Latest Cybersecurity News and Articles

---

Dolly.com Pays Ransom, Attackers Release Data Anyway

The attackers gained access to sensitive company and customer data, including high-level account logins, credit card information, customer addresses, and more, posing a significant risk to Dolly.com and its users.

---

Diana Lovati hired as True Anomaly's first CISO

Diana Lovati was hired as the first CISO at True Anomaly. Lovati has experience with risk management, compliance, IT and data protection.

---

Hive Ransomware Resurfaces as Hunters International, Researchers Claim

Hunters International focuses on data exfiltration rather than encryption and primarily targets victims in the United States, the UK, Germany, and Namibia, including hospitals.

---

Cavelo Raises CA$5 Million for Attack Surface Management Platform

Cavelo has raised CA$5 million (~US$3.6 million USD) to help organizations comply with data protection regulations. The post Cavelo Raises CA$5 Million for Attack Surface Management Platform appeared first on SecurityWeek.

---

In Other News: EU Government Surveillance, Rewards for Iranian Hackers, Evolution of Chinese Spying

Noteworthy stories that might have slipped under the radar: EU regulation enables government surveillance, US offering rewards for Iranian hackers, evolution of Chinese spying.  The post In Other News: EU Government Surveillance, Rewards for Iranian Hackers, Evolution of Chinese Spying appeared first on SecurityWeek.

---

Maine Government Says Data Breach Affects 1.3 Million Residents

The government of Maine has confirmed that over a million state residents had their personal information stolen in a data breach by a Russia-linked ransomware gang that exploited a vulnerability in the MOVEit file transfer system.

---

Potential Data Breach at Chess.com, 800K User Records May Be Compromised

The leaked data includes critical details such as email addresses, names, usernames, and geographic locations, posing a considerable threat as it is now accessible on the dark web.

---

Intel Sued Over ‘Downfall’ CPU Vulnerability 

A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall. The post Intel Sued Over ‘Downfall’ CPU Vulnerability  appeared first on SecurityWeek.

---

France, UK Seek Greater Regulation of Commercial Spyware   

France and the UK are calling for greater regulation of commercial surveillance software in the wake of recent Pegasus and Predator spyware scandals. The post France, UK Seek Greater Regulation of Commercial Spyware    appeared first on SecurityWeek.

---

Google Ads Push Malicious CPU-Z App From Fake Windows News Site

When users click on the ad, they are redirected to a fake Windows news site, where they are prompted to download a digitally signed CPU-Z installer. This installer contains a malicious PowerShell script known as the 'FakeBat' malware loader.

---

Downtime cost of an application DDoS attack averages $6130 per minute

A new report highlights downtime due to a successful application DDoS attack costs organizations an average of $6,130 per minute. 

---

Security leaders discuss ChatGPT DDoS attack

Open AI announced that periodic outages across its popular AI chatbot ChatGPT were due to an abnormal traffic pattern reflective of a DDoS attack.

---

Russian Hackers Sandworm Cause Power Outage in Ukraine Amidst Missile Strikes

The notorious Russian hackers known as Sandworm targeted an electrical substation in Ukraine last year, causing a brief power outage in October 2022. The findings come from Google's Mandiant, which described the hack as a "multi-event cyber attack" leveraging a novel technique for impacting industrial control systems (ICS). "The actor first used OT-level living-off-the-land (LotL) techniques to

---

Imperial Kitten APT Claws at Israeli Organizations with Multiyear Spy Effort

An Iranian hacking group known as Charming Kitten targeted organizations in Israel's transportation, logistics, and technology sectors last month. This increase in Iranian cyber activity coincided with the start of Israel's war with Hamas.

---

Signal Tests Usernames That Keep Your Phone Number Private

Signal is testing a new feature that allows users to conceal their phone numbers by using public usernames. The feature is currently being tested in a separate staging environment and users can access it by installing pre-beta builds.

---

US Government Issues Guidance on SBOM Consumption

CISA, NSA, and ODNI issue new guidance on managing open source software and SBOMs to maintain awareness on software security. The post US Government Issues Guidance on SBOM Consumption appeared first on SecurityWeek.

---

EU Cyber Resilience Act May Cause Bottlenecks, Companies Say

Concerns have been raised about the provision in the act that requires software developers to report vulnerabilities within 24 hours, as it may overwhelm cyber agencies and pose security risks.

---

1.3 Million Maine Residents Impacted by MOVEit Hack

The State of Maine says the personal information of 1.3 million individuals was compromised in the MOVEit attack. The post 1.3 Million Maine Residents Impacted by MOVEit Hack appeared first on SecurityWeek.

---

Kyocera AVX Says Ransomware Attack Impacted 39,000 Individuals

The LockBit ransomware gang claimed responsibility for the breach and leaked stolen data, including passport scans and financial documents, potentially exposing proprietary designs and patented information.

---

Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say

A ransomware attack on China’s biggest bank, the Industrial and Commercial Bank of China Financial Services, disrupts Treasury market trades. The post Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say appeared first on SecurityWeek.