Latest Cybersecurity News and Articles

---

Companies are Getting Smarter About Cyber Incidents

According to experts, companies are increasingly prioritizing system backups and restoration capabilities to avoid paying ransoms during cyber incidents. Companies must also report cyber incidents and notify affected individuals.

---

Update: Citrix Provides Additional Measures to Address Citrix Bleed

The CVE-2023-4966 vulnerability has been actively exploited by threat actors since late August, allowing them to hijack authenticated sessions and bypass strong authentication measures.

---

New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

A new research has uncovered multiple vulnerabilities that could be exploited to bypass Windows Hello authentication on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops. The flaws were discovered by researchers at hardware and software product security and offensive research firm Blackwing Intelligence, who found the weaknesses in the fingerprint sensors from Goodix,

---

The Shifting Sands of the War Against Cyber Extortion

Ransomware gangs are employing various tactics to force victims to pay, including DDoS attacks and regulatory complaints, while some ransomware operators are introducing new rules to ensure larger ransom amounts and increased payout likelihood.

---

Strong security posture means building effective partnerships

Michael Daniel, President & CEO at Cyber Threat Alliance, discusses sharing threat intelligence with other organizations as well as the challenges faced when establishing effective partnerships in the security industry.

---

Update: Report Details Aftermath of ICBC LockBit Ransomware Attack

A ransomware attack on the Industrial and Commercial Bank of China caused failed trading rates in the U.S. Treasury market to soar to $60 billion, highlighting the potential impact of cyberattacks on financial systems.

---

Us Navy Unveils its First Cyber Strategy

The cyber strategy focuses on enhancing the Navy's cyber enterprise, collaborating with allies, securing critical infrastructure and weapon systems, and improving and supporting the cyber workforce, among other areas.

---

Enterprise Software Provider TmaxSoft Leaks Two Terabytes of Data

Korean IT company TmaxSoft has experienced a major data leak, exposing over 50 million sensitive records. The leak, which has been ongoing for two years, was discovered by Cybernews researchers.

---

185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone 

Car parts giant AutoZone says nearly 185,000 individuals were impacted by a data breach caused by the MOVEit hack. The post 185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone  appeared first on SecurityWeek.

---

Organizations’ Serious Commitment to Software Risk Management Pays Off

A recent report by Synopsys reveals that there has been a decrease in vulnerabilities found in target applications, indicating that code reviews, automated testing, and continuous integration are helping to reduce programming errors.

---

Atomic Stealer Distributed to Mac Users via Fake Browser Updates

The malware campaign known as ClearFake is now targeting Mac users by distributing fake browser updates that infect their systems with the Atomic Stealer, also known as AMOS.

---

UK Regulator Demands Websites Let Users ‘Reject All’ Cookies

The ICO is cracking down on websites that coerce visitors into accepting advertising cookies, citing concerns about targeted ads based on personal information and potential privacy violations.

---

Windows Hello Fingerprint Authentication Bypassed on Popular Laptops

Researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to bypass them. The post Windows Hello Fingerprint Authentication Bypassed on Popular Laptops appeared first on SecurityWeek.

---

Sam Altman is Back as OpenAI CEO Just Days After Being Removed, Along With a New Board

San Francisco-based OpenAI has reached an agreement in principle for Sam Altman to return to OpenAI as CEO with a new initial board. The post Sam Altman is Back as OpenAI CEO Just Days After Being Removed, Along With a New Board appeared first on SecurityWeek.

---

Personal data stolen in British Library cyber-attack appears for sale online

Ransomware group Rhysida claims responsibility for hack and has posted images from library’s HR filesThe British Library has confirmed that personal data stolen in a cyber-attack has appeared online, apparently for sale to the highest bidder.The attack was carried out in October by a group known for such criminal activity, said the UK’s national library, which holds about 14m books and millions of other items. Continue reading...

---

Automotive Parts Retailer AutoZone Warns of MOVEit Data Breach

The breach, which occurred on May 28, 2023, compromised the data of 184,995 individuals. The company took three months to determine the extent of the breach and notify affected customers.

---

Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products

Microsoft invites researchers to new bug bounty program focused on vulnerabilities in its Defender products. The post Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products appeared first on SecurityWeek.

---

Report: Only 9% of IT Budgets are Dedicated to Security

Customers, investors, and suppliers are increasingly seeking proof of security and compliance, and companies that cannot provide evidence may miss out on revenue and growth opportunities.

---

North Korean Hackers Pose as Job Recruiters and Seekers in Malware Campaigns

North Korean threat actors have been linked to two campaigns in which they masquerade as both job recruiters and seekers to distribute malware and obtain unauthorized employment with organizations based in the U.S. and other parts of the world. The activity clusters have been codenamed Contagious Interview and Wagemole, respectively, by Palo Alto Networks Unit 42. While the first set of attacks

---

Humans Are Notoriously Bad at Assessing Risk

When too much subjectivity is mixed into risk assessment, it can produce a risk picture that is not an accurate representation of reality.  The post Humans Are Notoriously Bad at Assessing Risk appeared first on SecurityWeek.