Latest Cybersecurity News and Articles
16 October 2023
SpyNote hides its presence on the Android home screen and Recents screen, making it difficult to detect, and grants itself additional permissions to record audio, phone calls, log keystrokes, and capture screenshots.
16 October 2023
The group claims to have stolen 5TB of patients’ and employee’s information, backups, PII documents, and more. The gang also published a sample as proof of the stolen data.
16 October 2023
The Android banking trojan known as SpyNote has been dissected to reveal its diverse information-gathering features.
Typically spread via SMS phishing campaigns, attack chains involving the spyware trick potential victims into installing the app by clicking on the embedded link, according to F-Secure.
Besides requesting invasive permissions to access call logs, camera, SMS messages, and external
16 October 2023
The ALPHV ransomware group has claimed to have attacked QSI Inc., a major ITM and ATM solutions provider that works with NCR Corporation. The cyberattack could potentially expose sensitive data from various sectors.
16 October 2023
Microsoft is adding new features to the Kerberos protocol, to eliminate the use of NTLM for Windows authentication.
The post Microsoft Improving Windows Authentication, Disabling NTLM appeared first on SecurityWeek.
16 October 2023
SaaS Security’s roots are in configuration management. An astounding 35% of all security breaches begin with security settings that were misconfigured. In the past 3 years, the initial access vectors to SaaS data have widened beyond misconfiguration management. “SaaS Security on Tap” is a new video series that takes place in Eliana V's bar making sure that the only thing that leaks is beer (
16 October 2023
UK’s financial watchdog FCA imposes a £11 million (approximately $13.5 million) fine to Equifax over the 2017 data breach.
The post Equifax Gets $13.5 Million Fine Over 2017 Data Breach appeared first on SecurityWeek.
16 October 2023
A vulnerability affecting Milesight industrial routers, tracked as CVE-2023-4326, may have been exploited in attacks.
The post Milesight Industrial Router Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek.
16 October 2023
The UK’s cybersecurity professionals believe they have excellent career prospects and are employed in a “booming” sector, but many are working unsafe hours, according to a new report from the Chartered Institute of Information Security (CIISec).
16 October 2023
The NoEscape ransomware group employs aggressive multi-extortion tactics, combining data exfiltration, encryption, and distributed denial of service attacks to pressure organizations into paying large ransom demands.
16 October 2023
The feature involves SMS-based two-factor authentication for game developers on Steam, where they receive a confirmation code via text message to log into their accounts.
16 October 2023
A threat actor targets Israelis with spyware masquerading as an Android application for receiving rocket alerts.
The post Spyware Caught Masquerading as Israeli Rocket Alert Applications appeared first on SecurityWeek.
16 October 2023
Lumma Stealer robs user credentials and is being sold as a service on underground forums. The malware is distributed through direct messages on Discord, where victims are tricked into downloading and executing a malicious file.
16 October 2023
Environmental Protection Agency (EPA) withdraws recent water sector cybersecurity rules due to lawsuits by states and water associations.
The post EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits appeared first on SecurityWeek.
16 October 2023
Encrypted messaging app Signal has pushed back against "viral reports" of an alleged zero-day flaw in its software, stating it found no evidence to support the claim.
"After responsible investigation *we have no evidence that suggests this vulnerability is real* nor has any additional info been shared via our official reporting channels," it said in a series of messages posted in X (formerly
16 October 2023
NTLM, which has been used as a fallback mechanism, relies on a three-way handshake and password hashing, while Kerberos uses a two-part process and encryption. NTLM has security weaknesses and is vulnerable to relay attacks.
16 October 2023
The Ransomed.vc gang attempted to extort Colonial Pipeline last week but was unsuccessful. As per researchers, the stolen documents shared by the gang appear to be unrelated to Colonial Pipeline.
16 October 2023
Equifax Ltd's outsourcing of data processing to its US parent company led to delays in addressing the breach, as the UK arm was only informed minutes before the incident was publicly announced, hindering its ability to respond effectively.
16 October 2023
Researchers have developed an algorithm using machine learning techniques to detect and prevent man-in-the-middle attacks on unmanned military robots, which are highly susceptible to cyberattacks.
16 October 2023
The collaboration aims to enhance regulatory enforcement activities, exchange information, and implement anti-scam measures in both countries to mitigate the risks faced by citizens and businesses.