-rogues’ gallery of ransomware gangs this week after a criminal group called Rhysida claimed responsibility for an attack on the British Library.The library confirmed that personal data stolen in a cyber-attack last month has appeared for sale online. Continue reading...

---

Cyberattack at Legal Sector Service Provider CTS Disrupts UK Property Deals

CTS, a legal sector specialist infrastructure service provider, confirmed in a statement that it has experienced a service outage caused by a cyber-incident. The outage is believed to have affected up to 200 law firms that use CTS’ services.