Latest Cybersecurity News and Articles

---

Compromised Linux SSH servers engage in DDoS attacks, cryptomining

A threat actor is mounting dictionary attacks to log into Linux servers with SSH installed and saddle the server with the Tsunami and ShellBot DDoS bots, the XMRig CoinMiner program, and Log Cleaner – a tool for deleting and modifying logs.

---

Experts Uncover Year-Long Cyberattack on IT Firm Utilizing Custom Malware RDStealer

"The operation was active for more than a year with the end goal of compromising credentials and data exfiltration," Bitdefender security researcher Victor Vrabie said in a technical report shared with The Hacker News.

---

Vulnerable information is discovered within minutes by cybercriminals

Cybercriminal habits were analyzed in a recent report by Orca Security that reveals that attackers typically find exposed secrets in two minutes.

---

Phishing scam takes $950k from DoorDash drivers

The scam involved placing bogus orders, contacting drivers claiming to be from the DoorDash support team, and convincing them to hand over banking details or log in to a fake portal.

---

55% of employees solely use mobile device for work while traveling

Bring your own device (BYOD) policies have become difficult for IT teams to monitor, especially during increased travel in summer months.

---

Inside of the WASP's nest: deep dive into PyPI-hosted malware

Virustotal experts identified a number of specific PyPI-based malware campaigns, including Discord Token Grabber V2, Hazard Token Grabber V2, Chromium Stealer, and W4SP Stealer (with Hyperion obfuscator).

---

Iowa’s Largest School District Confirms Ransomware Attack, Data Theft

Following the January ransomware attack, the school district canceled all classes for several days starting January 10, after internet and network services were also taken offline during the incident's investigation.

---

Western Digital Blocks Unpatched Devices From Cloud Services

The move, which began on June 15, comes one month after the company released firmware updates for its My Cloud product line to address multiple security defects, including a critical path traversal bug that leads to remote code execution (RCE).

---

Federal Authority Warns Health Sector of TimisoaraHackerTeam Threats

Federal authorities are warning the healthcare sector of an apparent resurgence of TimisoaraHackerTeam threats after a recent attack by the "obscure" ransomware group on a U.S. cancer center.

---

Illinois hospital attributes closure to ransomware attack

In what seems to be the first announcement of its kind, two rural healthcare facilities closed last week citing a ransomware attack as part of the reasons why.

---

Zyxel Releases Urgent Security Updates for Critical Vulnerability in NAS Devices

Zyxel has rolled out security updates to address a critical pre-authentication command injection flaw in its network-attached storage (NAS) devices that could result in the execution of arbitrary commands on affected systems.

---

City of Fayetteville Dealing with Debilitating Cyberattack

“The City of Fayetteville has experienced a suspected cyber incident, and most online/web-based municipal services have been taken offline as a proactive measure," the city said.

---

Zyxel Releases Urgent Security Updates for Critical Vulnerability in NAS Devices

Zyxel has rolled out security updates to address a critical security flaw in its network-attached storage (NAS) devices that could result in the execution of arbitrary commands on affected systems. Tracked as CVE-2023-27992 (CVSS score: 9.8), the issue has been described as a pre-authentication command injection vulnerability. "The pre-authentication command injection vulnerability in some Zyxel

---

Security leaders discuss the spread of MOVEIt vulnerability

It has been several weeks since the MOVEit vulnerability began making headlines, but the span of organizations and governmental entities being affected by related data breaches have continued to grow. 

---

SaaS in the Real World: How Global Food Chains Can Secure Their Digital Dish

The Quick Serve Restaurant (QSR) industry is built on consistency and shared resources. National chains like McDonald's and regional ones like Cracker Barrel grow faster by reusing the same business model, decor, and menu, with little change from one location to the next.  QSR technology stacks mirror the consistency of the front end of each store. Despite each franchise being independently

---

Experts Uncover Year-Long Cyber Attack on IT Firm Utilizing Custom Malware RDStealer

A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang called RDStealer. "The operation was active for more than a year with the end goal of compromising credentials and data exfiltration," Bitdefender security researcher Victor Vrabie said in a technical report shared with The Hacker News. Evidence gathered by the Romanian

---

Over 100,000 Stolen ChatGPT Account Credentials Sold on Dark Web Marketplaces

The Asia-Pacific region experienced the highest number of compromised accounts, reaching approximately 41,000. In comparison, Europe had nearly 17,000 compromised accounts, while North America ranked fifth, reporting around 4,700 instances.

---

EU member states are urged to restrict without delay 5G equipment from risky suppliers

The European Commission told member states to impose restrictions on high-risk suppliers for 5G networks without delay, with a specific focus on the dependency on high-risk suppliers, specifically Chinese firms Huawei and ZTE.

---

Update: Australia's NDIS Agency Scrambles Over Risk of Leaked Sensitive Client Information in HWL Ebsworth Hack

The Australian agency responsible for the national disability insurance scheme is scrambling to learn whether sensitive client information related to appeal cases has been caught up in a large cybersecurity hack on the law firm HWL Ebsworth.

---

UK National Crime Agency Head Calls For Hacking Law Updates

A British cyber law that criminalizes hacking and other intrusion activities is outdated, often hindering law enforcement action against cyber crooks, U.K. lawmakers heard during a parliamentary hearing on cybercrime.