Latest Cybersecurity News and Articles

---

Ransomware Attack at NJ County Police Department Locks Up Criminal Investigative Files

The FBI, NJ State Homeland Security's office, and the New Jersey attorney general’s office were all notified of the incident and are assisting in the investigation, several officials said.

---

Researchers Uncover Thriving Phishing Kit Market on Telegram Channels

In yet another sign that Telegram is increasingly becoming a thriving hub for cybercrime, researchers have found that threat actors are using the messaging platform to peddle phishing kits and help set up phishing campaigns. "To promote their 'goods,' phishers create Telegram channels through which they educate their audience about phishing and entertain subscribers with polls like, 'What type

---

How the Last Big Breach Will Help You Prepare for the Next Cyber Crisis

Security teams ought to seize on the opportunities of failures of the past to make meaningful change in how we approach incident response, urged Sarah Armstrong-Smith, chief security advisor at Microsoft, during UK Cyber Week 2023.

---

Researchers Uncover New European Malware-as-a-Service Group

A crew of English-speaking European teenagers with a variety of skills and a propensity for allusions to Greek and Roman mythology are likely behind an up-and-coming cybercrime group called FusionCore.

---

Inside Kremlin's Cyber Arsenal: Unveiling the Secrets of Vulkan Files

Sensitive documents leaked by a whistleblower reveal Moscow-based IT contractor NTC Vulkan's involvement in developing offensive tools for the Russian military, intelligence agencies, and the Russia-linked APT group Sandworm. The leaked documents specifically cover details of three projects, named Scan, Amesit, and Krystal-2B. 

---

New Generation of Phishing Hides Behind Trusted Services

With the increasing use of cloud-based office productivity and collaboration tools, attackers can now easily host and share malicious documents, files, and malware on reputable domains.

---

Medusa Ransomware Claims Attack on Open University of Cyprus

Today, the Medusa ransomware group posted OUC on its data leak site, giving the institute 14 days to respond to its ransom demands. The hackers asked for $100,000. However, it set the same price for both deleting the data as well as for selling it.

---

Broad MFA, rapid patching a must to stop cyberattacks, Marsh McLennan finds

Companies currently implement MFA at many different levels, however, the report shows the technique only works if it is broadly applied, according to Scott Stransky, managing director and head of the Marsh McLennan Cyber Risk Analytics Center.

---

Cisco Patches Code and Command Execution Vulnerabilities in Several Products

Cisco this week announced patches for multiple vulnerabilities across its product portfolio, including high-severity issues impacting its Secure Network Analytics and Identity Services Engine (ISE) products.

---

Data-leak flaw in Qualcomm, HiSilicon-based Wi-Fi AP chips

Researchers in China and the US have published details of a security shortcoming in the network processing units (NPUs) in Qualcomm and HiSilicon chips found at the heart of various wireless access points (APs).

---

The Rise of CCTV Hacks in an Evolving Cyber-Threat Landscape

With access to CCTV footage, cybercriminals can do a lot of damage – from learning a household’s daily schedule to plan burglaries to accessing financial or personal information to steal identities for social engineering attacks or fraud.

---

Phishing From Legitimate QuickBooks Domain

In this attack, hackers are sending fake invoices from a legitimate Quickbooks domain. This email comes directly from Quickbooks. It has a QuickBooks email address, meaning it will pass all SPF checks, domain checks, and more.

---

ALPHV Ransomware Affiliate Targets Veritas Backup Bugs

UNC4466, tracked as an affiliate of ALPHV/BlackCat ransomware, was observed abusing three security holes in the Veritas Backup Exec product. The high-severity flaws targeted by the group include CVE-2021-27876, CVE-2021-27877, and CVE-2021-27878. In spite of a fix released in 2021, several endpoints are vulnerable even today.

---

Two-Fifths of IT Pros Told to Keep Breaches Quiet

Over two-fifths (42%) of IT professionals have been told to keep a security breach under wraps, potentially inflaming regulatory compliance risk, according to a new study from Bitdefender.

---

Microsoft leads effort to disrupt illicit use of Cobalt Strike, a dangerous hacking tool in the wrong hands

Microsoft’s Digital Crimes Unit, cybersecurity firm Fortra, and the Health Information Sharing & Analysis Center announced legal action Thursday to seize domains related to criminal activity involving cracked copies of Cobalt Strike.

---

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Google Chrome. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged-on user.

---

Microsoft Takes Legal Action to Disrupt Cybercriminals' Illegal Use of Cobalt Strike Tool

Microsoft said it teamed up with Fortra and Health Information Sharing and Analysis Center (Health-ISAC) to tackle the abuse of Cobalt Strike by cybercriminals to distribute malware, including ransomware. To that end, the tech giant's Digital Crimes Unit (DCU) revealed that it secured a court order in the U.S. to "remove illegal, legacy copies of Cobalt Strike so they can no longer be used by

---

Are Source Code Leaks the New Threat Software vendors Should Care About?

Less than a month ago, Twitter indirectly acknowledged that some of its source code had been leaked on the code-sharing platform GitHub by sending a copyright infringement notice to take down the incriminated repository. The latter is now inaccessible, but according to the media, it was accessible to the public for several months. A user going by the name FreeSpeechEnthousiast committed

---

CISA Warns of Critical ICS Flaws in Hitachi, mySCADA, ICL, and Nexx Products

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published eight Industrial Control Systems (ICS) advisories warning of critical flaws affecting products from Hitachi Energy, mySCADA Technologies, Industrial Control Links, and Nexx. Topping the list is CVE-2022-3682 (CVSS score: 9.9), impacting Hitachi Energy's MicroSCADA System Data Manager SDM600 that could allow an

---

What is an ‘island hopping’ attack? (and how to stop one)

EXECUTIVE SUMMARY: At the mention of island hopping, you’re likely dreaming about adventures in Hawaii, the Caribbean, or similar destinations with majestic views and white-sand beaches. In the context of cyber security, island hopping refers to a sophisticated type of cyber attack. This technique is used by attackers as a means of circumventing advanced cyber […] The post What is an ‘island hopping’ attack? (and how to stop one) appeared first on CyberTalk.