Latest Cybersecurity News and Articles

---

Iranian Nation-State Actors Employ Password Spray Attacks Targeting Multiple Sectors

Iranian nation-state actors have been conducting password spray attacks against thousands of organizations globally between February and July 2023, new findings from Microsoft reveal. The tech giant, which is tracking the activity under the name Peach Sandstorm (formerly Holmium), said the adversary pursued organizations in the satellite, defense, and pharmaceutical sectors to likely facilitate

---

US-Canada International Joint Commission for Managing Lake and River Systems Suffers Cyberattack

On Wednesday, an ICJ spokesperson confirmed that it was dealing with a cybersecurity issue but declined to elaborate on whether law enforcement has been contacted or if the organization was facing operational issues.

---

Latest Fraud Schemes Targeting the Payments Ecosystem

Threat actors are utilizing advanced techniques such as malvertising and SEO to conduct sophisticated fraud schemes, targeting authentication processes and exploiting technical misconfigurations, according to a report by Visa.

---

Rollbar Discloses Data Breach After Hackers Stole Access Tokens

While inside Rollbar's servers, attackers accessed sensitive customer information, including usernames and email addresses, account names, and project information, such as environment names and service link configuration.

---

Privacy Concerns Cast a Shadow on AI's Potential for Software Development

Organizations prioritize privacy and protection of intellectual property when adopting AI tools, with concerns about AI-generated code introducing security vulnerabilities and lacking copyright protection, according to GitLab.

---

Pennsylvania County Experiences Security Breach With Jail Employee Email

A cyber event last month may have affected the security of some information maintained by Butler County. County officials say they found out on August 8th that an email account related to the County jail was sending unauthorized spam emails.

---

How do security leaders prepare for quantum computing?

Listen to this episode of The Security Podcasts with Greg Wetmore, VP of Software Development at Entrust, as he discusses quantum computing.

---

White House Urging Dozens of Countries to Publicly Commit to Not Pay Ransoms

The U.S. National Security Council (NSC) is urging the governments of all countries participating in the International Counter Ransomware Initiative (CRI) to issue a joint statement announcing they will not pay ransoms to cybercriminals.

---

Federal Agency Warns Healthcare Sector of Akira Ransomware Threats

Federal authorities are warning the health sector about threats posed by Akira, a RaaS group that surfaced about six months ago and has been linked to several dozen attacks on predominately small and midsized entities across many industries.

---

Exiled Russian Journalist's Phone Hacked With Pegasus Spyware

The notorious spyware was reportedly installed on the iPhone of Galina Timchenko, owner of the Russian independent media outlet Meduza, while she was in Berlin for a private conference with other Russian independent journalists living in exile.

---

Anna Brackin appointed to Chief Compliance Officer at Regions Bank

Anna Brackin has been appointed to Chief Compliance Officer at Regions Bank. Brackin will oversee the company’s compliance risk management program. 

---

BatLoader Unleashed in Ongoing Webex Malvertising Campaign

A new malvertising campaign has surfaced, targeting corporate users downloading popular web conferencing software Cisco Webex with BatLoader. Webex itself has not been compromised; rather, threat actors are exploiting brand impersonation to distribute the malware. The malicious ad impersonating it is displayed on top of Google search results. When victims click on the ad, they are redirected to a malicious website, with BatLoader ultimately delivering the DanaBot malware.

---

RedLine and Vidar Stealers Abuse EV Certificates, Shift to Ransomware Payloads

Threat actors are using EV code signing certificates to distribute both information-stealing malware and ransomware, indicating a streamlining of operations and the need for stronger security measures.

---

White House, Federal Cyber Leaders Pledge Renewed Support for Open-Source Security

Top cybersecurity officials from the Biden administration pledged additional support to the open source software community and private sector security executives during the Secure Open Source Software Summit in Washington D.C. on Tuesday.

---

SAP Patches Critical Vulnerability Impacting NetWeaver, S/4HANA

Five of the SAP security notes released this month are rated ‘hot news’, the German software company’s highest rating. Three of them, however, are updates for previously released security notes.

---

AuthMind Raises Seed Funding for its Identity SecOps Platform

The Maryland-based startup, which aims to help businesses protect themselves from identity-related cyberattacks, announced that it has raised an $8.5 million seed round led by Ballistic Ventures, with strategic participation from IBM Ventures.

---

Ongoing Cisco Webex Malvertising Campaign Drops BatLoader

A new malvertising campaign is targeting corporate users who download the Webex web conferencing software. The campaign impersonates Cisco's brand and displays a malicious ad when users search for Webex on Google.

---

Intel Capital Bets on Zenity for Low-Code/No-Code Security

Zenity said the Series A financing was led by Intel Capital and included new investors from Gefen Capital and B5. Existing backers Vertex Ventures and Upwest also expanded equity stakes.

---

New 3AM Ransomware Used as a Backup to LockBit Infection

Symantec researchers spotted a new ransomware family called 3AM that is written in Rust and attempts to stop services and delete Volume Shadow copies before encrypting files. The ransomware is currently being used in limited attacks. Its exact origins remain unknown. It is recommended that organizations work on improving their defenses by investigating IOCs associated with the ransomware strain.

---

Greater Manchester police officers’ data hacked in cyber-attack

Details of thousands of officers may have been taken in ransomware attack on third-party supplierThe details of thousands of Greater Manchester police officers have been hacked as part of a cyber-attack.The force said the digital security of one of its third-party suppliers had been breached in a ransomware attack that was being taken “extremely seriously”. Continue reading...