Latest Cybersecurity News and Articles

---

White House Grapples With Harmonizing Thicket of Cybersecurity Rules

Recently, the White House has begun streamlining the myriad of cybersecurity regulations and technical standards that corporations and critical infrastructure must follow.

---

Another $40m Dispersed to Western Union Fraud Victims

The new $40m tranche of money was forfeited by the Colorado-headquartered financial services giant to the Department of Justice (DoJ) to reimburse 25,000 victims in the US and abroad.

---

Fake CVE-2023-40477 Proof of Concept Leads to VenomRAT

Threat actors are repurposing older proof of concept code to create fake PoCs for newly released vulnerabilities, aiming to compromise other miscreants rather than specifically targeting researchers.

---

AMBERSQUID Cryptojacking Operation: Unusual AWS Services Under Attack

The AMBERSQUID cryptojacking operation targets obscure AWS services like AWS Amplify, AWS Fargate, and Amazon SageMaker, effectively bypassing AWS's resource approval process to mine cryptocurrency covertly. If AMBERSQUID were to expand its scope to target all AWS regions, it could potentially lead to daily losses exceeding $10,000. To counter such threats, organizations must intensify vigilance, deploy robust monitoring systems, and enforce strict access controls. 

---

Beware: Fake Exploit for WinRAR Vulnerability on GitHub Infects Users with VenomRAT

A malicious actor released a fake proof-of-concept (PoC) exploit for a recently disclosed WinRAR vulnerability on GitHub with an aim to infect users who downloaded the code with VenomRAT malware. "The fake PoC meant to exploit this WinRAR vulnerability was based on a publicly available PoC script that exploited a SQL injection vulnerability in an application called GeoServer, which is tracked as

---

Ransomware cyber insurance claims rose by 27%

Cyber insurance claims and trends were analyzed in a recent report finding a 12% increase in cyber claims over the first six months of the year.

---

Atos Unify Vulnerabilities Could Allow Hackers to Backdoor Systems

The flaws were found in the unified communications and collaboration solution by researchers at SEC Consult, an Austria-based cybersecurity consulting firm that is part of the Atos Group’s Eviden business.

---

Critical Security Flaws Exposed in Nagios XI Network Monitoring Software

The four security vulnerabilities, tracked as CVE-2023-40931 through CVE-2023-40934, impact Nagios XI versions 5.11.1 and lower. Following disclosure on August 4, They have been patched as of September 11, with the release of version 5.11.2.

---

Data Breach at Pizza Hut Australia Exposes Customer Information and Order Details

In an email to customers on Wednesday, Pizza Hut Australia’s chief executive, Phil Reed, said the company became aware in early September that there had been “unauthorised third party” access to some of the company’s data.

---

DHS: Ransomware attackers headed for second most profitable year

Ransomware attackers remain a major threat to the United States and are on pace to have their second most profitable year ever, the Department of Homeland Security said in an annual report.

---

55% of insider threats come from a negligent or mistaken insider

The causes and costs of insider threats were analyzed in a recent report that found that the average annual cost of an insider risk has increased 40%.

---

CrowdStrike to Buy AppSec Startup Bionic for Reported $350M

CrowdStrike plans to purchase a Silicon Valley application security startup founded by two Israel Defense Forces veterans in a bid to expand risk visibility and protection across entire cloud computing environments.

---

Chinese-Language Speakers Targeted with Sainbox RAT, ValleyRAT, and Gh0stRAT

The increase in activity suggests increased availability or ease of access to payloads and target lists, as well as potentially increased activity by Chinese-speaking cybercrime operators.

---

57% of small and medium enterprises experienced a cybersecurity breach

Small and medium enterprises were analyzed in a recent report by Guardz. According to the report, 57% of SMEs have experienced a cybersecurity breach.

---

Malicious NPM Packages Caught Exfiltrating Kubernetes Config, SSH Keys

The malicious software packages impersonate legitimate JavaScript libraries and components, but upon installation, they run obfuscated code to collect and siphon sensitive files.

---

Finnish Authorities Dismantle Notorious PIILOPUOTI Dark Web Drug Marketplace

Finnish law enforcement authorities have announced the takedown of PIILOPUOTI, a dark web marketplace that specialized in illegal narcotics trade since May 2022. "The site operated as a hidden service in the encrypted TOR network," the Finnish Customs (aka Tulli) said in a brief announcement on Tuesday. "The site has been used in anonymous criminal activities such as narcotics trade." The agency

---

Critical Security Flaws Exposed in Nagios XI Network Monitoring Software

Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation and information disclosure. The four security vulnerabilities, tracked from CVE-2023-40931 through CVE-2023-40934, impact Nagios XI versions 5.11.1 and lower. Following responsible disclosure on August 4, 2023, They have been patched as of September 11, 2023, with

---

Cyberattack on Kansas Town Affects Email, Phone, Payment Systems

The city’s incident response team “took proactive measures to protect city data and network systems” while also hiring forensic experts to “ fully understand the extent and implications” of the attack.

---

Hackers Targeted International Criminal Court’s Systems Last Week

At present, there is no available information regarding the extent of the cyberattack's nature and impact on the ICC's systems or whether the perpetrators managed to access or exfiltrate any data or files from its network.

---

HiddenLayer Raises Hefty $50M Round for AI Security Tech

HiddenLayer, which emerged from stealth in July 2022 with $6 million in funding, said the latest financing was led by M12, Microsoft’s Venture Fund, and Moore Strategic Ventures.