Latest Cybersecurity News and Articles

---

Were you caught up in the latest data breach? Here's how to tell

Wondering if your information was posted online from a data breach? Here's how to check if your accounts are at risk and what to do next.

---

Blue-chip insights: The value of a CIO & CDO alliance

EXECUTIVE SUMMARY: The partnership between the Chief Information Officer (CIO) and the Chief Data Officer (CDO) is critical in today’s data-driven business landscape. The CIO is responsible for technology infrastructure and development, while the CDO oversees an organization’s information strategy, information governance initiatives, and ensures that data remains actionable. In short, the CIO and the […] The post Blue-chip insights: The value of a CIO & CDO alliance appeared first on CyberTalk.

---

A leak of files could be America’s worst intelligence breach in a decade

The leaked files, which include military assessments on the war in Ukraine and CIA reports on a range of global issues, came to widespread attention when some appeared on Telegram, a messaging app widely used in Russia.

---

Why the EU Should Stop Talking About Digital Sovereignty

Instead of pursuing digital sovereignty, the EU should adopt the concept of digital responsibility, which emphasizes fostering cybersecurity partnerships with trusted organizations outside of government.

---

Fortinet Patches Critical Vulnerability in Data Analytics Solution

Cybersecurity solutions provider Fortinet this week announced the release of security updates across multiple products, including patches for a critical vulnerability in FortiPresence.

---

Announcing the deps.dev API: critical dependency data for secure supply chains

As part of Google’s ongoing efforts to improve open-source security, the Open Source Insights team has built a reliable view of software metadata across five packaging ecosystems.

---

Following the Lazarus group by tracking DeathNote campaign

This threat cluster linked to the North Korean threat actor Lazarus is also known as Operation DreamJob or NukeSped. It's dubbed DeathNote after its malware payloads named Dn.dll or Dn64.dll.

---

FTX bankruptcy filing highlights security failures

Debtors claim that the defunct cryptocurrency exchange FTX lacked any dedicated security personnel and failed to implement critical access controls for billions of dollars in assets.

---

Criminals Pose as Chinese Authorities to Target US-based Chinese Community

Criminals exploit widely publicized efforts by the People’s Republic of China government to harass and facilitate the repatriation of individuals living in the United States to build plausibility for their fraud.

---

How machine learning algorithms detect ransomware attacks

By Zac Amos, Features Editor, Rehack.com. How can businesses and users stay ahead of the ever-evolving risk of ransomware attacks? An increasing number of cyber attacks occur every year, posing a serious threat to users’ privacy and financial well-being. Fortunately, machine learning can give users an edge over hackers using pattern recognition and behavioral analysis. Leveraging pattern […] The post How machine learning algorithms detect ransomware attacks appeared first on CyberTalk.

---

IRS acting CIO: Securing software supply chain remains a challenge for agencies

Finding the right balance between encouraging innovation within development teams and securing the software supply chain remains a challenge for federal agencies, according to the acting chief information officer of the IRS.

---

Ukrainian Hackers Breach Email of APT28 Leader, Who’s Wanted by FBI

Ukrainian hacker group Cyber Resistance, aka Ukrainian Cyber Alliance, has claimed to have hacked the email, social media, and personal accounts of Russian GRU officer Lieutenant Colonel Sergey Alexandrovich Morgachev, the leader of APT28.

---

ChatGPT at work: What’s the cyber risk for employers?

Companies across the world are taking measures to regulate how their employees use OpenAI’s ChatGPT at work. As with all new technologies, generative AI models like ChatGPT can be a source of both benefits and risks.

---

Education sector sees 34% increase in IoT attacks

The education and research sector has experienced a surge in attacks targeting IoT devices with 131 weekly attacks per organization — more than twice the global average and a 34% increase from the year before, according to Check Point Research.

---

Hacked Sites Caught Spreading Malware via Fake Chrome Updates

The attack starts by compromising websites to inject malicious JavaScript code that executes scripts when a user visits them. These scripts will download additional scripts based on whether the visitor is the targeted audience.

---

Seven in eight organizations are experiencing a shortfall of security talent

A recent report by CyberEdge analyzed the recent threat landscape and how it affects security leaders in the workplace facing staff shortages.

---

Global Cyber Alliance releases election cybersecurity recommendations

Ensuring digitized voting data remains secure from the time to someone votes until the election is over remains an international concern.

---

Researchers Warn of Little-Known Spyware That Hacked iPhone Victims With Rogue Calendar Invites

Researchers at Microsoft and Citizen Lab analyzed samples of spyware created by QuaDream, an Israeli firm that has been reported to develop zero-click exploits for iPhones.

---

Eliminating 2% of Exposures Could Protect 90% of Critical Assets

Only 2% of all exposures enable attackers with seamless access to critical assets, while 75% of exposures along attack paths lead to “dead ends.” The findings come from the latest report by XM Cyber, in collaboration with the Cyentia Institute.

---

Kodi Discloses Data Breach After Forum Database for Sale Online

According to an announcement published by the platform on Saturday, hackers stole the forum database by logging into the Admin console using an inactive staff member's credentials.