Latest Cybersecurity News and Articles
24 October 2023
Popular password management solution 1Password said it detected suspicious activity on its Okta instance on September 29 following the support system breach, but reiterated that no user data was accessed.
"We immediately terminated the activity, investigated, and found no compromise of user data or other sensitive systems, either employee-facing or user-facing," Pedro Canahuati, 1Password CTO,
23 October 2023
Chinese authorities have netted thousands of people in a crackdown on cyber scams, but the criminal networks remain intact.
The post China Crackdown on Cyber Scams in Southeast Asia Nets Thousands but Leaves Networks Intact appeared first on SecurityWeek.
23 October 2023
Blockaid raises a Series A funding round to build technology to secure blockchain applications from hacks and scams.
The post Blockaid Emerges From Stealth With $33 Million Investment appeared first on SecurityWeek.
23 October 2023
Hackers access the personal information of Casio customers after compromising the server for an education web application.
The post Casio Says Personal Information Accessed in Web Application Server Hack appeared first on SecurityWeek.
23 October 2023
The city of Philadelphia released a notice regarding a data breach that occurred between May and July of 2023, including suspicious email activity.
23 October 2023
Rockwell Automation agreed to acquire ICS/OT cybersecurity firm Verve Industrial Protection to expand its offerings.
The post Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial appeared first on SecurityWeek.
23 October 2023
SolarWinds patches high-severity flaws in its Access Rights Manager product, including three unauthenticated remote code execution issues.
The post SolarWinds Patches High-Severity Flaws in Access Rights Manager appeared first on SecurityWeek.
23 October 2023
Researchers have linked DoNot Team, a threat actor believed to be of Indian origin, to a .NET-based backdoor called Firebird. The backdoor has been used to target victims in Pakistan and Afghanistan.
23 October 2023
Researchers suspect that Meta was either tricked into providing access to the threat actor or the threat actor obtained credentials for a legitimate law enforcement account.
23 October 2023
Since 2020, Island has raised a total of $325 million to help protect corporate data flowing through SaaS and internal web applications.
The post Enterprise Browser Startup Island Banks $100M in Funding appeared first on SecurityWeek.
23 October 2023
QNAP urges customers to implement security measures such as changing default access port numbers, using strong passwords, and updating firmware to protect against future attacks.
23 October 2023
A new report reveals more than half of senior cybersecurity decision makers find the biggest concern when taking on a new CISO role is receiving an inaccurate audit of the company's security posture.
23 October 2023
The District of Columbia Board of Elections says full voter roll compromised in a recent data breach at hosting provider DataNet.
The post DC Board of Elections Says Full Voter Roll Compromised in Data Breach appeared first on SecurityWeek.
23 October 2023
The FTC sent a report to congress in an attempt to extend the Undertaking Spam, Spyware and Fraud Enforcement With Enforcers Beyond Borders Act.
23 October 2023
Proofpoint researchers have discovered a new version of the Grandoreiro malware that is targeting victims in both Mexico and Spain. This is unusual as the malware has historically only targeted Portuguese and Spanish speakers in Brazil and Mexico.
23 October 2023
A potential data breach in Philadelphia's email system may have exposed protected health information, including names, addresses, birth dates, Social Security numbers, medical information, and some financial information.
23 October 2023
A 22-year-old New Jersey man has been sentenced to more than 13 years in prison for participating in a firebombing and a shooting at homes in Pennsylvania last year. Patrick McGovern-Allen was the subject of a Sept. 4, 2022 story here about the emergence of "violence-as-a-service" offerings, where random people from the Internet hire themselves out to perform a variety of local, physical attacks, including firebombing a home, "bricking" windows, slashing tires, or performing a drive-by shooting at someone's residence.
23 October 2023
Quasar RAT, an open-source remote access trojan also known as CinaRAT or Yggdrasil, has been spotted leveraging a new Microsoft file as part of its DLL sideloading process to stealthily drop malicious payloads on compromised Windows systems. Once the Quasar RAT payload is executed in the computer's memory, it further employs the process hollowing technique that allows it to conceal its malicious intent and make detection more challenging.
23 October 2023
The personal information of D.C. voters, including partial Social Security numbers and driver's license numbers, may have been exposed in a data breach affecting the Board of Elections' voter roll.
23 October 2023
Cisco has found a second zero-day vulnerability that has been exploited in recent attacks as the number of hacked devices has started dropping.
The post Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops appeared first on SecurityWeek.