Latest Cybersecurity News and Articles

---

Vulnerability in Toyota Management Platform Provided Access to Customer Data

A severe vulnerability in the Toyota Customer 360 customer relationship management (CRM) platform allowed a security researcher to access the personal information of the car maker’s customers in Mexico.

---

Exploitation of Bitrix CMS Vulnerability Drives ICS Attack Surge in Russia

The exploited vulnerability, tracked as CVE-2022-27228, affects the ‘Polls, Votes’ module of the Bitrix Site Manager application. The security hole allows a remote, unauthenticated attacker to execute arbitrary code.

---

Security leaders discuss how to make space for women in the workplace

For the 113th International Women’s Day, Security Magazine is sharing stories and suggestions from women in security leadership positions. 

---

Insurance holding company Group 1001 says operations restored after ransomware attack

The February 9 attack disrupted operations at several member companies, including Delaware Life Insurance; Delaware Life Insurance Company of New York; Clear Spring Life and Annuity; Clear Spring Property and Casualty; and Clear Spring Health.

---

NIST Renews Cyber Center Partnership, Launches Small Business Focus

The NIST strengthened its cybersecurity efforts on Tuesday by renewing its partnerships with the state of Maryland and Montgomery County that underpin the National Cybersecurity Center of Excellence (NCCoE).

---

3 ways to support women in the cybersecurity field

Shikha Kothari, Principal Security Advisor at Eden Data, shares strategies for cybersecurity leaders to create supportive work environments for women.

---

New Malware Variant Used by Chinese Hackers has “Radio Silence” Mode to Evade Detection

The new Sharp Panda campaign uses spear-phishing emails with malicious DOCX file attachments that deploy the RoyalRoad RTF kit to attempt to exploit older vulnerabilities to drop malware on the host.

---

Hackers are quickly learning how to breach cloud systems

Attacks exploiting cloud systems nearly doubled in 2022, and the number of hacking groups that can target the cloud tripled last year, according to a CrowdStrike report released last week.

---

Malicious PyPI Package Delivers Colour-Blind RAT

Security researchers at Kroll laid bare a malicious PyPI package called Colour-Blind. The malware package is a fully-featured info-stealer RAT with a plethora of features and capabilities, including the theft of crypto wallet data. According to researchers, the malware "points to the democratization of cybercrime" to help adversaries develop their own variations based on the shared source code.

---

Syxsense Platform: Unified Security and Endpoint Management

As threats grow and attack surfaces get more complex, companies continue to struggle with the multitude of tools they utilize to handle endpoint security and management. This can leave gaps in an enterprise's ability to identify devices that are accessing the network and in ensuring that those devices are compliant with security policies. These gaps are often seen in outdated spreadsheets that

---

Russia-Aligned TA499 Beleaguers Targets with Video Call Requests

The threat actor’s campaigns attempt to convince high-profile North American and European government officials as well as CEOs of prominent companies and celebrities into participating in recorded phone calls or video chats.

---

ATM Malware FiXS Targets Mexican Banks to Dispense Quick Money

Security analysts at Metabase Q uncovered the new FiXS ATM malware that targets Mexican bank customers. Though the initial attack vector is unclear as of now, analysts have discovered hackers using an external keyboard, like in Ploutus attacks. The FiXS malware releases money 30 minutes after the latest ATM reset, leveraging the Windows GetTickCount API.

---

Chinese State-Sponsored Hackers Break Into Mail Servers Used by ASEAN Members

The Chinese threat actors reportedly leveraged “valid credentials” to compromise ASEAN’s Microsoft Exchange servers, which used mail.asean.org and auto.discover.asean.org domains.

---

Celebrating International Women’s Day: Creating awareness & driving change

Ulrica is a VP of Product & Strategy at Indeni with over 30 years experience developing software in networking & security technologies. She loves explaining complex technology and building high-profile and high-performing teams.  In this exclusive CyberTalk interview, Ulrica shares a bit about how her passion for technology and solving challenging customer problems has driven […] The post Celebrating International Women’s Day: Creating awareness & driving change appeared first on CyberTalk.

---

Microsoft Found Shein App Copying Clipboard Content on Android Phones

The app was found to send the contents of the clipboard to a remote server if a particular pattern was present, though it is not clear whether there was any malicious intent behind the behaviour.

---

Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity

The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. While the first attack in May 2022 entailed the use of a vulnerable version of a certificate software that's widely used by public institutions and universities, the re-infiltration in October 2022 involved the

---

Exposed Redis Database Servers Churned for Cryptojacking

A cryptojacking operation was found using an authentic, open-source command-line file transfer service to carry out its attack against misconfigured Redis database servers. Although the objective of the campaign is to mine cryptocurrencies, the script performs several additional tasks to ensure the effective utilization of resources. It is imperative that administrators actively monitor any misconfigurations in Redis servers and fix them. 

---

BlackMamba: Using AI to Generate Polymorphic Malware

Using AI-generated polymorphic malware, a threat actor can combine a series of typically highly detectable behaviors in an unusual combination and evade detection by exploiting the model’s inability to recognize it as a malicious pattern.

---

Chinese Hackers Target Asian and European Entities With MQsTTang

As part of an ongoing social engineering campaign, the China-aligned Mustang Panda threat group has been seen using a previously unknown custom backdoor dubbed MQsTTang. It’s unclear who the cybercriminals are targeting. A rare observation in the implant is the use of MQTT, an IoT messaging protocol, for C2 communications.

---

Russia's Cyber Tactics in Ukraine Shift to Focus on Espionage

This is according to Victor Zhora, deputy chairman and chief digital transformation officer of the SSSCIP of Ukraine, who explained the strategic change from disruptive attacks to cyber espionage to Infosecurity.