Latest Cybersecurity News and Articles

---

NCSC warns of enduring and significant threat to UK's critical infrastructure

The NCSC's seventh Annual Review raises awareness of the increasingly unpredictable threat landscape.

---

NCSC warns of enduring and significant threat to UK's critical infrastructure

The NCSC's seventh Annual Review raises awareness of the increasingly unpredictable threat landscape.

---

Lorenz Ransomware Gang Hit Texas-Based Cogdell Memorial Hospital

The Lorenz extortion group has targeted and leaked data from the Texas-based Cogdell Memorial Hospital, adding to the rising number of ransomware attacks on healthcare organizations in the US.

---

Dragos Says No Evidence of Breach After Ransomware Gang Claims Hack via Third Party

Dragos finds no evidence of a data breach after the BlackCat ransomware group claimed to have hacked the security firm via a third party. The post Dragos Says No Evidence of Breach After Ransomware Gang Claims Hack via Third Party appeared first on SecurityWeek.

---

Chess.com Faces Second Data Leak; 476,000 Scraped User Records Leaked

The leaked data includes personal details such as full names, email addresses, usernames, and profile links, posing a significant threat to Chess.com users for potential identity theft and phishing attacks.

---

Ransomware Group RansomedVC Closes Shop

The ransomware and data extortion group RansomedVC announced plans to shut down the project and sell parts of its infrastructure. The post Ransomware Group RansomedVC Closes Shop appeared first on SecurityWeek.

---

Update: Lockbit Ransomware Leaks Gigabytes of Boeing Data

The leaked data includes backups of various systems, with the most recent files having an October 22 timestamp, raising concerns about potential vulnerabilities in Boeing's IT infrastructure.

---

More Than $100 Million Stolen From Poloniex Crypto Platform

The platform confirmed the theft and plans to reimburse affected users. Poloniex offered a 5% bounty to the hacker for the return of the funds and urged a response within 7 days.

---

Malicious Python packages targets developers

New research recently released reveals an increase in malicious code disguised as Python obfuscation packages. 

---

2.2 Million Impacted by Data Breach at McLaren Health Care

McLaren Health Care is informing roughly 2.2 million individuals of a data breach impacting their personal information. The post 2.2 Million Impacted by Data Breach at McLaren Health Care appeared first on SecurityWeek.

---

New Ransomware Group Emerges with Hive's Source Code and Infrastructure

The threat actors behind a new ransomware group called Hunters International have acquired the source code and infrastructure from the now-dismantled Hive operation to kick-start its own efforts in the threat landscape. "It appears that the leadership of the Hive group made the strategic decision to cease their operations and transfer their remaining assets to another group, Hunters

---

Ransomware Group Leaks Files Allegedly Stolen From Boeing

The LockBit ransomware group has leaked gigabytes of files allegedly stolen from the systems of aerospace giant Boeing.  The post Ransomware Group Leaks Files Allegedly Stolen From Boeing appeared first on SecurityWeek.

---

Top 5 Marketing Tech SaaS Security Challenges

Effective marketing operations today are driven by the use of Software-as-a-Service (SaaS) applications. Marketing apps such as Salesforce, Hubspot, Outreach, Asana, Monday, and Box empower marketing teams, agencies, freelancers, and subject matter experts to collaborate seamlessly on campaigns and marketing initiatives.  These apps serve as the digital command centers for marketing

---

Major Phishing-as-a-Service Syndicate 'BulletProofLink' Dismantled by Malaysian Authorities

BulletProofLink offered ready-to-use phishing templates to conduct credential harvesting campaigns, targeting well-known services and engaging in double theft to maximize profits.

---

North Korea-Linked APT Sapphire Sleet Targets IT Job Seekers

They have created fake skills assessment portals to trick recruiters into registering for an account. Previously, they used platforms like LinkedIn and employed lures related to skills assessment.

---

Mr. Cooper Says Customer Data Compromised in Cyberattack

US mortgage giant Mr. Cooper announced that customer data was compromised in an October 31 cyberattack. The post Mr. Cooper Says Customer Data Compromised in Cyberattack appeared first on SecurityWeek.

---

Operations at Major Australian Ports Significantly Disrupted by Cyberattack

A cyberattack on Australian shipping giant DP World, which may have been a ransomware attack, has resulted in serious disruptions at major ports. The post Operations at Major Australian Ports Significantly Disrupted by Cyberattack appeared first on SecurityWeek.

---

CherryBlos Malware Steals Cryptocurrency via Your Photos

CherryBlos is a family of Android malware that can steal cryptocurrency by extracting sensitive information from photos on a user's phone. This includes details related to cryptocurrency wallets, such as recovery phrases.

---

Signature Techniques of Asian APT Groups Revealed

The industries most frequently targeted by Asian APT groups include government, industrial, healthcare, IT, agriculture, and energy sectors, emphasizing the importance of tailored security measures for these industries.

---

Yellen Says Ransomware Attack on China’s Biggest Bank Minimally Disrupted Treasury Market Trades

A ransomware attack that forced China’s biggest bank to take some systems offline only minimally disrupted the U.S. Treasury market. The post Yellen Says Ransomware Attack on China’s Biggest Bank Minimally Disrupted Treasury Market Trades appeared first on SecurityWeek.