Latest Cybersecurity News and Articles

---

IP Fabric Raises $25 Million in Series B Funding

The new investment round was led by One Peak, with participation from Senovo and Presto Ventures. The company says it can help organizations address three main issues with network management — automation, complexity, and assurance.

---

NSA and CISA Release Guidelines to Secure CI/CD Environments

The US National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have published a comprehensive set of guidelines aimed at defending Continuous Integration/Continuous Delivery (CI/CD) environments.

---

MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?

MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency (CISA) said. "An attacker can often exploit these vulnerabilities to take control of an affected system, steal data, or prevent applications from working." The list is

---

NCSC marks 20th anniversary of first response to state-sponsored cyber attack

In June 2003, GCHQ experts were involved in responding to a cyber attack against the UK Government for the first time.

---

8Base Ransomware Activity Spikes, Researcher Warn

Ransomware threat 8Base has been conducting double extortion attacks for over a year and its activities spiked suddenly in May and June 2023. 8Base has been connected to 67 attacks by Malwarebytes and NCC Group. Approximately 50% of the targeted victims belong to the business services, manufacturing, and construction sectors.

---

Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks

Nikita Kislitsin, formerly the head of network security for one of Russia's top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. Department of Justice. Experts say Kislitsin's prosecution could soon put the Kazakhstan government in a sticky diplomatic position, as the Kremlin is already signaling that it intends to block his extradition to the United States.

---

European Cyber Agency Remains Underfunded

There are multiple discrepancies in how the European Commission allocates funds to the cyber agency, Juhan Lepassaar, the executive director of the EU Agency for Cybersecurity, said during a Tuesday parliamentary hearing evaluating allocated budgets.

---

Details Disclosed for Critical SAP Vulnerabilities, Including Wormable Exploit Chain

The vulnerabilities are tracked as CVE-2021-27610, CVE-2021-33677, CVE-2021-33684, and CVE-2023-0014, and they impact products that use the SAP Application Server for ABAP component.

---

Saudi Arabia's Cyber Capabilities Ranked Second Globally

According to the IIMD, the development of a National Cybersecurity Authority (NCA) and the planned development of a Global Cybersecurity Forum institute in the country have both affirmed Saudi Arabia's role in the field of cybersecurity.

---

Cyber Command to expand 'canary in the coal mine' unit working with private sector

U.S. Cyber Command is doubling the size of a little-known program that serves as one of the military's chief links to private industry in order to bolster the country’s defenses against cyber threats.

---

Manic Menagerie 2.0: The Evolution of a Highly Motivated Threat Actor

The threat actor used a variety of tactics, techniques, and tools to evade detection and maintain access to the compromised networks, including deploying web shells, exploiting vulnerabilities, and attempting local privilege escalation.

---

Dark Power Ransomware on the Ascent – A Technical Insight into 2023’s Latest Ransomware Strain

Dark Power is a highly advanced ransomware strain that uses advanced encryption techniques and targets various industries globally. It stops critical system services and processes, encrypts files, and drops a ransom note with payment instructions.

---

From MuddyC3 to PhonyC2: Iran's MuddyWater Evolves with a New Cyber Weapon

The Iranian state-sponsored group dubbed MuddyWater has been attributed to a previously unseen command-and-control (C2) framework called PhonyC2 that's been put to use by the actor since 2021. Evidence shows that the custom made, actively developed framework has been leveraged in the February 2023 attack on Technion, an Israeli research institute, cybersecurity firm Deep Instinct said in a

---

Security analyst wanted by both Russia and the US

A Russian network security specialist and former editor of Hacker magazine who is wanted by the US and Russia on cybercrime charges has been detained in Kazakhstan as the two governments seek his extradition.

---

31% of breaches are being identified later

A report from Gigamon analyzed the difference between how secure an organization perceives itself to be and how secure it actually is.

---

US Patent and Trademark Office Notifies Filers of Years-Long Data Leak

The U.S. Patent and Trademark Office (USPTO) said in a notice sent to affected trademark applicants that their private domicile address — often their home address — inadvertently appeared in public records between February 2020 and March 2023.

---

Fluhorse: Flutter-Based Android Malware Targets Credit Cards and 2FA Codes

Cybersecurity researchers have shared the inner workings of an Android malware family called Fluhorse. The malware "represents a significant shift as it incorporates the malicious components directly within the Flutter code," Fortinet FortiGuard Labs researcher Axelle Apvrille said in a report published last week. Fluhorse was first documented by Check Point in early May 2023, detailing its

---

Critical Security Flaw in Social Login Plugin for WordPress Exposes Users' Accounts

Tracked as CVE-2023-2982 (CVSS score: 9.8), the authentication bypass flaw impacts all versions, including and prior to 7.6.4. It was addressed on June 14, 2023, with the release of version 7.6.5 following responsible disclosure on June 2, 2023.

---

Enterprise SIEMs miss 76% of all MITRE ATT&CK techniques used

According to industry analysts, the SIEM continues to be the "operating system of the SOC" and is not going away anytime soon.

---

Cyware Raises $30 Million to Accelerate Expansion of AI-Powered Global Cyber Fusion and Threat Sharing Networks

The Cyware platform is used by top Fortune 1000 and MSSP security teams to transform their legacy SOCs into Cyber Fusion Centers and facilitate collaboration and automation in threat intelligence sharing and response.