Latest Cybersecurity News and Articles

---

Windows SmartScreen Bug Abused to Deploy Phemedrone Stealer

Despite being patched in November 2023, the CVE-2023-36025 Windows SmartScreen bypass vulnerability is still being exploited by malware distributors. The latest threat delivered through this vulnerability is a variant of the Phemedrone Stealer. To mitigate such threats, it's crucial for users and organizations to regularly update their software and educate themselves about safe online practices.

---

Citrix, VMware, and Atlassian Hit with Critical Flaws — Patch ASAP!

Citrix is warning of two zero-day security vulnerabilities in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that are being actively exploited in the wild. The flaws are listed below - CVE-2023-6548 (CVSS score: 5.5) - Authenticated (low privileged) remote code execution on Management Interface (requires access to NSIP, CLIP, or SNIP with management

---

Zero-Day Alert: Update Chrome Now to Fix New Actively Exploited Vulnerability

Google on Tuesday released updates to fix four security issues in its Chrome browser, including an actively exploited zero-day flaw. The issue, tracked as CVE-2024-0519, concerns an out-of-bounds memory access in the V8 JavaScript and WebAssembly engine, which can be weaponized by threat actors to trigger a crash. "By reading out-of-bounds memory, an attacker might be able to get secret values,

---

68% of IT workers feel overwhelmed with data access restrictions

A report found that 68% of IT workers feel overwhelmed by the number of technical resources that are required to access the data they need to work.

---

US Court Docs Expose Fake Antivirus Renewal Phishing Tactics

The U.S. Secret Service executed a seizure warrant to recover $34,000 stolen through a fake Norton antivirus renewal email scam. The scam tricked victims into granting remote access to their computers, and then transferring money from their accounts.

---

Inferno Malware Masqueraded as Coinbase, Drained $87 Million from 137,000 Victims

The scheme involved phishing pages to trick users into connecting their wallets with the attackers' infrastructure, resulting in over $87 million in illicit profits from more than 137,000 victims.

---

Three Ways to Combat Rising OAuth SAAS Attacks

OAuth attacks are on the rise, and organizations must implement strong access controls, fortify identity security for user accounts, and monitor third-party app activity to prevent unauthorized access to SaaS resources.

---

Cyber incidents ranked most important risk globally

According to the Allianz Risk Barometer, cyber incidents (ransomware, data breaches and IT disruptions) are the top global concern of 2024.

---

Update: Cloud Vendor Returns Stolen Hospital Data

A cloud services firm returned patient data stolen in a ransomware attack by the LockBit gang to a New York hospital alliance. The hospitals had sued LockBit as a legal maneuver to force the storage firm to return the data.

---

Flipping the BEC Funnel: Phishing in the Age of GenAI

The evolution of phishing techniques, including the use of advanced AI-driven tools, has led to a surge in highly personalized and convincing phishing attacks, posing a significant challenge to traditional email security solutions.

---

DOD Unveils First-Ever National Defense Industrial Strategy

The National Defense Industrial Strategy focuses on resilient supply chains, workforce readiness, flexible acquisitions, and economic deterrence to improve defense industrial ecosystem.

---

Alert: Over 178,000 SonicWall Firewalls Potentially Vulnerable to Exploits - Act Now

Over 178,000 SonicWall firewalls exposed over the internet are exploitable to at least one of the two security flaws that could be potentially exploited to cause a denial-of-service (DoS) condition and remote code execution (RCE). “The two issues are fundamentally the same but exploitable at different HTTP URI paths due to reuse of a vulnerable code pattern,” Jon Williams, a senior security

---

Remcos RAT Spreading Through Adult Games in New Attack Wave

The remote access trojan (RAT) known as Remcos RAT has been found being propagated via webhards by disguising it as adult-themed games in South Korea. WebHard, short for web hard drive, is a popular online file storage system used to upload, download, and share files in the country. While webhards have been used in the past to deliver njRAT, UDP RAT, and DDoS botnet malware, the

---

Anonymous Sudan Claims London Internet Exchange Attack Over Yemen Strikes

The Russia-affiliated hacktivist group, Anonymous Sudan, claimed responsibility for a cyberattack on the London Internet Exchange (LINX) as a response to Britain's support for Israel and airstrikes on Yemen.

---

Threat Actor Puts GEICO Database for Sale on the Dark Web

The threat actor 'wangfei19860902055' advertised the sale of a database related to Government Employees Insurance Company (GEICO) on the dark web, containing 552,900 records with personal information. GEICO has not officially confirmed the breach.

---

Case Study: The Cookie Privacy Monster in Big Global Retail

Explore how an advanced exposure management solution saved a major retail industry client from ending up on the naughty step due to a misconfiguration in its cookie management policy. This wasn’t anything malicious, but with modern web environments being so complex, mistakes can happen, and non-compliance fines can be just an oversight away.Download the full case study here. As a child,

---

Over 178K SonicWall Firewalls Vulnerable to DoS, Potential RCE Attacks

Attackers can exploit these vulnerabilities to force affected firewalls into maintenance mode, impacting their standard functionality and VPN access to corporate networks.

---

Tsurugi Linux Tailors User Experience for Digital Forensics and OSINT Investigations

Tsurugi Linux offers a user-friendly interface with a logical sequence of forensic analysis tools, including support for live forensics, post-mortem analysis, digital evidence acquisition, malware analysis, OSINT, and computer vision activities.

---

LockBit Ransomware Adds Two New Victims to Dark Web Portal

The LockBit ransomware group has targeted two new victims, Maisons de l’Avenir in France and Shinwa Co in Japan, with a deadline set for February 4, 2024, raising concerns due to the disparate geographical locations of the targeted companies.

---

White House Looks to Eliminate College Degree Requirements for Cyber Jobs With Federal Contractors

The new National Cyber Director Harry Coker said that the White House intends “to reduce unnecessary barriers” federal contractors face in filling cybersecurity jobs, like requirements for four-year college degrees.