Latest Cybersecurity News and Articles

---

iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones

New iLeakage side-channel speculative execution attack exploits Safari to steal sensitive information from Macs and iPhones. The post iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones appeared first on SecurityWeek.

---

Critical Flaw in NextGen's Mirth Connect Could Expose Healthcare Data

The vulnerability (CVE-2023-43208) is a patch bypass for a critical remote command execution vulnerability (CVE-2023-37679), and all instances of Mirth Connect are susceptible to it.

---

Seiko Discloses Data Breach Resulting From BlackCat Ransomware Attack

Seiko Group Corporation (SGC) has confirmed a data breach that occurred in July 2023. The breach resulted in unauthorized access to 60,000 records, including customer data, contact details, employment applicant information, and personnel details.

---

Apple Ships Major iOS, macOS Security Updates

The updates cover fixes for a range of components including Contacts, WebKit, and kernel, among others, and aim to fix code execution flaws and privilege escalation issues.

---

The holiday season leads to a rise in business payment fraud

A payment security report found that three-fourths of business leaders are more concerned about business payment fraud during the holiday season.

---

Redcliffe Labs Database with Over 12 Million Patient Records Exposed

The diagnostic service left 7 terabytes of sensitive data vulnerable, including medical diagnostic scans, test results, patient information, and even the names of attending doctors.

---

Winter Vivern APT Resurfaces to Target European Entities

The Winter Vivern espionage group targeted European government entities and a think tank using a zero-day vulnerability in Roundcube Webmail, enabling email exfiltration with minimal interaction. The payload used in the campaign worked even on fully patched Roundcube instances. Despite the low sophistication of the group’s toolset, Winter Vivern remains a significant threat to organizations in Europe.

---

Google Announces Bug Bounty Program and Other Initiatives to Secure AI

Google announces a bug bounty program and other initiatives for increasing the safety and security of AI. The post Google Announces Bug Bounty Program and Other Initiatives to Secure AI appeared first on SecurityWeek.

---

Microsoft Warns as Scattered Spider Expands from SIM Swaps to Ransomware

The prolific threat actor known as Scattered Spider has been observed impersonating newly hired employees in targeted firms as a ploy to blend into normal on-hire processes and takeover accounts and breach organizations across the world. Microsoft, which disclosed the activities of the financially motivated hacking crew, described the adversary as "one of the most dangerous financial criminal

---

Japanese Watchmaking Giant Seiko Confirms Personal Data Stolen in Ransomware Attack

Japanese watchmaking giant Seiko has confirmed that personal information was stolen in a recent ransomware attack. The post Japanese Watchmaking Giant Seiko Confirms Personal Data Stolen in Ransomware Attack appeared first on SecurityWeek.

---

Octo Tempest aka 0ktapus has Become 'One of the Most Dangerous Financial' Hacker Groups

The group gains initial access through social engineering tactics, including impersonating victims and using fake login portals, to target a wide range of industries for extortion.

---

Weapons Systems Provide Valuable Lessons for ICS/OT Security

Cybersecurity techniques and penetration testing used in the field of weapons systems can provide valuable lessons for ICS/OT security. The post Weapons Systems Provide Valuable Lessons for ICS/OT Security appeared first on SecurityWeek.

---

Record-Breaking 100 Million RPS DDoS Attack Exploits HTTP/2 Rapid Reset Flaw

Cloudflare on Thursday said it mitigated thousands of hyper-volumetric HTTP distributed denial-of-service (DDoS) attacks that exploited a recently disclosed flaw called HTTP/2 Rapid Reset, 89 of which exceeded 100 million requests per second (RPS). "The campaign contributed to an overall increase of 65% in HTTP DDoS attack traffic in Q3 compared to the previous quarter," the web infrastructure

---

Amazon Rolls Out Independent Cloud for Europe to Address Stricter Privacy Standards

Amazon is rolling out an independent cloud for Europe as it looks to address strict regulations that companies and those in the public sector face in the European Union. The post Amazon Rolls Out Independent Cloud for Europe to Address Stricter Privacy Standards appeared first on SecurityWeek.

---

Iranian Group Tortoiseshell Launches New Wave of IMAPLoader Malware Attacks

The attacks primarily target the maritime, shipping, and logistics sectors in the Mediterranean region, with high-value targets being subjected to the deployment of IMAPLoader.

---

Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions

SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, with challenges and solutions the focus of Day 3. The post Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions appeared first on SecurityWeek.

---

Chilean Telecom Giant GTD Suffers Disruptive Attacks Affecting its Infrastructure-as-a-Service Platform

The attack, confirmed to be a ransomware attack by Chile's CSIRT, involved the Rorschach ransomware variant and utilized DLL sideloading vulnerabilities in legitimate software executables to load the malicious DLL.

---

The Danger of Forgotten Pixels on Websites: A New Case Study

While cyberattacks on websites receive much attention, there are often unaddressed risks that can lead to businesses facing lawsuits and privacy violations even in the absence of hacking incidents. A new case study highlights one of these more common cases.  Download the full case study here. It's a scenario that could have affected any type of company, from healthcare to finance, e-commerce to

---

FakeUpdateRU Chrome Update Infection Spreads Trojan Malware

The malware overwrites the main index.php file of websites, affecting both WordPress and other CMS platforms. The fake update page looks exactly like the official Google Chrome download page.

---

Servicenow Quietly Fixes Eight-Year-Old Data Exposure Flaw

ServiceNow has fixed a flaw that allowed unauthenticated attackers to steal sensitive data. The flaw was highlighted by security researcher Aaron Costello, who found that the default configurations of ServiceNow's widgets exposed personal data.