Latest Cybersecurity News and Articles
20 October 2023
A majority of businesses are actively planning to move towards passwordless technology, with the expectation that passwords will represent less than a quarter of logins within five years or less.
20 October 2023
The tribunal's decision highlights a specific exemption for foreign law enforcement, but does not prevent the ICO from taking action against international companies that process data of individuals in the UK.
20 October 2023
A new information stealer named ExelaStealer has become the latest entrant to an already crowded landscape filled with various off-the-shelf malware designed to capture sensitive data from compromised Windows systems.
"ExelaStealer is a largely open-source infostealer with paid customizations available from the threat actor," Fortinet FortiGuard Labs researcher James Slaughter said in a
20 October 2023
Knight has given a deadline of 308 hours and 2 minutes for the ransom payment, threatening to sell or publicly release the stolen data if the management of US Claims Solutions does not respond within 48 hours.
20 October 2023
The exposed data includes customer names, email addresses, service usage details, and purchase information, but credit card information was not stored in the compromised database.
20 October 2023
The U.S. government has announced the seizure of 17 website domains used by North Korean information technology (IT) workers as part of an illicit scheme to defraud businesses across the world, evade sanctions, and fund the country's ballistic missile program.
The Department of Justice (DoJ) said the U.S. confiscated approximately $1.5 million of the revenue that these IT workers collected from
19 October 2023
The BlackCat ransomware group has introduced a new evasion tool called Munchkin, distributed as an ISO file, allowing them to run ransomware on remote machines. The controller malware is written in Rust and resembles the BlackCat malware family. Organizations are recommended to leverage the updated IOCs associated with the malware to stay safe.
19 October 2023
According to a recent Yubico survey, 80% of respondents are concerned about the security of their online accounts and 39% admit to reusing passwords.
19 October 2023
British startup is working on software to mitigate against the ‘wild west’ of unregulated AI apps harvesting company data at scale.
The post Harmonic Lands $7M Funding to Secure Generative AI Deployments appeared first on SecurityWeek.
19 October 2023
According to a recent phishing report, nearly one in three users are likely to click on a suspicious link or comply with a fraudulent request.
19 October 2023
Thousands of IT workers contracting with U.S. firms have secretly sent millions of dollars to North Korea to fund its missile program.
The post FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program appeared first on SecurityWeek.
19 October 2023
A recent Q3 ransomware report found a nearly 15% increase in ransomware activity since Q2 due to an increased number of ransomware groups.
19 October 2023
An updated version of a sophisticated backdoor framework called MATA has been used in attacks aimed at over a dozen Eastern European companies in the oil and gas sector and defense industry as part of a cyber espionage operation that took place between August 2022 and May 2023.
"The actors behind the attack used spear-phishing mails to target several victims, some were infected with Windows
19 October 2023
The IT manager and his wife stole the personally identifiable information of over 9,000 individuals and sold it for $160,000 in Bitcoin, which was later used for criminal activities.
19 October 2023
A new report reveals cyberattacks are the leading cause of IT downtime and data loss in 2023.
19 October 2023
The leaked data poses serious risks, as threat actors could potentially disrupt services, launch phishing campaigns, and engage in "doxxing" and "swatting" activities, putting customers at risk.
19 October 2023
EDF, the company operating nuclear power plants in the UK, is facing increased regulatory attention after an inspection of its cybersecurity practices. The company failed to provide a comprehensive cybersecurity improvement plan.
19 October 2023
The attackers made use of legitimate tools like Plink to configure port-forwarding rules, enabling remote access via the Remote Desktop Protocol (RDP), and modified Windows firewall rules to facilitate their activities.
19 October 2023
Australian startup ChipherStash raises $3 million in seed funding for technology that keeps data encrypted in use.
The post CipherStash Raises $3 Million for Encryption-in-Use Technology appeared first on SecurityWeek.
19 October 2023
To mitigate the risk, organizations should implement strategies such as employee training, geolocation and geofencing, endpoint data encryption, and secure storage solutions.