Latest Cybersecurity News and Articles

---

Socks5Systemz Proxy Botnet Infects Around 10,000 Systems Worldwide

Security experts took the wraps off of Socks5Systemz, a proxy botnet distributed through PrivateLoader and Amadey, affecting approximately 10,000 systems globally. BitSight mapped at least 53 servers of Socks5Systemz, all located in Europe and distributed across France, Bulgaria, Netherlands, and Sweden. BitSight has shared IoCs for the current threat, which should be used to understand the attack pattern and infrastructures used.

---

Organizations face an average of 86 ransomware attacks annually

According to a recent Akamai Technologies report, organizations experienced an average of 86 annual ransomware attacks in the past 12 months.

---

Data breach and identity protection concerns are at a all time high

According to a report, 73% of respondents expressed concerns about their personal and financial data being at risk during holiday shopping.

---

Travelers to Acquire Cyberinsurance Firm Corvus for $435 Million

Property and casualty insurance giant Travelers has entered into an agreement to acquire Corvus Insurance Holdings for approximately $435 million. The post Travelers to Acquire Cyberinsurance Firm Corvus for $435 Million appeared first on SecurityWeek.

---

SideCopy APT's Multi-Platform Onslaught Targets Indian Government and Defense Entities

SideCopy is employing phishing tactics and using compromised domains with reused IP addresses to distribute malicious files and deploy malware, including a Linux variant of the Ares RAT, indicating a multi-platform approach in their attacks.

---

New Jupyter Infostealer Version Emerges with Sophisticated Stealth Tactics

An updated version of an information stealer malware known as Jupyter has resurfaced with "simple yet impactful changes" that aim to stealthily establish a persistent foothold on compromised systems. "The team has discovered new waves of Jupyter Infostealer attacks which leverage PowerShell command modifications and signatures of private keys in attempts to pass off the malware as a legitimately

---

QNAP Releases Patch for 2 Critical Flaws Threatening Your NAS Devices

QNAP has released security updates to address two critical security flaws impacting its operating system that could result in arbitrary code execution. Tracked as CVE-2023-23368 (CVSS score: 9.8), the vulnerability is described as a command injection bug affecting QTS, QuTS hero, and QuTScloud. "If exploited, the vulnerability could allow remote attackers to execute commands via a network," the

---

Cyber Intrusion Delays Poll Worker Training in Mississippi’s Largest County Before the Statewide Vote

Election officials in Hinds County, Mississippi, had to rush to complete poll worker training after a breach in early September compromised county computers. This caused a delay in processing voter registration forms.

---

70% of security leaders see software supply chain as top blind spot

According to a cloud native security report by Venafi, 87% percent of security and IT leaders have started moving legacy applications to the cloud.

---

Palo Alto to Acquire Talon, Intensifying Competition in Cloud Data Security 

Technology powerhouse Palo Alto Networks is officially on a billion-dollar shopping spree in the cloud data security space. The post Palo Alto to Acquire Talon, Intensifying Competition in Cloud Data Security  appeared first on SecurityWeek.

---

UK's NCSC Publishes Guidance to Help Firms Prepare for Post-Quantum Cryptography

Post-quantum cryptography (PQC) algorithms should be implemented to replace vulnerable traditional public key cryptography (PKC) algorithms to mitigate the threat of quantum computers.

---

Report: Over Half of Users Report Kubernetes or Container Security Incidents

Cloud-native development practices are creating dangerous new security blind spots for organizations in the US, UK, France, and Germany, according to a new study from Venafi.

---

New Android Dropper-as-a-Service Called SecuriDropper Bypasses Google's Defenses

Dropper malware allows cybercriminals to install payloads on compromised devices. SecuriDropper disguises itself as harmless apps and uses a different Android API to install the payload, mimicking the process used by app marketplaces.

---

American Airlines Pilot Union Recovering After Ransomware Attack

The Allied Pilots Association is restoring its systems after a file-encrypting ransomware attack. The post American Airlines Pilot Union Recovering After Ransomware Attack appeared first on SecurityWeek.

---

US, South Korea and Japan Launch Group to Tackle North Korean Hacking

The FBI has attributed recent cryptocurrency hacks to North Korean-sponsored threat actors, highlighting the need for increased cybersecurity cooperation among liberal democracies in the Pacific.

---

November is Critical Infrastructure Security and Resilience month

The Cybersecurity and Infrastructure Security Agency (CISA) has announced the kickoff of Critical Infrastructure Security and Resilience Month.

---

Iranian APT Targets Israeli Education, Tech Sectors With New Data Wipers

An Iranian APT group known as Agrius has been targeting higher education and technology organizations in Israel with destructive attacks and wipers, including MultiLayer, PartialWasher, and BFG Agonizer, since January 2023.

---

SecuriDropper: New Android Dropper-as-a-Service Bypasses Google's Defenses

Cybersecurity researchers have shed light on a new dropper-as-a-service (DaaS) for Android called SecuriDropper that bypasses new security restrictions imposed by Google and delivers the malware. Dropper malware on Android is designed to function as a conduit to install a payload on a compromised device, making it a lucrative business model for threat actors, who can advertise the capabilities

---

Healthcare’s Road to Redefining Cybersecurity With Modern Solutions

According to a report by Sophos, the rate of data encryption following a ransomware attack in the healthcare sector has reached its highest level in the last three years.

---

Who’s Behind the SWAT USA Reshipping Service?

Last week, KrebsOnSecurity broke the news that one of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. In today's Part II, we'll examine clues about the real-life identity left behind by "Fearless," the nickname chosen by the proprietor of the SWAT USA Drops service.