Latest Cybersecurity News and Articles

---

The Fast Evolution of SaaS Security from 2020 to 2024 (Told Through Video)

SaaS Security’s roots are in configuration management. An astounding 35% of all security breaches begin with security settings that were misconfigured. In the past 3 years, the initial access vectors to SaaS data have widened beyond misconfiguration management. “SaaS Security on Tap” is a new video series that takes place in Eliana V's bar making sure that the only thing that leaks is beer (

---

Equifax Gets $13.5 Million Fine Over 2017 Data Breach

UK’s financial watchdog FCA imposes a £11 million (approximately $13.5 million) fine to Equifax over the 2017 data breach. The post Equifax Gets $13.5 Million Fine Over 2017 Data Breach appeared first on SecurityWeek.

---

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks

A vulnerability affecting Milesight industrial routers, tracked as CVE-2023-4326, may have been exploited in attacks.  The post Milesight Industrial Router Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek.

---

Fifth of UK Cybersecurity Pros Work Excessive Hours

The UK’s cybersecurity professionals believe they have excellent career prospects and are employed in a “booming” sector, but many are working unsafe hours, according to a new report from the Chartered Institute of Information Security (CIISec).

---

HHS Warns Healthcare Sector of 'NoEscape' RaaS Gang Threats

The NoEscape ransomware group employs aggressive multi-extortion tactics, combining data exfiltration, encryption, and distributed denial of service attacks to pressure organizations into paying large ransom demands.

---

After Hackers Distribute Malware In-Game Updates, Steam Adds SMS-based Security Check for Developers

The feature involves SMS-based two-factor authentication for game developers on Steam, where they receive a confirmation code via text message to log into their accounts.

---

Spyware Caught Masquerading as Israeli Rocket Alert Applications

A threat actor targets Israelis with spyware masquerading as an Android application for receiving rocket alerts. The post Spyware Caught Masquerading as Israeli Rocket Alert Applications appeared first on SecurityWeek.

---

Lumma Stealer Found Being Distributed via Discord CDN

Lumma Stealer robs user credentials and is being sold as a service on underground forums. The malware is distributed through direct messages on Discord, where victims are tricked into downloading and executing a malicious file.

---

EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits

Environmental Protection Agency (EPA) withdraws recent water sector cybersecurity rules due to lawsuits by states and water associations. The post EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits appeared first on SecurityWeek.

---

Signal Debunks Zero-Day Vulnerability Reports, Finds No Evidence

Encrypted messaging app Signal has pushed back against "viral reports" of an alleged zero-day flaw in its software, stating it found no evidence to support the claim. "After responsible investigation *we have no evidence that suggests this vulnerability is real* nor has any additional info been shared via our official reporting channels," it said in a series of messages posted in X (formerly

---

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

NTLM, which has been used as a fallback mechanism, relies on a three-way handshake and password hashing, while Kerberos uses a two-part process and encryption. NTLM has security weaknesses and is vulnerable to relay attacks.

---

Colonial Pipeline Attributes Ransomware Claims to ‘Unrelated’ Third-Party Data Breach

The Ransomed.vc gang attempted to extort Colonial Pipeline last week but was unsuccessful. As per researchers, the stolen documents shared by the gang appear to be unrelated to Colonial Pipeline.

---

UK Fines Equifax $13.6 Million for 2017 Data Breach

Equifax Ltd's outsourcing of data processing to its US parent company led to delays in addressing the breach, as the UK arm was only informed minutes before the incident was publicly announced, hindering its ability to respond effectively.

---

AI Algorithm Detects MitM Attacks on Unmanned Military Vehicles

Researchers have developed an algorithm using machine learning techniques to detect and prevent man-in-the-middle attacks on unmanned military robots, which are highly susceptible to cyberattacks.

---

Singapore and US pledge to combat online scams in cross-border cooperation

The collaboration aims to enhance regulatory enforcement activities, exchange information, and implement anti-scam measures in both countries to mitigate the risks faced by citizens and businesses.

---

Cybersecurity Should be a Business Priority for CEOs

A recent report by Accenture reveals that although 96% of CEOs consider cybersecurity to be critical for organizational growth and stability, 74% are concerned about their ability to minimize damage from cyberattacks.

---

As Biohacking Evolves, How Vulnerable are we to Cyber Threats?

The security of implantable technologies lies in the devices themselves, not the human body, and it is crucial to prioritize the security of these technologies before implanting them.

---

Binance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign

Threat actors have been observed serving malicious code by utilizing Binance's Smart Chain (BSC) contracts in what has been described as the "next level of bulletproof hosting." The campaign, detected two months ago, has been codenamed EtherHiding by Guardio Labs. The novel twist marks the latest iteration in an ongoing campaign that leverages compromised WordPress sites to serve unsuspecting

---

‘Our health data is about to flow more freely, like it or not’: big tech’s plans for the NHS – podcast

The government is about to award a £480m contract to build a vast new database of patient data. But if people don’t trust it, they’ll opt out – I know, because I felt I had to Continue reading...

---

Voice Phishing Campaigns Using Access Keys

The phishing attack starts with an HTML file disguised as a voice message, which leads to the download of a file hosted on a disguised AWS URL. The attackers initially impersonate Zoom but later switch to spoofing Outlook and Teams login pages.