Latest Cybersecurity News and Articles

---

Pakistani Hackers Use Linux Malware Poseidon to Target Indian Government Agencies

The Pakistan-based advanced persistent threat (APT) actor known as Transparent Tribe used a two-factor authentication (2FA) tool used by Indian government agencies as a ruse to deliver a new Linux backdoor called Poseidon.

---

Coro Raises $75 Million for Mid-Market Cybersecurity Platform

With the new funding round, the Israel-based company adds Energy Impact Partners to its list of investors, which also includes Balderton Capital, JVP, and Sound Ventures.

---

PLAY Ransomware Strengthens Capabilities With New Tools, Researchers Say

Custom tools also allow for more control over operations, and a decreased likelihood that a group’s particular tooling will be either reverse-engineered or adapted by other groups, the researchers noted.

---

Luz Mabel del Valle hired as Chief Risk Officer at FV Bank

Luz Mabel del Valle has been appointed to Chief Risk Officer (CRO) at FV Bank. De Valle has also been appointed Deputy Chief Compliance Officer.

---

Triple-digit Increase in API and App Attacks on Tech and Retail

Last year was a record-breaker in terms of API and application-based attacks on the EMEA retail sector, with detected threats surging 189%, according to a report by Akamai.

---

DoNot APT Hackers Attack Individuals Using Android Malware via Chatting Apps

Interestingly, the malware samples were disguised as chat apps named Ten Messenger.apk and Link Chat QQ.apk This threat actor has carried out cyberattacks in the South Asian region since 2016 when it was first found to be active.

---

Report: Supplier cyber weaknesses impact big business

A recent report, State of Cyber Security in the Supply Chain 2023, spotlights the key security weaknesses in the supply chain ecosystem.

---

Allurity acquires CloudComputing and Securix to expand into new markets

The former brings a complete and robust offering in identity, zero trust, and information security. The latter adds substantial reinforcement in the areas of identity security, observability, and consultancy.

---

US, UK Agencies Warn of Nation-State Hackers Using Custom Malware on Cisco Routers

Jaguar Tooth is a malware injected directly into the memory of Cisco routers running older firmware versions. Once installed, the malware exfiltrates information from the router and provides unauthenticated backdoor access to the device.

---

Pakistani Hackers Use Linux Malware Poseidon to Target Indian Government Agencies

The Pakistan-based advanced persistent threat (APT) actor known as Transparent Tribe used a two-factor authentication (2FA) tool used by Indian government agencies as a ruse to deliver a new Linux backdoor called Poseidon. "Poseidon is a second-stage payload malware associated with Transparent Tribe," Uptycs security researcher Tejaswini Sandapolla said in a technical report published this week.

---

SpecterOps Scores $25M Funding to Secure ID Attack Paths

The company said the Series A investment was led by Silicon Valley venture outfit Decibel. SpecterOps said the new $25 million cash infusion will be used to expand its services and training products.

---

Experts temporarily disrupted the RedLine Stealer operations

ESET researchers announced to have temporarily disrupted the operations of the RedLine Stealer with the help of GitHub. The two companies teamed up with Flare to curb the operations of the malware operators.

---

Uncovering (and Understanding) the Hidden Risks of SaaS Apps

Recent data breaches across CircleCI, LastPass, and Okta underscore a common theme: The enterprise SaaS stacks connected to these industry-leading apps can be at serious risk for compromise. CircleCI, for example, plays an integral, SaaS-to-SaaS role for SaaS app development. Similarly, tens of thousands of organizations rely on Okta and LastPass security roles for SaaS identity and access

---

Safe Security Raises $50M to Bring ML to Risk Quantification

The Silicon Valley-based company said the Series B funding will allow Safe Security to capitalize on generative artificial intelligence to help nontechnical leaders better understand their organizations security postures.

---

Microsoft: Iranian hackers behind retaliatory cyberattacks on US orgs

Microsoft believes the Iranian government is now allowing state-sponsored threat actors more freedom when conducting attacks, leading to an overall increase in cyberattacks.

---

U.S. and U.K. Warn of Russian Hackers Exploiting Cisco Router Flaws for Espionage

U.K. and U.S. cybersecurity and intelligence agencies have warned of Russian nation-state actors exploiting now-patched flaws in networking equipment from Cisco to conduct reconnaissance and deploy malware against targets. The intrusions, per the authorities, took place in 2021 and targeted a small number of entities in Europe, U.S. government institutions, and about 250 Ukrainian victims. The

---

DoJ: China ran troll farm targeting US-based Chinese dissidents

U.S. authorities allege Chinese operatives ran the campaign from 2016 to the present that willfully caused emotional stress on targets of a harassment campaign along with immediate family members.

---

Living Off the Land (LOTL) attacks: Detecting ransomware gangs hiding in plain sight

By mimicking normal behavior, LOTL attacks make it extremely difficult for IT teams and security solutions to detect any signs of malicious activities. Experienced analysts, however, might be able to pick up on subindicate an LOTL attack.

---

Discarded, not destroyed: Old routers reveal corporate secrets

In the wrong hands, the data gleaned from the devices – including customer data, router-to-router authentication keys, application lists, and much more – is enough to launch a cyberattack.

---

Iranian Government-Backed Hackers Targeting U.S. Energy and Transit Systems

An Iranian government-backed actor known as Mint Sandstorm has been linked to attacks aimed at critical infrastructure in the U.S. between late 2021 to mid-2022. "This Mint Sandstorm subgroup is technically and operationally mature, capable of developing bespoke tooling and quickly weaponizing N-day vulnerabilities, and has demonstrated agility in its operational focus, which appears to align