Latest Cybersecurity News and Articles

---

Brown & Brown, Inc. appoints Barry Hensley as CSO and Rob Burch as CISO

Brown & Brown, Inc. has announced the appointment of Barry Hensley as Chief Security Officer and Rob Burch as Chief Information Security Officer.

---

North Africa Targeted by Stealth Soldier Backdoor in Espionage Attacks

A previously undisclosed backdoor named Stealth Soldier is targeting Libyan organizations. Security experts have identified three distinct infection chains involving three different versions of Stealth Soldier malware. The recent campaign underscores the growing complexity of cyberespionage activities.

---

New York City sues Hyundai, Kia claiming cars easy to steal

Hyundai and Kia cars were stolen 977 times in New York City in the first four months of 2023, and authorities have had enough. This represents a roughly 660 percent increase in such thefts as compared to those same months in 2022.

---

Australian Capital Territory Government Falls Victim to Barracuda’s ESG Vulnerability

In a press conference on June 8, ACT government chief digital officer Bettina Konti said there is a likelihood that some personal information is involved but the harms assessment needs to be completed for that to be clear.

---

Report: 55% of organizations have experienced a SaaS security incident

A new survey found while the use of cloud services is increasing, the pace of adoption is dependent on the speed of meeting security and operational expectations.

---

Cisco Counterfeiter Pleads Guilty to $100m Scheme

Onur Aksoy, 39, of Miami, pleaded guilty to conspiring with others to traffic in counterfeit goods, to commit mail fraud, and to commit wire fraud and mail fraud. He made over $100m from importing and selling counterfeit Cisco networking devices.

---

New Custom Backdoor 'Stealth Soldier' Targets North Africa with Espionage Attacks

"Stealth Soldier malware is an undocumented backdoor that primarily operates surveillance functions such as file exfiltration, screen and microphone recording, keystroke logging, and stealing browser information," Check Point said in a report.

---

5 Reasons Why Access Management is the Key to Securing the Modern Workplace

The way we work has undergone a dramatic transformation in recent years. We now operate within digital ecosystems, where remote work and the reliance on a multitude of digital tools is the norm rather than the exception. This shift – as you likely know from your own life – has led to superhuman levels of productivity that we wouldn't ever want to give up. But moving fast comes at a cost. And for

---

US DOJ Indicts 6 for $6M Business Email Compromise Scam

U.S. federal prosecutors unsealed indictments Wednesday against six Houston-area men for an alleged six-month spree of business email compromise thefts adding up to nearly $6 million.

---

Wealthy New Jersey Township Hit with Cyberattack, Mayor Says

Katya Wowk, Montclair’s communications director, told Recorded Future News that the incident is not related to the MOVEit vulnerability that has led to attacks on dozens of organizations in recent weeks.

---

Darkweb credit card marts in decline across Asia

The number of stolen Asian credit card numbers on dark web markets has fallen sharply, Group-IB told Singapore's ATxSG conference. Instead, criminals have escalated their attempts to steal corporate documents – with India being the prime target.

---

Clop Ransomware Gang Likely Aware of MOVEit Transfer Vulnerability Since 2021

It's worth noting that Cl0p carried out similar mass exploitation attacks on other managed file transfer applications such as SolarWinds Serv-U Managed File Transfer, Accellion FTA, and GoAnywhere MFT since December 2020.

---

Cyber Extortionists Seek Out Fresh Victims in LatAm and Asia

Cyber-extortion gangs shifted their focus away from North America and Europe and towards Latin America and Asia during 2022, possibly influenced by Russia’s invasion of Ukraine, according to Orange Cyberdefense.

---

“Picture in Picture” Technique Exploited in New Deceptive Phishing Attack

In a recent phishing campaign, hackers have employed sophisticated obfuscation tactics to deceive unsuspecting users into visiting malicious websites and disclosing sensitive information.

---

PoC released for Windows Win32k bug exploited in attacks

The vulnerability is tracked as CVE-2023-29336 and was originally discovered by cybersecurity firm Avast. It was assigned a CVSS v3.1 severity rating of 7.8 as it allows low-privileged users to gain Windows SYSTEM privileges.

---

Update: North Korea's Lazarus Group linked to Atomic Wallet heist

Elliptic researchers said that by tracking some of the stolen crypto, they were able to collect information about how it was handled and laundered, with the audit trail pointing in the direction of Lazarus Group.

---

Stealth Soldier: A New Custom Backdoor Targets North Africa with Espionage Attacks

A new custom backdoor dubbed Stealth Soldier has been deployed as part of a set of highly-targeted espionage attacks in North Africa. "Stealth Soldier malware is an undocumented backdoor that primarily operates surveillance functions such as file exfiltration, screen and microphone recording, keystroke logging and stealing browser information," cybersecurity company Check Point said in a

---

Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

It's not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware -- as opposed to just applying software updates. But experts say that is exactly what transpired this week with Barracuda Networks, as the company struggled to combat a sprawling malware threat which appears to have undermined its email security appliances in such a fundamental way that they can no longer be safely updated with software fixes.

---

48% of security leaders say distributed workforce influences spending

The quick development of artificial intelligence and new technologies has led security leaders to consider how to implement them in cybersecurity.

---

Aix-Marseille, France’s largest university, hit by cyberattack

The institution’s management described the attack as coming “from a foreign country” but said its security systems triggered an alert allowing them to take the network offline before “great damage” was caused.