Latest Cybersecurity News and Articles


Astrix Security, which uses ML to secure app integrations, raises $25M

28 June 2023
Astrix Security, a platform that helps companies manage and secure third-party app integrations, today announced that it closed a $25 million Series A funding round led by CRV with participation from Bessemer Venture Partners and F2 Venture Capital.

NPM Registry Found to be Vulnerable to 'Manifest Confusion' Abuse

28 June 2023
The npm Public Registry, a database of JavaScript packages, fails to compare npm package manifest data with the archive of files that data describes, creating an opportunity for the installation and execution of malicious files.

Research reveals rise in sophisticated attacks against mobile devices

28 June 2023
Research finds 187% increase in the number of compromised devices that were fully exploited, highlighting growing risks posed to mobile-powered businesses

Ukraine Cracks Down on Investment Scams, Raids Call Centers

28 June 2023
Ukrainian cyber police raided and closed over a dozen fraudulent call centers last week, saying the operations were running fake investment scams that involved stealing cryptocurrency and payment card details from European and Central Asian citizens.

Victim Count in Ransomware Attack at Maryland Healthcare Provider Jumps Fivefold to 137,000

28 June 2023
A Berlin, Maryland-based hospital recently told regulators that a ransomware breach discovered in January had compromised the sensitive information of nearly 137,000 patients, about five times the number of people originally estimated to be affected.

Cyera Raises $100M to Bring Data Protection to Hybrid Cloud

28 June 2023
The startup, founded by longtime Israeli Military Intelligence leaders, landed the Accel-led $100 million Series B funding to support the cloud and on-premises data protection needs of hybrid organizations.

8Base Ransomware Spikes in Activity, Threatens U.S. and Brazilian Businesses

28 June 2023
VMware said 8Base is "strikingly" similar to that of another data extortion group tracked as RansomHouse, citing overlaps in the ransom notes dropped on compromised machines and the language used in the respective data leak portals.

Financial fraud prevention strategies

28 June 2023
Michael Jabbara, Vice President, Head of Global Fraud Services at Visa, covers the evolution of the financial fraud landscape and more in this episode of The Security Podcast.

SolarWinds says SEC investigation ‘progressing to charges’

28 June 2023
SolarWinds — the technology firm at the center of a December 2020 hack that affected multiple U.S. government agencies — said its executives may soon face charges from the Securities and Exchange Commission (SEC) for its response to the incident.

UAE, Israel create ‘Crystal Ball’ platform to fight hackers

28 June 2023
The mission is to “design, deploy and enable regional intelligence enhancement” through collaboration and knowledge-sharing to combat national-level cyberthreats, according to a presentation by Mohamed Al Kuwaiti, UAE head of cybersecurity.

State and local governments grapple to mitigate cyber risks

28 June 2023
State and local governments face increased challenges amid a rising threat landscape due to malicious ransomware attacks and sophisticated nation-state threat actors, according to a report released Monday from Moody’s Investors Service.

5 Things CISOs Need to Know About Securing OT Environments

28 June 2023
For too long the cybersecurity world focused exclusively on information technology (IT), leaving operational technology (OT) to fend for itself. Traditionally, few industrial enterprises had dedicated cybersecurity leaders. Any security decisions that arose fell to the plant and factory managers, who are highly skilled technical experts in other areas but often lack cybersecurity training or

Update: MOVEit vulnerability ensnares more victims

28 June 2023
At least 108 organizations, including seven U.S. universities, have been listed by Clop or disclosed as having been impacted thus far, according to Brett Callow, a threat analyst at Emsisoft.

Mario Meets Malware: An Unwanted Power-Up

28 June 2023
Researchers spotted a trojanized version of the Super Mario 3: Mario Forever installer spreading Windows malware called Umbral Stealer. The installer is being promoted on gaming forums and social media groups. Researchers recommend users check their system performance and CPU usage regularly and implement proper cybersecurity hygiene to stay safe.

8Base Ransomware Spikes in Activity, Threatens U.S. and Brazilian Businesses

28 June 2023
A ransomware threat called 8Base that has been operating under the radar for over a year has been attributed to a "massive spike in activity" in May and June 2023. "The group utilizes encryption paired with 'name-and-shame' techniques to compel their victims to pay their ransoms," VMware Carbon Black researchers Deborah Snyder and Fae Carlisle said in a report shared with The Hacker News. "8Base

Swiss intelligence warns of fallout in cyberspace as West clamps down on spies

28 June 2023
Switzerland’s Federal Intelligence Service (FIS) explained that this cyber espionage was a “compensatory measure … where there has been a reduction in the number of intelligence staff deployed in the target countries.”

New Fast-Developing ThirdEye Infostealer Pries Open System Information

28 June 2023
The newly discovered malware is designed to collect various information from compromised machines, such as BIOS and hardware data, and send it to a command-and-control server.

BeeKeeperAI raises $12.1 million to accelerate AI development on privacy protected healthcare data

28 June 2023
The Series A round was led by Sante Ventures, with participation from the Icahn School of Medicine at Mount Sinai, AIX Ventures, Continuum Health Ventures, TA Group Holdings, and UCSF.

New Ongoing Campaign Targets npm Ecosystem with Unique Execution Chain

28 June 2023
"The packages in question seem to be published in pairs, each pair working in unison to fetch additional resources which are subsequently decoded and/or executed," software supply chain security firm Phylum said in a report released last week.

Malvertising Campaigns on the Rise: Anatsa Malware Targets over 600 Banking Applications

28 June 2023
The Anatsa Android banking trojan is being distributed via the Google Play Store, with over 30,000 installations recorded. The trojan collects financial information and performs on-device fraud. The malware has already amassed over 30,000 installations. mobile users need to exercise caution with app installations; they must carefully proceed to download apps.