Latest Cybersecurity News and Articles
24 February 2023
Hackers spammed the npm repository with more than 15,000 packages in the hope of distributing phishing links. Hackers created these packages using automated processes, through auto-generated names and project descriptions that closely resembled one another. The bogus modules had names like "free-tiktok-followers," "free-xbox-codes," and "instagram-followers-free."
24 February 2023
A mysterious and unidentified group of hackers has sought to paralyze the computer networks of almost 5,000 victims across the US and Europe, in one of the most widespread ransomware attacks on record.
24 February 2023
The Asia-Pacific region retained the top spot as the "most attacked" region in 2022 for the second consecutive year, accounting for 31 percent of all cybersecurity incidents remediated worldwide, a new report by IBM X-Force revealed on Wednesday.
24 February 2023
Multiple threat actors have been observed opportunistically weaponizing a now-patched critical security vulnerability impacting several Zoho ManageEngine products since January 20, 2023.
24 February 2023
The European Union’s executive branch said Thursday that it has temporarily banned TikTok from phones used by employees as a cybersecurity measure, reflecting widening worries from Western officials over the Chinese-owned video sharing app.
24 February 2023
Google patched a critical remote code execution bug in its Chrome web browser Wednesday that allows an attacker to install malware on a victim’s system simply by tricking them to visit a malicious site.
24 February 2023
"Consumers reported losing more money to investment scams—more than $3.8 billion—than any other category in 2022. That amount more than doubles the amount reported lost in 2021," the FTC said.
24 February 2023
The Computer Emergency Response Team of Ukraine (CERT-UA) says Russian state hackers have breached multiple government websites this week using backdoors planted as far back as December 2021.
24 February 2023
A Magecart skimmer was discovered harvesting the victim's IP address and browser user agent in addition to their email, address, phone number, and credit card information. With access to a wide range of personal data and sophisticated monitoring tools, cybercriminals can carry out complex attacks that are difficult to detect and prevent.
24 February 2023
An investigation into data safety labels for Android apps available on the Google Play Store has uncovered "serious loopholes" that allow apps to provide misleading or outright false information.
The study, conducted by the Mozilla Foundation as part of its *Privacy Not Included initiative, compared the privacy policies and labels of the 20 most popular paid apps and the 20 most popular free
24 February 2023
VC financing for cybersecurity startups reached $18.5 billion, representing a steep decline from the $30.3 billion seen in 2021 — but it was still the second-highest year on record.
24 February 2023
The WinorDLL64 payload serves as a backdoor that most notably acquires extensive system information, provides means for file manipulation, such as exfiltrating, overwriting, and removing files, and executes additional commands.
24 February 2023
South Korean researchers stumbled across a novel malware RambleOn that most probably North Korean nation-state actors used against a journalist in the country. Hackers camouflage the spyware as a secure chat app called Fizzle. The app, in reality, requests for the next-stage payload hosted on pCloud and Yandex. It was sent as an APK file over WeChat to the target.
23 February 2023
EXECUTIVE SUMMARY: In the past, cyber security executives have received the financial support needed to keep organizations protected against sophisticated attacks. However, current economic conditions have left leaders at all levels rethinking approaches to investments in cyber security tools and services. Economic pressure As is the case for organizational spending across many departments, cyber security […]
The post Executives make the case for continued tech investments appeared first on CyberTalk.
23 February 2023
Threat actors are exploiting the popularity of OpenAI's ChatGPT chatbot to distribute malware for Windows and Android, or direct unsuspecting victims to credential phishing pages.
23 February 2023
Trojanized versions of legitimate applications are being used to deploy evasive cryptocurrency mining malware on macOS systems.
Jamf Threat Labs, which made the discovery, said the XMRig coin miner was executed as Final Cut Pro, a video editing software from Apple, which contained an unauthorized modification.
"This malware makes use of the Invisible Internet Project (i2p) [...] to download
23 February 2023
The student psychological evaluations, published to a “dark web” leak site by the Russian-speaking ransomware gang Vice Society, offer a startling degree of personally identifiable information.
23 February 2023
Cisco on Wednesday informed customers about the availability of patches for two high-severity vulnerabilities affecting components of its Application Centric Infrastructure (ACI) software-defined networking solution.
23 February 2023
Weaknesses in the existing CVSS scoring system have been highlighted through new research, with existing metrics deemed responsible for “overhyping” some vulnerabilities.
23 February 2023
The NSA released a list of cybersecurity best practices designed to help teleworkers protect their home networks from malicious cyber actors.