Latest Cybersecurity News and Articles

---

The need for robust supply chain defenses to protect sensitive data

Whether a multi-national enterprise or a small start-up, you can be at risk of a cyberattack committed by increasingly sophisticated cybercriminals.

---

Don Kleoppel named CISO at Greenway Health

Greenway Health announced Don Kleoppel as its new Chief Information and Security Officer (CISO).

---

Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit

Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society in North America, Central Asia, Southeast Asia, Europe, and the Middle East. According to findings from a group of researchers from the Citizen Lab, the spyware campaign was directed against journalists, political opposition figures, and an NGO worker in 2021.

---

Western Digital restores local access to My Cloud Home customers following security breach

Western Digital has restored a limited amount of data access to customers after an unauthorized actor got into its computer network and stole company information in late March.

---

The Service Accounts Challenge: Can't See or Secure Them Until It's Too Late

Here's a hard question to answer: 'How many service accounts do you have in your environment?'. A harder one is: 'Do you know what these accounts are doing?'. And the hardest is probably: 'If any of your service account was compromised and used to access resources would you be able to detect and stop that in real-time?'.  Since most identity and security teams would provide a negative reply,

---

Information Warfare: The Role of Russia’s Joker DPR

Researchers revealed details about Joker DPR, a pro-Russian hacker group that has become notable in Russia's invasion of Ukraine and often disseminates pro-Russian propaganda through social media. The group claims of collaboration with other pro-Russian hacktivist groups, including Beregini, Sprut, Limma, and Killnet, imply possible coordination with the Russian state. 

---

'Anonymous Sudan' Hackers Target Top Hospitals in Hyderabad, Slow Down Systems

Earlier, the same group targeted airport websites in Hyderabad, New Delhi, Cochin, Goa, and the Airports Authority of India. The group claimed the attacks were carried out on IRCTC and income tax websites as well.

---

US cyber chiefs warn of threats from China and AI

Bots like ChatGPT may not be able to pull off the next big Microsoft server worm or Colonial Pipeline ransomware super-infection but they may help criminal gangs and nation-state hackers develop some attacks against IT, according to NSA's Rob Joyce.

---

CISA Warns About Two New iPhone Flaws Exploited in the Wild

The CISA sounded an alarm against two spyware-style zero-days that affect iPads, Macs, and iPhones. One of the flaws can be abused by any iOS application to run arbitrary code with kernel privileges. In another scenario, attackers can chain the two flaws to cause further damage. The CISA has ordered federal agencies to patch the security flaws by May 1. 

---

Microsoft April 2023 Patch Tuesday fixes one zero-day, 97 flaws

While not actively exploited, Microsoft Office, Word, and Publisher remote code execution vulnerabilities were fixed today that can be exploited simply by opening malicious documents.

---

CAN Injection Attack - A New Tactic to Steal Smart Vehicles

Attackers have found a way through the wiring of headlights to inject malicious code and steal connected smart cars. The technique allows them to send their own signals to the vehicle's central system. Experts suggest keeping the vehicle in a private enclosed area or a well-monitored car parking can prevent an attacker from gaining access to the vehicle.

---

"Juice jacking:" FBI warns against using public charging stations

"Avoid using free charging stations in airports, hotels, or shopping centers," the FBI cautioned on Twitter recently. "Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices."

---

Criminal businesses adopt corporate behavior as they grow

“The criminal underground is rapidly professionalizing – with groups beginning to mimic legitimate businesses that grow in complexity as their membership and revenue increases,” said Jon Clay, VP of threat intelligence at Trend Micro.

---

SAP releases security updates for two critical-severity flaws

SAP has released its April 2023 security updates for several of its products, which include fixes for two critical-severity vulnerabilities that impact the SAP Diagnostics Agent and the SAP BusinessObjects Business Intelligence Platform.

---

Consumers take data control into their own hands amid rising privacy concerns

Data Subject Requests (DSRs), which are formal requests made by individuals to access, modify, or delete their personal data held by a company, increased by 72% from 2021 to 2022, according to DataGrail.

---

Adobe Plugs Gaping Security Holes in Reader, Acrobat

Software maker Adobe on Tuesday shipped patches for at least 56 security vulnerabilities in a wide range of products, some serious enough to expose Windows and macOS users to code execution attacks.

---

Windows zero-day vulnerability exploited in ransomware attacks

Microsoft has patched a zero-day vulnerability in the Windows Common Log File System (CLFS), actively exploited by cybercriminals to escalate privileges and deploy Nokoyawa ransomware payloads.

---

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

It's the second Tuesday of the month, and Microsoft has released another set of security updates to fix a total of 97 flaws impacting its software, one of which has been actively exploited in ransomware attacks in the wild. Seven of the 97 bugs are rated Critical and 90 are rated Important in severity. Interestingly, 45 of the shortcomings are remote code execution flaws, followed by 20

---

Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack

Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows and macOS was the handiwork of a threat actor with North Korean nexus. The findings are the result of an interim assessment conducted by Google-owned Mandiant, whose services were enlisted after the intrusion came to light late last month. The threat intelligence

---

As the west tries to limit TikTok’s reach, what about China’s other apps?

With government concerns over national security growing, Beijing’s influence over platforms such as WeChat and Shein could come under scrutinyAs TikTok, the world’s most popular app, comes under increasing scrutiny in response to data privacy and security concerns, lawmakers in the west may soon set their sights on other Chinese platforms that have gone global.TikTok was built by ByteDance as a foreign version of its popular domestic video-sharing platform, Douyin. But it is far from being ByteDance’s only overseas moneymaker. The Chinese company owns dozens of apps that are available overseas, many of them English-language versions of Chinese offerings. Continue reading...