Latest Cybersecurity News and Articles
26 June 2023
Organizations are working to educate and train the next generation of professionals to fill critical cybersecurity vacancies, but private sector firms need to change their hiring practices to integrate this pool of talent into the workforce.
26 June 2023
According to a report by ForgeRock, identity theft and fraud remains a top concern for security leaders as it leads to large data breaches.
26 June 2023
Compounding the problem, affected users can't seek assistance since reaching out to LastPass support requires logging into their accounts which they can't do because of an infinite loop of MFA authenticator password reset prompt.
26 June 2023
An analysis of the group's modus operandi has revealed its emphasis on operational security, carefully using an extensive set of open-source tools against a limited number of victims to carry out long-term malicious acts.
26 June 2023
As per a study by Orca Security, misconfigured and vulnerable assets are literally discovered within minutes. Exposed secrets on GitHub, HTTP, and SSH were all discovered in under five minutes. The AWS S3 Buckets were discovered in under one hour.
26 June 2023
Search engine optimization poisoning attacks, which involve intentionally manipulating search results to lead users onto malware-laced websites, are on the rise in the healthcare sector, U.S. federal regulators warn.
26 June 2023
An unknown cryptocurrency exchange located in Japan was the target of a new attack earlier this month to deploy an Apple macOS backdoor called JokerSpy.
Elastic Security Labs, which is monitoring the intrusion set under the name REF9134, said the attack led to the installation of Swiftbelt, a Swift-based enumeration tool inspired by an open-source utility called SeatBelt.
JokerSky was first
26 June 2023
A bipartisan bill to protect Americans’ private online data by establishing a system for people to compel data brokers and companies to stop collecting it was reintroduced in Congress last week after a similar measure died last year.
26 June 2023
According to breach notifications filed on Friday with Maine's Office of the Attorney General, American Airlines said the data breach affected 5745 pilots and applicants, while Southwest reported a total of 3009.
26 June 2023
The Securities and Exchange Commission accused SolarWinds CFO Bart Kalsu and CISO Tim Brown of violating securities laws in their response to a high-profile software supply chain cyberattack in 2020.
26 June 2023
Researchers from Cyble discovered a trojanized Super Mario Bros game installer for Windows that was used to deliver multiple malware, including an XMR miner, SupremeBot mining client, and the Open-source Umbral stealer.
26 June 2023
Security and IT teams are routinely forced to adopt software before fully understanding the security risks. And AI tools are no exception.
Employees and business leaders alike are flocking to generative AI software and similar programs, often unaware of the major SaaS security vulnerabilities they're introducing into the enterprise. A February 2023 generative AI survey of 1,000 executives
26 June 2023
Microsoft has disclosed that it's detected a spike in credential-stealing attacks conducted by the Russian state-affiliated hacker group known as Midnight Blizzard.
The intrusions, which made use of residential proxy services to obfuscate the source IP address of the attacks, target governments, IT service providers, NGOs, defense, and critical manufacturing sectors, the tech giant's threat
26 June 2023
ChatGPT can be used to detect phishing sites based on URLs, but its false positive rate is too high to be reliable on its own. ChatGPT can assist analysts by highlighting suspicious parts of the URL and suggesting possible attack targets.
26 June 2023
The Senate's annual defense policy bill includes a provision that would require the Department of Defense to study the feasibility of establishing a separate Cyber Force.
26 June 2023
Migrating to the cloud does not alleviate an organization's cyber risk, and cloud security is a shared responsibility. Misconfigurations can magnify the risk of security issues in cloud environments.
26 June 2023
With the recently discovered vulnerabilities remote attackers could launch denial-of-service attacks, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) said in an advisory released Friday.
26 June 2023
Three years after one of the most visible hacks in recent history played out in real-time in front of millions of Twitter users, one of the hackers responsible for the breach will now serve time in federal prison.
26 June 2023
Three months after arresting its administrator, U.S. federal authorities seized the domain of the notorious hacking site BreachForums. For a time, the forum was the go-to community for English-speaking cybercriminals
26 June 2023
Grafana has released security fixes for multiple versions of its application, addressing a vulnerability that enables attackers to bypass authentication and take over any Grafana account that uses Azure Active Directory for authentication.