Latest Cybersecurity News and Articles

---

How to delete yourself from internet search results and hide your identity online

Here is a step-by-step guide to reducing your digital footprint online, whether you want to lock down data or vanish entirely.

---

BatLoader Malware Dropper Continues to Pose a Threat to Organizations in 2023

BatLoader can modify Windows UAC prompt, disable Windows Defender notifications, disable Task Manager, prevent users from accessing Windows registry tools, disable the Run command, and modify the display timeout.

---

OCR Labs Exposes Sensitive Credentials Due to Misconfiguration of its Systems

The data leak affected QBANK, Defence Bank, Bloom Money, Admiral Money, MA Money, and Reed. Using leaked data, threat actors could potentially breach banks’ backend infrastructure and consequently the infrastructure of their clients.

---

Uber drivers’ info nabbed in cyberattack

A New Jersey law firm that represents Uber has released that an unknown number of drivers have had sensitive data stolen from cyber attackers in a recent incident.

---

Uber drivers’ info nabbed in cyber attack

A New Jersey law firm that represents Uber has released that an unknown number of drivers have had sensitive data stolen from cyber attackers in a recent incident.

---

Money Message Ransomware Gang Claims MSI Breach, Demands $4 Million

According to chats seen by BleepingComputer at the time, the threat actors claimed to have stolen 1.5TB of data from MSI's systems, including source code and databases, and demanded a ransom payment of $4,000,000.

---

Software vulnerabilities remain top threat conern

A report from Bitdefender revealed top security concerns, practices and key challenges businesses are facing across their environments.

---

FBI Says it Obtained Details on 59,000 Users of Hacking Site Genesis Market

A US official says the server copies include information about approximately 59,000 individual user accounts, such as usernames, passwords, email accounts, and secure messenger accounts, in addition to a history of user activity.

---

Beware of New YouTube Phishing Scam Using Authentic Email Address

The phishing email content is similar to those seen in previous phishing scams, containing a YouTube video and a message informing users about YouTube’s new monetization policy and new rules.

---

Florida moves to restrict TikTok across university campuses

The Florida Board of Governors has issued an emergency proposed regulation aiming to ban the use of TikTok on university campus networks.

---

Cyberattacks hit almost all companies last year, Sophos says

Cyberattacks aren’t a roll of the dice for organizations, but rather a near certainty. Almost all organizations, 94%, experienced a cyberattack of some form during the last year, according to research Sophos released Tuesday.

---

Researchers Uncover Method to Steal Cars Using Vehicle CAN Bus

Automotive security experts say they have uncovered a method of car theft relying on direct access to the vehicle's Controller Area Network (CAN) bus via a smart headlamp's wiring.

---

Update: 3CX makes progress in restoring Windows app from state-linked supply chain attack

The business communications company restored its Windows Electron app, making progress in its ongoing recovery from a recent supply chain attack, CEO Nick Galea said in a forum post on Tuesday.

---

Vulnerabilities in popular Japanese word processing software could lead to arbitrary code execution, other issues

Cisco Talos recently discovered four vulnerabilities in Ichitaro, a popular word processing software in Japan produced by JustSystems that could lead to arbitrary code execution.

---

UK Criminal Records Office's Customer Portal Offline Amid Cybersecurity Incident

As the name implies, the government agency manages people's criminal record information, running checks as needed on individuals for any convictions, cautions, or ongoing prosecutions.

---

Supply Chain Attacks and Critical Infrastructure: How CISA Helps Secure a Nation's Crown Jewels

Critical infrastructure attacks are a preferred target for cyber criminals. Here's why and what's being done to protect them. What is Critical Infrastructure and Why is It Attacked? Critical infrastructure is the physical and digital assets, systems and networks that are vital to national security, the economy, public health, or safety. It can be government- or privately-owned. According to Etay

---

New OpcJacker Targets Iranian Individuals via Malvertising Lures

Several fake websites were erected to advertise genuine software and cryptocurrency-related applications only to drop OpcJacker, an info-stealer, stated Trend Micro. The malware is capable of carrying next-stage payloads such as NetSupport RAT and a remote access-focused version with hidden virtual network computing (hVNC).

---

CISA JCDC Will Focus on Energy Sector

Public utilities have been put to the test as attacks by bad actors have risen sharply in recent years. Q3 ‘22 saw a record number of attacks on the energy market, a trend that is not expected to slow down.

---

Android’s April 2023 Updates Patch Critical Remote Code Execution Vulnerabilities

The security bulletin describes 26 vulnerabilities resolved in the Framework and System components as part of the 2023-04-01 security patch level. Most of these are high-severity flaws causing elevation of privilege (EoP) or information disclosure.

---

Google will require Android apps to let you delete your account

According to the new policy, starting in early 2024, Google Play users will have better control over their data since every store listing will display links in the "Data deletion" area, allowing them to ask for their accounts and data to be deleted.