Latest Cybersecurity News and Articles


Hackers Leak i2VPN Admin Credentials on Telegram

07 June 2023
Although the hackers did not directly release user data, the compromised admin panel credentials potentially grant access to a substantial amount of personal information and data centers.

New PowerDrop Malware Targeting U.S. Aerospace Industry

07 June 2023
An unknown threat actor has been observed targeting the U.S. aerospace industry with a new PowerShell-based malware called PowerDrop. "PowerDrop uses advanced techniques to evade detection such as deception, encoding, and encryption," according to Adlumin, which found the malware implanted in an unnamed domestic aerospace defense contractor in May 2023. "The name is derived from the tool,

Service Rents Email Addresses for Account Signups

06 June 2023
One of the most expensive aspects of any cybercriminal operation is the time and effort it takes to create large numbers of new throwaway email accounts. Now a new service offers to help dramatically cut costs associated with large-scale spam and account creation campaigns, by paying people to sell their email account credentials and letting customers temporarily rent access to a vast pool of established accounts at major providers.

CISA releases joint guide to securing remote access software

06 June 2023
CISA has released a joint guide that informs organizations how to detect and defend against malicious actors abusing remote access software.

New vulnerabilities published in 2022 increased 25%

06 June 2023
A report from Skybox Security found a 25% increase in new vulnerabilities published within 2022, a year-over-year rise the biggest seen since 2017.

57% of financial organizations use multiple cloud service providers

06 June 2023
Cloud adoption continues to increase within the financial services sector with the majority reporting that they're using some form of cloud computing.

Apple Unveils Upcoming Privacy and Security Features

06 June 2023
Apple’s Safari browser is getting an improved Private Browsing mode, which will lock when not in use, so that users can leave tabs open even if they need to step away from the device.

New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency

06 June 2023
A recent malware campaign has been found to leverage Satacom downloader as a conduit to deploy stealthy malware capable of siphoning cryptocurrency using a rogue extension for Chromium-based browsers. "The main purpose of the malware that is dropped by the Satacom downloader is to steal BTC from the victim's account by performing web injections into targeted cryptocurrency websites," Kaspersky

Update: Augusta not in contact with ransomware group behind attack, mayor says

06 June 2023
In a statement on Friday, the office of Augusta Mayor Garnett Johnson said it has continued to work with the city’s IT team and outside security specialists to address the cyberattack that started on May 21.

Security leaders implement third-party security measures

06 June 2023
IT professionals and navigating the threat landscape was analyzed in a recent report by Ironscales and Enterprise Security Group (ESG).

North Korea Makes 50% of Income from Cyber-Attacks: Report

06 June 2023
A senior official from the Biden administration told Nikkei that attacks directed by the hermit nation had risen sharply since 2018, in lockstep with its nuclear and missile programs.

What security leaders can learn from Smashing Pumpkins hacker attack

06 June 2023
While stealing music from a band might not be equal to obtaining and releasing customer personal information, there are still lessons to learn from this incident.

Over 60K Adware Apps Posing as Cracked Versions of Popular Apps Target Android Devices

06 June 2023
These apps aren't distributed through the Google Play Store. Instead, users searching for apps like Netflix, PDF viewers, security software, and cracked versions of YouTube on a search engine are redirected to an ad page hosting the malware.

Cybercriminals target C-suite, family members with sophisticated attacks

06 June 2023
Senior corporate executives are increasingly being targeted by sophisticated cyberattacks that target their corporate and home office environments and even extend to family members, according to a study from BlackCloak and Ponemon Institute.

Android security update fixes Mali GPU flaw exploited by spyware

06 June 2023
Google has released the monthly security update for the Android platform, adding fixes for 56 vulnerabilities, five of them with a critical severity rating and one exploited since at least last December.

Verizon 2023 DBIR: Human Error Involved in Many Breaches, Ransomware Cost Surges

06 June 2023
Ransomware accounted for 24% of cybersecurity incidents analyzed by Verizon. The company saw the number of ransomware attacks being higher in the past two years than in the previous five years combined.

Impulse Team Ran Years-Long Mostly-Undetected Cryptocurrency Scam

06 June 2023
The scam works via an advanced fee fraud, tricking victims into believing they've won cryptocurrency rewards but requiring them to pay a small activation fee to access their rewards.

NATO: Military cyber defenders need to be present on networks during peacetime

06 June 2023
David van Weel, NATO’s assistant secretary general for emerging security challenges, told the 15th annual International Conference on Cyber Conflict (CyCon) that NATO members will begin recognizing cyberspace as “a permanently contested environment.”

SpinOk Android Malware Found in More Apps With 30 Million Installs

06 June 2023
CloudSEK used the IoCs provided in Dr. Web’s report to uncover more SpinOk infections, extending the list of bad apps to 193 after discovering an additional 92 apps. Roughly half of those were available on Google Play.

Over 60K Adware Apps Posing as Cracked Versions of Popular Apps Target Android Devices

06 June 2023
Thousands of adware apps for Android have been found to masquerade as cracks or modded versions of popular apps to redirect users to serve unwanted ads to users as part of a campaign ongoing since October 2022. "The campaign is designed to aggressively push adware to Android devices with the purpose to drive revenue," Bitdefender said in a technical report shared with The Hacker News. "However,