Latest Cybersecurity News and Articles

---

HWL Ebsworth hack: sensitive information from dozens of government agencies may be compromised

Hundreds of law firm’s clients waiting on confirmation of whether they are affected by data leaked in cyberattackFollow our Australia news live blog for the latest updatesGet our morning and afternoon news emails, free app or daily news podcastHundreds of clients of law firm HWL Ebsworth, including dozens of government agencies, have been in discussions with the firm over whether highly sensitive legal information has been exposed – while a NSW court injunction prevents those potentially affected from searching through the data posted on the dark web to check.The Russian-linked ALPHV/Blackcat ransomware group hacked the law firm in April. Earlier this month, the group published 1.1TB of the data it claimed to have stolen, later established to be 3.6TB worth of data.Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup Continue reading...

---

Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks

The newly discovered Chinese nation-state actor known as Volt Typhoon has been observed to be active in the wild since at least mid-2020, with the hacking crew linked to never-before-seen tradecraft to retain remote access to targets of interest. The findings come from CrowdStrike, which is tracking the adversary under the name Vanguard Panda. "The adversary consistently employed ManageEngine

---

Self Propagating Chinese Malware Inadvertently Affects Networked Storage Devices

Check Point laid bare a Chinese APT operation using a self-propagating USB malware called WispRider. A European healthcare institution fell victim to it after an employee used an infected USB drive on the hospital’s system. The USB drives were further found to affect networked storage devices, significantly amplifying the scope and potential impact of this threat.

---

U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. This comprises three vulnerabilities that Apple patched this week (CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439), two flaws in VMware (CVE-2023-20867 and CVE-2023-20887), and one shortcoming impacting Zyxel

---

Twitter Hacker Sentenced to 5 Years in Prison for $120,000 Crypto Scam

A U.K. citizen who took part in the massive July 2020 hack of Twitter has been sentenced to five years in prison in the U.S. Joseph James O'Connor (aka PlugwalkJoe), 24, was awarded the sentence on Friday in the Southern District of New York, a little over a month after he pleaded guilty to the criminal schemes. He was arrested in Spain in July 2021. The infamous Twitter breach allowed the

---

Cybercrime Group 'Muddled Libra' Targets BPO Sector with Advanced Social Engineering

Libra is the designation given by Unit 42 for cybercrime groups. The "muddled" moniker for the threat actor stems from the prevailing ambiguity with regard to the use of the 0ktapus framework.

---

Powerful JavaScript Dropper PindOS Distributes Bumblebee and IcedID Malware

A new strain of JavaScript dropper has been observed delivering next-stage payloads like Bumblebee and IcedID. Cybersecurity firm Deep Instinct is tracking the malware as PindOS, which contains the name in its "User-Agent" string.

---

US Military Personnel Targeted by Unsolicited Smartwatches Linked to Data Breaches

Recent reports indicate that these seemingly innocuous devices, once activated, automatically connect to Wi-Fi networks and establish unauthorized connections with users’ cell phones, potentially exposing sensitive personal data.

---

Microsoft warns of hackers hijacking Linux systems using trojanized OpenSSH version

After gaining access to a system, the attackers deploy a trojanized OpenSSH package that helps them backdoor the compromised devices and steal SSH credentials to maintain persistence.

---

Researcher Identifies Popular Swing VPN Android App as DDoS Botnet

Swing VPN is a legitimate VPN app developed for Android and iOS systems by Limestone Software Solutions. However, according to researcher Lecromee, the Android version of this app is a DDoS botnet and allegedly harbors malicious intent.

---

Survey shows disconnect in cloud security perception vs. readiness

While many security professionals leverage high-risk practices and behaviors in their cloud environments, they are confident security tools will protect against attacks. 

---

Drones Contain Over 156 Different Cyber Threats, Research Finds

Out of the 156 threats identified in drone control systems, the top 50 fall into four categories — namely reporting falsified data, denying access to real-time data, impersonation of UAS and its operator, and tempering with telemetry data.

---

Microsoft Teams bug allows malware delivery from external accounts

The attack works with Microsoft Teams running the default configuration, which permits communication with Microsoft Teams accounts outside the company, typically referred to as "external tenants."

---

Fortinet fixes critical FortiNAC remote command execution flaw

"A deserialization of untrusted data vulnerability [CWE-502] in FortiNAC may allow an unauthenticated user to execute unauthorized code or commands via specifically crafted requests to the TCP/1050 service," Fortinet stated.

---

2.5 million Genworth policyholders affected by MOVEit hack

A third-party vendor lost the personal data of at least 2.5 million Genworth Financial policyholders, including Social Security numbers, to the Russian Cl0p ransomware gang, according to the Fortune 500 insurer.

---

Google announces $20 million investment for cyber clinics

By deploying students to community organizations to improve digital defenses, university cybersecurity clinics aim to give students cybersecurity experience, improve local defensive capacity and steer students toward work in cybersecurity.

---

MOVEit Data Breach Victims Sue Progress Software

Fallout for Progress Software continues over a massive data breach that appears to have affected hundreds of private and public sector organizations that use its MOVEit file transfer software.

---

New Mirai botnet targets tens of flaws in popular IoT devices

The botnet has been observed targeting IoT devices, routers, DVRs, access control systems, and Solar power generation monitoring systems from brands such as D-Link, Arris, Zyxel, TP-Link, Tenda, Netgear, and MediaTek.

---

Federal incentives could help utilities overcome major cybersecurity hurdle: money

A new cyber incentive framework from the Federal Energy Regulatory Commission could help utilities adapt to new threats at a faster pace, by providing flexibility for them to invest in pre-qualified cybersecurity measures.

---

U.S. military members receive unsolicited smartwatches in the mail

Service members across the United States military have reportedly been receiving unsolicited smartwatches in the mail, which is raising cybersecurity concerns.