Latest Cybersecurity News and Articles
12 September 2023
A sophisticated phishing campaign is using a Microsoft Word document lure to distribute a trifecta of threats, namely Agent Tesla, OriginBotnet, and OriginBotnet, to gather a wide range of information from compromised Windows machines.
"A phishing email delivers the Word document as an attachment, presenting a deliberately blurred image and a counterfeit reCAPTCHA to lure the recipient into
12 September 2023
China's cyber espionage activities, including hacking into rival nations' digital systems, pose a significant threat to the government and private sector of Western countries.
12 September 2023
Google on Monday released an emergency Chrome 116 security update to patch the fourth zero-day vulnerability discovered in the browser in 2023. Tracked as CVE-2023-4863, it is a critical severity heap buffer overflow issue in the WebP component.
12 September 2023
One of Myanmar’s biggest and most powerful ethnic minority militias has arrested and repatriated more than 1,200 Chinese nationals allegedly involved in criminal online scam operations, an official of the group said Saturday.
12 September 2023
Digital information exchange can be safer, cheaper and more environmentally friendly with the help of a new type of random number generator for encryption developed at Linköping University.
12 September 2023
Sending an email with a forged address is easier than previously thought, due to flaws in the process that allows email forwarding, according to a research team led by computer scientists at the University of California San Diego.
12 September 2023
In particular, China-affiliated actors are employing AI-generated media to target politically divisive topics such as gun violence and disparaging US political figures and symbols.
12 September 2023
The incident occurred on September 4, when the Australian-Curaçaoan online platform Stake.com announced that hackers had stolen funds from its Ethereum (ETH) and Binance Smart Chain (BSC) hot wallets.
12 September 2023
A new information stealer malware called MetaStealer has set its sights on Apple macOS, making the latest in a growing list of stealer families focused on the operating system after Stealer, Pureland, Atomic Stealer, and Realst.
"Threat actors are proactively targeting macOS businesses by posing as fake clients in order to socially engineer victims into launching malicious payloads," SentinelOne
12 September 2023
Google on Monday rolled out out-of-band security patches to address a critical security flaw in its Chrome web browser that it said has been exploited in the wild.
Tracked as CVE-2023-4863, the issue has been described as a case of heap buffer overflow that resides in the WebP image format that could result in arbitrary code execution or a crash.
Apple Security Engineering and Architecture (SEAR
12 September 2023
Consumers reveal how rising fraud impacts their trust in organizations.
11 September 2023
The joint MoU sets out how the organisations will cooperate to improve the UK's digital resilience.
11 September 2023
CISA, the Federal Bureau of Investigation and U.S. Cyber Command’s Cyber National Mission Force (CNMF) released a joint Cybersecurity Advisory (CSA).
11 September 2023
Many universities worldwide, including some of the most prestigious, leave their webpages unpatched, leaking sensitive information, and even open to full takeovers, a Cybernews Research team investigation reveals.
11 September 2023
Aaron Flecha Menendez, an ICS security consultant at Spain-based cybersecurity firm S21sec, discovered that some Socomec UPS devices, specifically MODULYS GP (MOD3GP-SY-120K), are affected by seven vulnerabilities.
11 September 2023
Anjana Harve has been named Executive VP, Chief Information Officer at BJ's Wholesale Club. Harve has worked as CIO in a variety of organizations.
11 September 2023
A spate of cyberattacks against UK schools has claimed its latest victim after a Maidstone secondary school, Church of England St Augustine Academy, suffered a serious security breach late last week.
11 September 2023
According to a report by Netwrix, 69% of organizations in the education sector have experienced a cyberattack in the past year. Phishing and user account compromise were the most common attack methods in this sector.
11 September 2023
A new phishing attack is leveraging Facebook Messenger to propagate messages with malicious attachments from a "swarm of fake and hijacked personal accounts" with the ultimate goal of taking over the targets' accounts.
"Originating yet again from a Vietnamese-based group, this campaign uses a tiny compressed file attachment that packs a powerful Python-based stealer dropped in a multi-stage
11 September 2023
A new malware loader known as HijackLoader has gained popularity among cybercriminals for distributing various payloads, including DanaBot, SystemBC, and RedLine Stealer. HijackLoader uses a modular architecture that facilitates threat actors to perform code injection and execution. Organizations must stay updated about the tactics and techniques used by the malware loader and deploy multi-layered sandbox techniques to detect indicators