Latest Cybersecurity News and Articles

---

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

As a primary working interface, the browser plays a significant role in today's corporate environment. The browser is constantly used by employees to access websites, SaaS applications and internal applications, from both managed and unmanaged devices. A new report published by LayerX, a browser security vendor, finds that attackers are exploiting this reality and are targeting it in increasing

---

SCARLETEEL Hackers Use Advanced Cloud Skills to Steal Source Code, Data

While the attackers deployed cryptominers in the compromised cloud environments, the hackers showed advanced expertise in AWS cloud mechanics, which they used to burrow further into the company's cloud infrastructure.

---

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

A malicious Python package uploaded to the Python Package Index (PyPI) has been found to contain a fully-featured information stealer and remote access trojan. The package, named colourfool, was identified by Kroll's Cyber Threat Intelligence team, with the company calling the malware Colour-Blind. "The 'Colour-Blind' malware points to the democratization of cybercrime that could lead to an

---

Scammers hijack business listings on search engines to lay down phishing bait

Scammers manipulate search engine business listings, bid for digital ads displaying fake numbers, and place phishing links in the comment section of websites like Quora or business ratings to trap customers into calling phony customer care numbers.

---

Google adds client-side encryption to Gmail and Calendar. Should you care?

On Tuesday, Google made client-side encryption available to a limited set of Gmail and Calendar users in a move designed to give them more control over who sees sensitive communications and schedules.

---

Security Defects in TPM 2.0 Spec Raise Alarm

Security researchers at Quarkslab have identified a pair of serious security defects in the Trusted Platform Module (TPM) 2.0 reference library specification, prompting a massive cross-vendor effort to identify and patch vulnerable installations.

---

Malicious package flood on PyPI might be sign of new attacks to come

Over the weekend, an attacker was found uploading thousands of malicious Python packages to the public PyPI software repository. If executed on a Windows system, these packages will download and install a Trojan program hosted on Dropbox.

---

Update: Dish Network confirms network outage was a cybersecurity breach

“Certain data was extracted,” the company said in a statement Tuesday. The acknowledgment is an evolution from last week’s earnings call, where it was described as an “internal outage.”

---

Update: Gamers are fixing a video game ‘taken over’ by hackers

Because of its age, patching the vulnerabilities does not appear to be a priority for the game’s publisher Activision, so two gamers-turned-hackers have taken it into their own hands to patch the game’s vulnerabilities and make it safer to play.

---

Dormant accounts are a low-hanging fruit for attackers

Successful attacks on systems no longer require zero-day exploits, as attackers now focus on compromising identities through methods such as bypassing MFA, hijacking sessions, or brute-forcing passwords, according to Oort.

---

Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack

The vulnerability, tracked as CVE-2023-20078, is rated 9.8 out of 10 on the CVSS scoring system and is described as a command injection bug in the web-based management interface arising due to insufficient validation of user-supplied input.

---

SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics

The threat actor known as Lucky Mouse has developed a Linux version of a malware toolkit called SysUpdate, expanding on its ability to target devices running the operating system. The oldest version of the updated artifact dates back to July 2022, with the malware incorporating new features designed to evade security software and resist reverse engineering. Cybersecurity company Trend Micro said

---

WhiteSnake Promotes Windows and Linux Variants with a MaaS Model

A new malware stealer called WhiteSnake has surfaced to steal credit card numbers and other sensitive information from Windows and Linux users. The Windows variant, comparatively an older and mature variant, is capable of stealing sensitive data from different browsers. The info-stealer can steal files from various cryptocurrency wallets such as Atomic, Bitcoin, Coinomi, Electrum, Exodus, and Guarda.

---

Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack

Cisco on Wednesday rolled out security updates to address a critical flaw impacting its IP Phone 6800, 7800, 7900, and 8800 Series products. The vulnerability, tracked as CVE-2023-20078, is rated 9.8 out of 10 on the CVSS scoring system and is described as a command injection bug in the web-based management interface arising due to insufficient validation of user-supplied input. Successful

---

Research found 53% gap between best and worst email security solutions

A recent report analyzed medium and small businesses' email security solutions' popularity and incidence defense between 2018 and 2022.   

---

Thirty-one percent of former employees still have company SaaS access

SaaS report quantifies the volume, types and exposure risk of business assets stored within the SaaS estates of medium and large companies. 

---

Leveraging the Traffic Light Protocol helps CISOs share threat data effectively

EXECUTIVE SUMMARY: As cyber threats continue to evolve and become increasingly sophisticated, it is critical for organizations to share threat intelligence to stay ahead of potential attacks. However, sharing sensitive information can be a challenge, as doing so requires a balance between the actual sharing of information and the need to protect it. This is […] The post Leveraging the Traffic Light Protocol helps CISOs share threat data effectively appeared first on CyberTalk.

---

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

A stealthy Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus has become the first publicly known malware capable of bypassing Secure Boot defenses, making it a potent threat in the cyber landscape.

---

Covert cyberattacks on the rise as attackers shift tactics for maximum impact

2022 was the second-highest year on record for global ransomware attempts, as well as an 87% increase in IoT malware and a record number of cryptojacking attacks (139.3 million), according to SonicWall.

---

Critical Vulnerabilities Patched in ThingWorx, Kepware IIoT Products

Several industrial IoT (IIoT) software products made by PTC are affected by two critical vulnerabilities that can be exploited for denial-of-service (DoS) attacks and remote code execution.