Latest Cybersecurity News and Articles
10 April 2023
Apple addressed the two zero-day vulnerabilities in iOS 16.4.1, iPadOS 16.4.1, macOS Ventura 13.3.1, and Safari 16.4.1 by improving input validation and memory management.
10 April 2023
Cloud computing makes data storage scalable and readily accessible. More than 85% of companies store some or all of their data in the cloud, according to a Blancco study.
10 April 2023
Once it learned of the breach, the district investigated, with the help of cybersecurity professionals. The initial group of employees affected was informed in late September and October 2022, Chief Strategy Officer Chris Thompson said.
10 April 2023
Belgian HR and payroll giant SD Worx has suffered a cyberattack causing them to shut down all IT systems for its UK and Ireland services. The company's login portals for other European countries remain operational.
10 April 2023
The school district detected "unusual activity on the district’s network," Thursday, and responded by shutting down the network and "almost all core technology systems," while staff began an investigation, as per an update posted on its website.
10 April 2023
EXECUTIVE SUMMARY: The Log4j vulnerability posed a multi-faceted challenge for organizations and management teams worldwide. Leading cyber security authorities have urged organizations to remain acutely aware of the persistent dangers posed by Log4j threats. In the eyes of some experts, Log4j represented one of the most dangerous flaws disclosed in recent years. Upon its discovery, […]
The post The new & dangerous way Log4j is being exploited appeared first on CyberTalk.
10 April 2023
Samsung Electronics is warning its employees of the potential risks associated with the use of ChatGPT, explaining that there is no way to prevent the leak of the data provided to OpenAI’s chatbot service.
10 April 2023
In the 9near.org website, which is now blocked, the hacker threatened to release all the information to the public unless the breached state agency contacted him within a deadline.
10 April 2023
The State of Exposure Management report by XM Cyber and Centia Institute found that 75% of security exposures do not put critical assets at risk.
10 April 2023
Play, the threat group responsible for the ransomware attack, posted the second leak on their site, following up with their first data dump at the beginning of March, with Oakland’s data sizing up to 10 gigabytes.
10 April 2023
A person with knowledge of the incident told TechCrunch that data from Proskauer’s merger and acquisitions business was left on an unsecured Microsoft Azure cloud server.
10 April 2023
An Estonian national has been charged in the U.S. for purchasing U.S.-made electronics on behalf of the Russian government and military.
The 45-year-old individual, Andrey Shevlyakov, was arrested on March 28, 2023, in Tallinn. He has been indicted with 18 counts of conspiracy and other charges. If found guilty, he faces up to 20 years in prison.
Court documents allege that Shevlyakov operated
10 April 2023
After the shutdown of BreachedForum, the emergence of ARES has been detected by researchers, which exhibits a behavior similar to a cartel and strives to form associations with other hackers and ransomware operators. Well-known threat actors are already leveraging the ARES platform to sell compromised data, suggesting that the group is gaining traction.
10 April 2023
Threat actors are flooding the npm open source package repository with bogus packages that briefly even resulted in a denial-of-service (DoS) attack.
"The threat actors create malicious websites and publish empty packages with links to those malicious websites, taking advantage of open-source ecosystems' good reputation on search engines," Checkmarx's Jossef Harush Kadouri said in a report
10 April 2023
The Israel Postal Company detected and prevented a cyber attack from a "hostile party" targeting their computer servers. The company shut down part of its computer systems in response to the attack on Wednesday evening.
10 April 2023
Sucuri uncovered details about a massive WordPress infection campaign, Balada Injector, that is active since 2017. The attackers are known to leverage all known and recently discovered theme and plugin vulnerabilities. The campaign has infected over one million WordPress websites over a duration of around five years.
10 April 2023
The standard uses digital certificates to secure the Border Gateway Protocol (BGP) used for exchanging routing information and ensure that the traffic comes through the legitimate network operator controlling the IP addresses on the destination path.
10 April 2023
As technology advances, cyberattacks are becoming more sophisticated. With the increasing use of technology in our daily lives, cybercrime is on the rise, as evidenced by the fact that cyberattacks caused 92% of all data breaches in the first quarter of 2022. Staying current with cybersecurity trends and laws is crucial to combat these threats, which can significantly impact business development
10 April 2023
That's according to new findings from the Microsoft Threat Intelligence team, which discovered the MuddyWater threat group targeting both on-premises and cloud infrastructures in partnership with another emerging activity cluster dubbed DEV-1084.
10 April 2023
In a statement shared on Friday, MSI confirmed the cyberattack and urged users "to obtain firmware/BIOS updates only from its official website," and to avoid using files from other sources.