Latest Cybersecurity News and Articles

---

Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

A new cyberattack campaign is leveraging the PowerShell script associated with a legitimate red teaming tool to plunder NTLMv2 hashes from compromised Windows systems primarily located in Australia, Poland, and Belgium.

---

CISA Director Says Critical Infrastructure Cyber Incident Reporting Rules Almost Ready

Final work is underway for the Cyber Incident Reporting for Critical Infrastructure Act, which CISA Director Jen Easterly expects to be done by the end of the year or early 2024 at the latest, she said at the Billington Cybersecurity Summit.

---

AP Stylebook Breach May Have Hit Hundreds of Journalists

The Associated Press (AP) has warned that users of a popular writing style guide have been hit by phishing attacks after their personal information was compromised in a data breach.

---

Baseline Standards for BYOD Access Requirements

According to a survey by Jamf, nearly half of European enterprises lack a formal BYOD policy, leaving them vulnerable to data security risks associated with employees connecting personal devices to corporate resources.

---

Microsoft Teams Phishing Attack Pushes DarkGate Malware

The campaign started in late August 2023, when Microsoft Teams phishing messages were seen being sent by two compromised external Office 365 accounts to other organizations.

---

Russian Infosec Boss Gets Nine Years Sentence for Hack-And-Trade Operation

Russian owner of security firm M-13, Vladislav Klyushin, has been sentenced to nine years in prison for his role in a cybercrime operation that stole confidential financial information and made $93 million through insider trading.

---

Microsoft Teams Phishing Campaign Deploys DarkGate Malware

A recent phishing campaign leverages Microsoft Teams messages to disseminate the powerful DarkGate Loader malware via malicious attachments. The existing security measures in Microsoft Teams, such as Safe Attachments and Safe Links, were unable to identify or prevent this attack. 

---

How to Prevent API Breaches: A Guide to Robust Security

With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If you aren’t familiar with the term, APIs allow applications to communicate with each other and they play a vital role in modern software development. However, the rise of API use has also led to an increase in the number of API breaches.

---

Dymocks Booksellers Suffers Data Breach Impacting 836,000 Customers

The company was informed that its customer data was stolen on September 6th, 2023, by Troy Hunt, the creator of the data breach notification service 'Have I Been Pwned' (HIBP), after a threat actor released it on a hacking forum.

---

Google Chrome Rolls Out Support for 'Privacy Sandbox' to Bid Farewell to Tracking Cookies

Google has officially begun its rollout of Privacy Sandbox in the Chrome web browser to a majority of its users, nearly four months after it announced the plans. "We believe it is vital to both improve privacy and preserve access to information, whether it's news, a how-to-guide, or a fun video," Anthony Chavez, vice president of Privacy Sandbox initiatives at Google, said. "Without viable

---

Report: 74% of Organizations Witnessed Multiple Breaches Due to API Vulnerabilities

According to the API security company Traceable, in collaboration with the Ponemon Institute, 60% of organizations surveyed reported at least one breach within the past two years, with 74% experiencing three or more incidents.

---

Technical Analysis of HijackLoader

HijackLoader has been observed loading various malware families such as Danabot, SystemBC, and RedLine Stealer. The malware uses syscalls to evade security solutions, has anti-analysis techniques, and delays code execution at different stages.

---

UK Government Backs Down on Anti-Encryption Stance

The UK government appears to have pulled back on a controversial clause in its forthcoming Online Safety Bill that would have forced tech companies to snoop on users’ messages.

---

Rise in Tech-Support Scams Abusing Windows Action Center Notifications

These scams now impersonate security providers like McAfee and Avast and use pirated movie streaming websites and social media platforms like X (formerly Twitter) to direct users to fraudulent tech-support pages.

---

Certa Raises $35M to Bring AI to Third-Party Risk Management

The San Francisco-based company plans to invest in artificial intelligence (AI) that converts text-based policies into controlled workflows integrated with third-party tools.

---

Cisco Security Appliance Zero-Day Flaw is Under Attack by Ransomware Crooks

The vulnerability allows attackers to conduct password spraying and brute-force attacks, potentially leading to the identification of valid credentials and unauthorized remote access VPN sessions.

---

Cisco Security Appliance Zero-Day Flaw is Under Attack by Ransomware Crooks

The vulnerability allows attackers to conduct password spraying and brute-force attacks, potentially leading to the identification of valid credentials and unauthorized remote access VPN sessions.

---

Washington DC-Based Group Targeted in Apparent Pegasus Hack

Researchers have claimed that an individual employed by a Washington DC-based organization with international offices was targeted with the Pegasus spyware, raising new concerns about the proliferation of spyware that can infect Apple devices.

---

Massive DDoS Attack on US Financial Company Thwarted by Cybersecurity Firm

The attack against the company, detected last week, peaked at 633.7 gigabits of traffic per second. According to the cloud computing company Gcore, as of this year, DDoS attacks can reach as high as 800 Gbps.

---

Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

A new cyber attack campaign is leveraging the PowerShell script associated with a legitimate red teaming tool to plunder NTLMv2 hashes from compromised Windows systems primarily located in Australia, Poland, and Belgium. The activity has been codenamed Steal-It by Zscaler ThreatLabz. "In this campaign, the threat actors steal and exfiltrate NTLMv2 hashes using customized versions of Nishang's