Latest Cybersecurity News and Articles


AresLoader Malware Attacking Citrix Users Through Malicious GitLab Repo

03 May 2023
Cyble has recently detected AresLoader, a novel loader that is found to be disseminating numerous malware families. Malware loaders are designed to deploy and execute diverse malware strains on the targeted computer system of the victim.

Promising Jobs at the U.S. Postal Service, ‘US Job Services’ Website Leaks Customer Data

03 May 2023
A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers.

Chrome 113 Released With 15 Security Patches

03 May 2023
Released roughly two weeks after Google resolved two zero-day vulnerabilities in the popular browser, the latest Chrome update only resolves medium- and low-severity flaws, despite the major version change.

Most open source maintainers still consider themselves hobbyists, despite compensation pledges

03 May 2023
Despite a major push to strengthen the security of the software supply chain, a report released Tuesday from Tidelift shows more than 60% of open source maintainers describe themselves as unpaid hobbyists.

Murfreesboro Medical Clinic Closed for Multiple Days After Cyberattack

03 May 2023
The criminal cyberattack on April 22 led Murfreesboro Medical Clinic & SurgiCenter to initiate an emergency shutdown of their network to limit the spread of stolen information within their systems.

Gary Starling appointed as CISO at IntelePeer

03 May 2023
IntelePeer recently named Gary Starling as CISO. Starling brings with him more than 20 years of domestic and multi-national IT and information security experience.

Card Skimmers and ATMs Used to Drain EBT Accounts in SoCal

03 May 2023
The suspects are accused of using card skimmers and ATMs to drain electronic benefit transfer (EBT) accounts, which are used to pay for food through the Supplemental Nutrition Assistance Program (SNAP).

How AI and other technologies have changed password management

03 May 2023
AI has changed the way security leaders look at passwords. Learn more in this Security podcast episode with Parteek Saran, founder and CEO of Uno. 

Häfele recovers from ransomware attack with new SASE platform

03 May 2023
An international manufacturer and supplier of furniture fittings, recovered from a recent ransomware attack after utilizing a single-vendor SASE platform. 

Attacks increasingly use malicious HTML email attachments

03 May 2023
Researchers warn that attackers are relying more on malicious HTML files in their attacks, with malicious files now accounting for half of all HTML attachments sent via email.

Google will remove secure website indicators in Chrome 117

03 May 2023
The lock icon will be changed in Chrome 117 with a "variant of the tune icon," a user interface element commonly linked to app settings and designed to show that it's a clickable item.

Google Introduces Passwordless Secure Sign-In with Passkeys for Google Accounts

03 May 2023
Almost five months after Google added support for passkeys to its Chrome browser, the tech giant has begun rolling out the passwordless solution across Google Accounts on all platforms. Passkeys, backed by the FIDO Alliance, are a more secure way to sign in to apps and websites without having to use a traditional password. This, in turn, can be achieved by simply unlocking their computer or

Apple and Google try anti-stalking spec for Bluetooth tags

03 May 2023
Though Tile has been selling Bluetooth Low Energy (BLE) wireless tracking tags for a decade, it wasn't until 2021, when Samsung introduced its Galaxy SmartTag and Apple introduced its AirTag, that reports of abuse of the devices became commonplace.

Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

03 May 2023
A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in Taiwan, Thailand, the Philippines, and Fiji after more than six months of no activity. Trend Micro attributed the intrusion set to a cyber espionage group it tracks under the name Earth Longzhi, which is a subgroup within APT41 (aka HOODOO

Tython: Open-source Security as Code framework and SDK

03 May 2023
Tython revolutionizes how security and development teams operate and collaborate — it democratizes security for developers, enables development and security to work autonomously, and creates shared responsibility around security.

Meta Warns of Cyberespionage Campaigns Targeting Military Personnel in South Asia

03 May 2023
State-linked hackers in Pakistan have been spying on military personnel in India and the Pakistan Air Force using fake apps and websites to compromise their personal devices, Meta announced on Wednesday.

Danish Customers Targeted by Active PostNord DK Phishing Campaign

03 May 2023
According to a tip sent to Heimdal by an anonymous reader, the APT’s choice in phishing is an email in which the victim is informed about the status of an unclaimed postal package.

Malicious content lurks all over the web

03 May 2023
On average, five out of every 1,000 enterprise users attempted to download malware in Q1 2023, and new malware families and variants represented 72% of those malware downloads, according to Netskope.

How Tax Credits Could Present Near-Term Motivation for More Secure Devices

03 May 2023
During a House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection hearing on Thursday, CISA Director Jen Easterly told lawmakers that “innovation should not trump safety and security in a world where we all rely on tech.”

Level Finance Crypto Exchange Hacked to Steal $1.1 Million Worth of Tokens

03 May 2023
Hackers exploited a Level Finance smart contract vulnerability to drain 214,000 LVL tokens from the decentralized exchange and swapped them for 3,345 BNB, worth approximately $1,100,000.