Latest Cybersecurity News and Articles

---

Dallas in the homestretch of ransomware attack recovery

Most of Dallas’ network and IT infrastructure has been restored following a ransomware attack in early May that took most of the city’s services offline and disrupted operations, the city said Monday.

---

Update: Barracuda Urges Customers to Replace Hacked Email Security Appliances

“If you have not replaced your appliance after receiving notice in your UI, contact support now,” Barracuda said. “Barracuda’s remediation recommendation at this time is full replacement of the impacted ESG.”

---

How to make developers love security

Lack of business context, unclear prioritization, disputes over ownership and responsibility, long feedback loops, and insufficient ability to make change are some of the top issues inhibiting successful developer-security collaboration.

---

US government's TikTok ban extended to include contractors

The rule would apply to all contracts, even those below the "simplified acquisition threshold" of $250,000, purchases of commercial and off-the-shelf equipment, and commercial services.

---

High-risk vulnerabilities patched in ABB Aspect building management system

The two vulnerabilities affect versions before 3.07.01 and could result in remote code execution (RCE), and privilege escalation within the Aspect Control Engine software, potentially giving an attacker complete control over the BMS.

---

OneDrive to Enum Them All

OneDrive can be used for user enumeration as it creates a unique URL for each user that is tied to their Azure/M365 account. This is possible because OneDrive doesn't require a login attempt, is completely silent, and there's no rate-limiting.

---

Service Rents Email Addresses for Account Signups – Krebs on Security

Kopeechka is offering to help cybercriminals cut costs associated with large-scale spam and account creation campaigns by paying people to sell their email credentials and allowing customers to rent access to established accounts at major providers.

---

Outpost24 Acquires External Attack Surface Management Provider Sweepatic to Reduce Risk Exposure of Internet-Facing Assets

Outpost24, a leading cybersecurity risk management platform, announced the acquisition of Sweepatic. Based in Leuven (BE), Sweepatic is an innovative external attack surface management (EASM) platform.

---

University of Rochester, Nova Scotia first known MoveIT victims in North America

The government of Nova Scotia and the University of Rochester are the first organizations in North America to confirm data theft as a result of the exploitation of a new vulnerability affecting popular file transfer tool MOVEit.

---

Enigma revives PUP labeling lawsuit against Malwarebytes

The US Ninth Circuit Court of Appeals last week ruled that Enigma Software Group can pursue its long-standing complaint against rival security firm Malwarebytes for classifying its software as "potentially unwanted programs" or PUPs.

---

Zoom Expands Privacy Options for European Customers

The key element is the option for European Economic Area (EEA) data storage. Paid customers will be able to specify certain data for meetings, webinars, and team chats to be stored within the EEA.

---

New PowerDrop Malware Targets U.S. Aerospace Industry

The U.S. aerospace industry has recently been targeted by an unidentified threat actor leveraging a newly discovered malware that researchers named PowerDrop. Its sophisticated evasion techniques include deception, encoding, and encryption.  The company suggests conducting vulnerability scans on Windows systems and remaining vigilant for any unusual pinging activity.

---

Urgent Security Updates: Cisco and VMware Address Critical Vulnerabilities

VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution. The most critical of the three vulnerabilities is a command injection vulnerability tracked as CVE-2023-20887 (CVSS score: 9.8) that could allow a malicious actor with network access to achieve remote code execution. Also patched by

---

Kimsuky Targets Think Tanks and News Media with Social Engineering Attacks

The North Korean nation-state threat actor known as Kimsuky has been linked to a social engineering campaign targeting experts in North Korean affairs with the goal of stealing Google credentials and delivering reconnaissance malware. "Further, Kimsuky's objective extends to the theft of subscription credentials from NK News," cybersecurity firm SentinelOne said in a report shared with The

---

Barracuda Urges Immediate Replacement of Hacked ESG Appliances

Enterprise security company Barracuda is now urging customers who were impacted by a recently disclosed zero-day flaw in its Email Security Gateway (ESG) appliances to immediately replace them. "Impacted ESG appliances must be immediately replaced regardless of patch version level," the company said in an update, adding its "remediation recommendation at this time is full replacement of the

---

82% of security leaders believe cloud automation critical

A recent survey from NetApp looks at how IT decision makers feel about the ways their organizations are working to optimize their environments.

---

Microsoft settles FTC charges for violating COPPA

Following Federal Trade Commission (FTC) charges, Microsoft will bay $20 million to settle Children's Online Protection Act (COPPA) violations. 

---

Security leaders expected to expand threat management budgets

To better navigate emerging risks and the current threat landscape, security leaders are expanding cybersecurity budgets to protect organizations. 

---

VMware fixes critical vulnerability in vRealize network analytics tool

VMware issued multiple security patches today to address critical and high-severity vulnerabilities in VMware Aria Operations for Networks, allowing attackers to gain remote execution or access sensitive information.

---

US, Israel Provide Guidance on Securing Remote Access Software

The Guide to Securing Remote Access Software (PDF) is authored by the CISA, the FBI, the NSA, the Multi-State Information Sharing and Analysis Center (MS-ISAC), and the Israel National Cyber Directorate (INCD).