Latest Cybersecurity News and Articles
12 September 2023
According to a recent global security report, economic unrest is expected to be the greatest security-impacting hazard in the next 12 months.
12 September 2023
A dark cloud of threats hovers over Windows users as security researchers uncovered a phishing campaign delivering Agent Tesla, OriginBotnet, and RedLine Clipper via maldocs. Attackers can extract a wide range of data from compromised systems, such as credentials, crypto wallet data, and other sensitive information. To stay safe, it is recommended to deploy a robust email security solution and an IDR to thwart such threats in the initial stage.
12 September 2023
Unlike other recent macOS malware, MetaStealer relies on social engineering tactics to persuade victims to launch malicious payloads, often disguised as legitimate files or software.
12 September 2023
The Cybersecurity and Infrastructure Security Agency (CISA) added the security vulnerabilities chained in the zero-click iMessage exploit BLASTPASS to its Known Exploited Vulnerabilities Catalog.
12 September 2023
The hacker group Anonymous Sudan has launched a distributed denial-of-service (DDoS) attack against Telegram in retaliation to the messaging platform’s decision to suspend their primary account, threat intelligence firm SOCRadar reports.
12 September 2023
The ransomware attack was first reported on September 7 by Hinds County administrator Kenny Wayne Jones. Hinds County government offices were forced to close last Thursday and Friday due to employees not being able to access their computers.
12 September 2023
ESET researchers have identified a series of cyberattacks by the Iranian Charming Kitten group using a new Sponsor backdoor. The campaign, named "Sponsoring Access," targeted 34 organizations in Brazil, Israel, and the UAE. Researchers recommend defenders promptly patch any internet-exposed devices and stay watchful for any new applications within their organizations.
12 September 2023
ESET is tracking the cluster under the name Ballistic Bobcat. Victimology patterns suggest that the group primarily singles out education, government, and healthcare organizations, as well as human rights activists and journalists.
12 September 2023
The regulator claimed that over half of women responding to a recent poll said that transparency over how their data is used (59%) and data security (57%) are bigger concerns when choosing an app than cost (55%) and ease of use (55%).
12 September 2023
A new phishing attack is leveraging Facebook Messenger to propagate messages with malicious attachments from a "swarm of fake and hijacked personal accounts" with the ultimate goal of taking over the targets' accounts.
12 September 2023
A new vulnerability disclosed in GitHub could have exposed thousands of repositories at risk of repojacking attacks, new findings show.
The flaw "could allow an attacker to exploit a race condition within GitHub's repository creation and username renaming operations," Checkmarx security researcher Elad Rapoport said in a technical report shared with The Hacker News.
"Successful exploitation of
12 September 2023
At a recent summit, Anne Neuberger, deputy national security advisor for cyber and emerging technology, raised the possibility of a letter-grade rating that would hold key providers accountable for maintaining a certain level of cyber resilience.
12 September 2023
Hospitality and entertainment giant MGM Resorts on Monday said a “cybersecurity issue” forced the shutdown of certain computer systems, including the websites for some of the biggest Las Vegas and New York properties.
12 September 2023
SaaS applications are the backbone of modern businesses, constituting a staggering 70% of total software usage. Applications like Box, Google Workplace, and Microsoft 365 are integral to daily operations. This widespread adoption has transformed them into potential breeding grounds for cyber threats. Each SaaS application presents unique security challenges, and the landscape constantly evolves
12 September 2023
Google has started to roll out its new interest-based advertising platform called the Privacy Sandbox, shifting the tracking of user's interests from third-party cookies to the Chrome browser.
12 September 2023
A threat actor called Redfly has been linked to a compromise of a national grid located in an unnamed Asian country for as long as six months earlier this year using a known malware referred to as ShadowPad.
"The attackers managed to steal credentials and compromise multiple computers on the organization's network," the Symantec Threat Hunter Team, part of Broadcom, said in a report shared with
12 September 2023
The attack likely started on August 26, 2023, when a gov[dot]lk domain user said they had received suspicious links over the past few weeks and that someone may have clicked one.
12 September 2023
A sophisticated phishing campaign is using a Microsoft Word document lure to distribute a trifecta of threats, namely Agent Tesla, OriginBotnet, and OriginBotnet, to gather a wide range of information from compromised Windows machines.
"A phishing email delivers the Word document as an attachment, presenting a deliberately blurred image and a counterfeit reCAPTCHA to lure the recipient into
12 September 2023
China's cyber espionage activities, including hacking into rival nations' digital systems, pose a significant threat to the government and private sector of Western countries.
12 September 2023
Google on Monday released an emergency Chrome 116 security update to patch the fourth zero-day vulnerability discovered in the browser in 2023. Tracked as CVE-2023-4863, it is a critical severity heap buffer overflow issue in the WebP component.