Latest Cybersecurity News and Articles
17 November 2023
A recent cyber threat report found that bots and human fraud farms were responsible for billions of attacks in the first half of 2023 and into Q3.
17 November 2023
The Scattered Spider cybercriminal group targets commercial facilities sectors and subsectors, engaging in data theft for extortion using social engineering techniques and BlackCat/ALPHV ransomware.
17 November 2023
Threat actors are leveraging manipulated search results and bogus Google ads that trick users who are looking to download legitimate software such as WinSCP into installing malware instead.
Cybersecurity company Securonix is tracking the ongoing activity under the name SEO#LURKER.
“The malicious advertisement directs the user to a compromised WordPress website gameeweb[.]com, which redirects the
17 November 2023
Google is distributing 100,000 free Titan Security Keys to high-risk individuals, including those involved in elections. Google plans to distribute these keys to governments worldwide by 2024.
17 November 2023
Researchers uncover the activities of Appin, a hack-for-hire Indian firm involved in espionage, surveillance, and disruptive attacks.
The post Researchers Dive Into Activities of Indian Hack-for-Hire Firm Appin appeared first on SecurityWeek.
17 November 2023
Roshan Navagamuwa has been hired as Executive Vice President (EVP) and Chief Information Officer (CIO) at American International Group (AIG).
17 November 2023
While it is unclear if it is a ransomware attack, the city has taken its systems offline and plans to keep them offline for several days while working on identifying the source and implementing additional security measures.
17 November 2023
The Republican chairman of the House Intelligence Committee has called for the renewal of a key US government surveillance tool as he proposed a series of changes aimed at safeguarding privacy.
The post Key GOP Lawmaker Calls for Renewal of Surveillance Tool as He Proposes Changes to Protect Privacy appeared first on SecurityWeek.
17 November 2023
New research shows organizations using passwordless technologies experience the fewest phishing attacks, are more productive and achieve greater levels of employee satisfaction.
17 November 2023
Solutions Granted will continue to support products from competing endpoint security vendors while working with SonicWall, emphasizing an open and inclusive approach in the industry.
17 November 2023
The U.S. Federal Communications Commission (FCC) is adopting new rules that aim to protect consumers from cell phone account scams that make it possible for malicious actors to orchestrate SIM-swapping attacks and port-out fraud.
“The rules will help protect consumers from scammers who target data and personal information by covertly swapping SIM cards to a new device or porting phone numbers to
17 November 2023
The exposed data included device usernames with employee names or emails, allowing potential attackers to identify employees and their activities, posing a significant threat to the organization's security.
17 November 2023
CISA adds Sophos, Oracle and Microsoft product security holes to its Known Exploited Vulnerabilities (KEV) catalog.
The post CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability appeared first on SecurityWeek.
17 November 2023
Aviram Azari, an Israeli man who made nearly $5 million from a hacking scheme, has been sentenced to 80 months in prison in the US.
The post Israeli Man Who Made $5M From Hacking Scheme Sentenced to Prison in US appeared first on SecurityWeek.
17 November 2023
The ransomware gang behind the attack, AlphV/Black Cat, took extraordinary measures by pressuring MeridianLink to pay a ransom and even claimed to have reported the incident to the SEC.
17 November 2023
In 2023, the cloud isn't just a technology—it's a battleground. Zenbleed, Kubernetes attacks, and sophisticated APTs are just the tip of the iceberg in the cloud security warzone.
In collaboration with the esteemed experts from Lacework Labs, The Hacker News proudly presents an exclusive webinar: 'Navigating the Cloud Attack Landscape: 2023 Trends, Techniques, and Tactics.'
Join us for an
17 November 2023
Toyota Financial Services has been hit by a ransomware attack that may have involved exploitation of the CitrixBleed vulnerability.
The post CitrixBleed Vulnerability Exploitation Suspected in Toyota Ransomware Attack appeared first on SecurityWeek.
17 November 2023
These vulnerabilities include a Microsoft Windows security feature bypass, a command injection vulnerability in Sophos Web Appliance, and an unspecified vulnerability in Oracle Fusion Middleware.
17 November 2023
A new SpyAgent campaign targeting smartphone users in South Korea has infected over 200 devices since early October. The malware is distributed through phishing sites, utilizing malicious Android and iOS apps, with attackers initiating contact via SMS, persuading victims to switch to LINE messenger for further communication.
17 November 2023
An unknown threat actor has been observed publishing typosquat packages to the Python Package Index (PyPI) repository for nearly six months with an aim to deliver malware capable of gaining persistence, stealing sensitive data, and accessing cryptocurrency wallets for financial gain.
The 27 packages, which masqueraded as popular legitimate Python libraries, attracted thousands of downloads,