Latest Cybersecurity News and Articles

---

TSA Requires Aviation Sector to Enhance Cybersecurity Resilience

Airport and aircraft operators are required to develop a plan for improving their resilience and preventing infrastructure disruption and degradation. In addition, they need to assess the effectiveness of their measures.

---

New ScrubCrypt Crypter Used in Cryptojacking Attacks Targeting Oracle WebLogic

The infamous cryptocurrency miner group called 8220 Gang has been observed using a new crypter called ScrubCrypt to carry out cryptojacking operations. According to Fortinet FortiGuard Labs, the attack chain commences with successful exploitation of susceptible Oracle WebLogic servers to download a PowerShell script that contains ScrubCrypt. Crypters are a type of software that can encrypt,

---

New Security Flaws in Jenkins Could Allow Code Execution Attacks

The flaws, tracked as CVE-2023-27898 and CVE-2023-27905, impact the Jenkins server and Update Center, and have been collectively christened CorePlague by cloud security firm Aqua. All versions of Jenkins versions prior to 2.319.2 are vulnerable.

---

New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote Access

Fortinet has released fixes to address 15 security flaws, including one critical vulnerability impacting FortiOS and FortiProxy that could enable a threat actor to take control of affected systems. The issue, tracked as CVE-2023-25610, is rated 9.3 out of 10 for severity and was internally discovered and reported by its security teams. "A buffer underwrite ('buffer underflow') vulnerability in

---

Purpose, direction and innovation: The mindset of a successful leader

In her role as president and co-founder of Six Degrees Consulting, Molly actively oversees strategy, vision, marketing, professional services, human resources, and day-to-day operations. The company’s mission is to solve clients’ IT operational challenges and anticipate future needs, yet Molly has found that its true value to clients is the honesty and passion found in […] The post Purpose, direction and innovation: The mindset of a successful leader appeared first on CyberTalk.

---

Report: Collaboration is key to security optimization

Report reveals good relationships, strong communication, & transparency are key factors in security collaborative optimization success.

---

TSA issues new cybersecurity measures to better defend airlines

TSA has issued a new cybersecurity amendment. as part of the Department of Homeland Security’s efforts to increase cybersecurity resilience.

---

Qakbot Strikes Again With New Delivery Method; Puts Millions of Devices at Risk

Researchers at Trellix Advanced Research Center have detected various campaigns that use OneNote documents to distribute Qakbot and other malware such as AsyncRAT, Icedid, and XWorm.

---

Sharp Panda Targets Southeast Asian Governments Using Evolved Soul Malware Framework

It uses spear-phishing emails for initial access, carrying malicious documents with government-themed lures. It further deploys the RoyalRoad RTF kit, allowing attackers to exploit older vulnerabilities for further infection.

---

SYS01 Campaign Uses Multiple Attack Evasion Tactics; Stayed Invisible for Five Months

Morphisec researchers have been tracking this info-stealer since November 2022. This campaign uses lures and loading tactics similar to another info-stealer named S1deload, however, the final payload delivered is different.

---

Netherlands: Qilin Ransomware Breaches Elderly Care Facility and Leaks Confidential Data Online

The attack occurred on February 17, causing technical difficulties for the facility. The care institution announced the breach via its website and attributed the problem to a group that had gained unauthorized access to its network.

---

TikTok unveils European data security plan amid calls for US ban

Move comes as White House backs bill that could give it power to ban Chinese-owned app nationwideTikTok has announced a data security regime for protecting user information across Europe, as political pressure increases in the US to ban the social video app.The plan, known as Project Clover, involves user data being stored on servers in Ireland and Norway at an annual cost of €1.2bn (£1.1bn), while any data transfers outside Europe will be vetted by a third-party IT company. Continue reading...

---

Update: Israel blames state-sponsored Iranian hackers for ransomware attack on university

The attack in February forced the Israel Institute of Technology (Technion) to postpone exams and shut down its IT systems. The incident followed what Israeli defense officials said were dozens of attempted Iranian cyberattacks over the past year.

---

US Senators Aim to Block Foreign Tech That Poses Threat

Analysis in 2021 by The Citizen Lab concluded that TikTok collects types of data similar to what other social media platforms collect - and also said that "the general privacy standards for social platforms is not a high bar."

---

Senators introduce foreign technology legislation

The RESTRICT Act was introduced to Congress to address the potential threat of technology from foreign adversaries to improve national cybersecurity.

---

Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity

The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year.

---

Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks

A pair of severe security vulnerabilities have been disclosed in the Jenkins open source automation server that could lead to code execution on targeted systems. The flaws, tracked as CVE-2023-27898 and CVE-2023-27905, impact the Jenkins server and Update Center, and have been collectively christened CorePlague by cloud security firm Aqua. All versions of Jenkins versions prior to 2.319.2 are

---

Northern Essex Community College Remains Shuttered After Cyberattack

A spokesperson for the school told The Record that they did not know if the attack was ransomware, and claimed they “do not have evidence of any personal data being compromised.” On Tuesday, the school confirmed it would not open for the day.

---

Chrome 111 Patches 40 Vulnerabilities

A total of 24 of the addressed security defects were reported by external researchers. These include eight high-severity flaws, 11 medium-severity bugs, and five low-severity issues.

---

Vulnerability in Toyota Management Platform Provided Access to Customer Data

A severe vulnerability in the Toyota Customer 360 customer relationship management (CRM) platform allowed a security researcher to access the personal information of the car maker’s customers in Mexico.