Latest Cybersecurity News and Articles

---

Global Affairs Canada Hit by Cyberattack, Shuts Down Computer Systems to Fix

The Foreign Ministry of Canada has been hit by a cyberattack, leading to the closure of remote access to its network. Hackers gained access to personal data, and experts suspect a foreign country, possibly Russia or China, to be behind the attack.

---

Hackers Obtain Confidential Information on Romanian Officials After Cyberattack at Parliament

Hackers breached the Romanian Chamber of Deputies' database and obtained confidential information, including the prime minister's identity documents and medical analyses. They threatened to release the data unless they received a ransom of $34,000.

---

FritzFrog Returns with Log4Shell and PwnKit, Spreading Malware Inside Your Network

The threat actor behind a peer-to-peer (P2P) botnet known as FritzFrog has made a return with a new variant that leverages the Log4Shell vulnerability to propagate internally within an already compromised network. "The vulnerability is exploited in a brute-force manner that attempts to target as many vulnerable Java applications as possible," web infrastructure and security

---

Pentagon Investigating Theft of Sensitive Files by Ransomware Group

The Department of Defense is investigating claims by the ransomware group ALPHV that they have stolen sensitive data related to the U.S. military, including information from the Defense Counterintelligence and Security Agency.

---

Italian Data Protection Watchdog Accuses ChatGPT of Privacy Violations

The Italian data protection authority has notified OpenAI, the maker of ChatGPT, of potential violations of the EU's GDPR privacy laws. The issues include collecting personal data, age protections, and potential exposure of sensitive information.

---

The Rise of Python-Scripted Ransomware

The ransomware, named "grinchv3," self-copies itself to the startup folder for persistence, encrypts user data using the Fernet symmetric key encryption algorithm, and adds a pop-up message after encryption.

---

Update: Johnson Controls Reports $27M Hit From Ransomware Attack

The company's ongoing investigation and remediation efforts are focused on containing the unauthorized activity and assessing the impact on data, with no observed evidence of impact on its digital products and solutions.

---

HeadCrab 2.0 Goes Fileless, Targeting Redis Servers for Crypto Mining

The new version, HeadCrab 2.0, employs advanced evasion techniques and uses the Redis MGET command for command-and-control communications, making it more difficult to detect.

---

71% of businesses haven’t incorporated AI into physical security

A new report reveals that 71% of businesses surveyed have not integrated artificial intelligence (AI) into their security strategy while 23% don’t know if they’re using AI.

---

Exposed Docker APIs Under Attack in 'Commando Cat' Cryptojacking Campaign

Exposed Docker API endpoints over the internet are under assault from a sophisticated cryptojacking campaign called Commando Cat. "The campaign deploys a benign container generated using the Commando project," Cado security researchers Nate Bill and Matt Muir said in a new report published today. "The attacker escapes this container and runs multiple payloads on the

---

Women in Security nominations close in one month

There is one month left to nominate colleagues and peers for Security magazine's Women in Security award program by the March 1 deadline.

---

Faction: Open-Source Pentesting Report Generation and Collaboration Framework

Faction is an open-source solution designed to streamline penetration testing report generation and assessment collaboration, aiming to save time, reduce stress, and improve information security workflows.

---

US IaaS Providers Face 'Know Your Customer' Regulation

The proposed regulation would impose compliance costs on IaaS providers, including data retention and record-keeping requirements, potentially costing up to $170 million annually for affected companies.

---

Football Australia Data Leak Exposes Players’ Contracts, Fans’ Personal Details

The leak included passports, player contracts, and personal data, potentially affecting every Australian football fan. Cybersecurity experts believe the breach was likely due to human error, and the FA is investigating the matter.

---

U.S. Feds Shut Down China-Linked "KV-Botnet" Targeting SOHO Routers

The U.S. government on Wednesday said it took steps to neutralize a botnet comprising hundreds of U.S.-based small office and home office (SOHO) routers hijacked by a China-linked state-sponsored threat actor called Volt Typhoon and blunt the impact posed by the hacking campaign. The existence of the botnet, dubbed KV-botnet, was first disclosed by the Black Lotus Labs team at

---

Feds Say Anti-Robocall Efforts Appear to be Working Against Foreign Sources

The U.S. government has observed a decrease in scam-oriented international robocalls reaching Americans, indicating improved efforts by telecom gateway providers to block fraudulent voice-call spamming.

---

HeadCrab 2.0 Goes Fileless, Targeting Redis Servers for Crypto Mining

Cybersecurity researchers have detailed an updated version of the malware HeadCrab that's known to target Redis database servers across the world since early September 2021. The development, which comes exactly a year after the malware was first publicly disclosed by Aqua, is a sign that the financially-motivated threat actor behind the campaign is actively adapting and

---

Why the Right Metrics Matter When it Comes to Vulnerability Management

How’s your vulnerability management program doing? Is it effective? A success? Let’s be honest, without the right metrics or analytics, how can you tell how well you’re doing, progressing, or if you’re getting ROI? If you’re not measuring, how do you know it’s working? And even if you are measuring, faulty reporting or focusing on the wrong metrics can create blind spots and make it harder to

---

Cybercriminals Stole Around $112 Million Worth of XRP From Ripple’s Co-Founder

Chris Larsen's personal XRP accounts were compromised, but Ripple was not impacted. The fraudulent activity was quickly detected, and the affected address was frozen with the help of other exchanges.

---

MOVEit Liabilities Mount for Progress Software

While the financial impact on Progress Software from the MOVEit zero-day vulnerability has been minimal so far, the firm is still dealing with 118 class-action lawsuits and formal government investigations, including subpoenas from the SEC and FTC.