Latest Cybersecurity News and Articles

---

US Senate Panel Hears Plea for Action on Bank Spoofing Scams

A top U.S. banking lobbyist told a Senate panel Thursday there are limits to what financial institutions can do to stop scammers from draining individual banking accounts and called on regulators like the FCC to do more to combat caller ID spoofing.

---

State Privacy Laws Have Been Crippled by Big Tech, New Report Says

The report, conducted by the Electronic Privacy Information Center and U.S. PIRG Education Fund, highlights the lack of strong enforcement provisions, transparency, and individual data rights in these laws.

---

CVEMap: Open-Source Tool to Query, Browse and Search CVEs

The tool leverages various valuable sources, such as the CISA's Known Exploited Vulnerabilities Catalog, Exploit Prediction Scoring System (EPSS), HackerOne CVE Discovery, and others, to provide comprehensive insights into vulnerabilities.

---

Interpol Arrests More Than 30 Cybercriminals in Global ‘Synergia’ Operation

International law enforcement, with the help of 60 agencies and private companies, detained 31 suspected cybercriminals and identified 1,300 malicious servers used for phishing and malware distribution.

---

Florida Teen Faces Federal Charges in $800,000 Crypto Theft

A 19-year-old Florida teenager, Noah Michael Urban, has been charged with 14 criminal counts, including wire fraud and aggravated identity theft, for his involvement in a cryptocurrency theft scam using SIM swapping.

---

Russian APT28 Hackers Targeting High-Value Orgs with NTLM Relay Attacks

Russian state-sponsored actors have staged NT LAN Manager (NTLM) v2 hash relay attacks through various methods from April 2022 to November 2023, targeting high-value targets worldwide. The attacks, attributed to an "aggressive" hacking crew called APT28, have set their eyes on organizations dealing with foreign affairs, energy, defense, and transportation, as well as those involved with

---

White House Rejects Efforts to Undo SEC Cyber Disclosure Rule

The Biden administration opposes a congressional effort to undo the SEC's cybersecurity incident disclosure rule, citing the need for transparency to combat increasing cyberattacks.

---

Zero Trust Implementation: Plan, Then Execute, One Step at a Time

To overcome roadblocks, organizations should prioritize sensitive data, enforce strict authentication and authorization, implement micro-segmentation, and ensure employee awareness of security best practices.

---

DirtyMoe Malware Infects 2,000+ Ukrainian Computers for DDoS and Cryptojacking

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned that more than 2,000 computers in the country have been infected by a strain of malware called DirtyMoe. The agency attributed the campaign to a threat actor it calls UAC-0027. DirtyMoe, active since at least 2016, is capable of carrying out cryptojacking and distributed denial-of-service (DDoS) attacks. In March

---

How 2023 Broke Long-Running Records for Health Data Breaches

The healthcare sector experienced a record-breaking number of major data breaches in 2023, affecting over 135 million individuals, highlighting the urgent need for enhanced cybersecurity measures.

---

FritzFrog Botnet is Exploiting Log4Shell Bug Now, Experts Say

The botnet's shift to targeting vulnerable Java applications in a campaign called "Frog4Shell" poses a significant risk to internal machines that may have been neglected and remained unpatched.

---

ApateWeb: Large-Scale Campaign Delivers Scareware and PUPs

Researchers at Unit 42 have identified a large-scale campaign named ApateWeb that employs over 130,000 domains to distribute scareware, PUPs, and other scam pages. The campaign involves adware programs, a rogue browser, and various browser extensions. User awareness and the use of advanced cybersecurity measures like URL filtering and DNS security are crucial to to defend against such threats.

---

Crime Bosses Behind Myanmar Cyber ‘Fraud Dens’ Handed Over to Chinese Government

The crime families in the Kokang region of Myanmar have been running large-scale cyber fraud and illicit enterprises, including casinos, and have been involved in human trafficking and money laundering.

---

Exposed Docker APIs Under Attack in 'Commando Cat' Cryptojacking Campaign

The attackers use evasion techniques such as using memory-backed temporary file stores and Base64-encoded scripts to make forensics harder and eliminate competing miner processes on infected machines.

---

Cybercriminals Replace Familiar Tactics to Exfiltrate Sensitive Data

Cybercriminals have shifted tactics, moving away from email-based attacks and targeting cloud and compromised applications to remain undetected longer and gain continuous access to systems and data.

---

PurpleFox Malware Infects Thousands of Computers in Ukraine

PurpleFox is a modular Windows botnet malware with rootkit capabilities, allowing it to hide and persist on infected devices, and it can be used for activities like introducing more potent payloads and launching DDoS attacks.

---

US Announces Another Arrest in BTC-e Cybercrime Case

The U.S. Department of Justice has announced that Aliaksandr Klimenka, a Belarusian and Cypriot national allegedly linked to the cryptocurrency exchange BTC-e, is in U.S. custody and faces charges related to money laundering.

---

Former CIA Engineer Sentenced to 40 Years for Leaking Classified Documents

A former software engineer with the U.S. Central Intelligence Agency (CIA) has been sentenced to 40 years in prison by the Southern District of New York (SDNY) for transmitting classified documents to WikiLeaks and for possessing child pornographic material. Joshua Adam Schulte, 35, was originally charged in June 2018. He was found guilty in July 2022. On September 13, 2023, he was&

---

Cloudzy Elevates Cybersecurity: Integrating Insights from Recorded Future to Revolutionize Cloud Security

Cloudzy, a prominent cloud infrastructure provider, proudly announces a significant enhancement in its cybersecurity landscape. This breakthrough has been achieved through a recent consultation with Recorded Future, a leader in providing real-time threat intelligence and cybersecurity analytics. This initiative, coupled with an overhaul of Cloudzy's cybersecurity strategies, represents a major

---

INTERPOL Arrests 31 in Global Operation, Identifies 1,900+ Ransomware-Linked IPs

An INTERPOL-led collaborative operation targeting phishing, banking malware, and ransomware attacks has led to the identification of 1,300 suspicious IP addresses and URLs. The law enforcement effort, codenamed Synergia, took place between September and November 2023 in an attempt to blunt the "growth, escalation and professionalization of transnational cybercrime." Involving 60 law