Latest Cybersecurity News and Articles


Researcher hijacks popular Packagist PHP packages to get a job

04 May 2023
A researcher with the pseudonym 'neskafe3v1' reached out to BleepingComputer stating he had taken over fourteen Packagist packages, with one of them having over 500 million installs.

ChatGPT hacking, it’s only just begun…

03 May 2023
EXECUTIVE SUMMARY: Since its November debut on the world stage, the popular AI-powered chatbot, ChatGPT, has continuously attracted cyber criminal attention. Although OpenAI, has developed security measures to prevent product misuse, these measures have not curtailed hacker pursuits. According to Check Point researchers, some cyber criminals are selling tools that enable other cyber criminals to […] The post ChatGPT hacking, it’s only just begun… appeared first on CyberTalk.

KEV Catalog Adds Vulnerabilities Affecting TP-Link, Apache, and Oracle WebLogic Server

03 May 2023
Watch out for bugs in TP-Link, Apache Log4j2, and Oracle WebLogic Server that are under active exploitation by different cybercriminal groups, warns CISA. FCEB agencies are required to apply vendor-provided fixes by May 22, 2023.

Phishing Campaign Targets Romanian Telecom Users

03 May 2023
Heimdal Security's SOC team has discovered an ongoing phishing campaign that seems to be aimed at customers of Romanian telecom providers. The fraudulent page requests the victims to submit their credit card information to cover a tax related to changing a delivery address. Experts recommend avoiding opening suspicious emails or links, and using order tracking features wherever available.

AresLoader Malware Attacking Citrix Users Through Malicious GitLab Repo

03 May 2023
Cyble has recently detected AresLoader, a novel loader that is found to be disseminating numerous malware families. Malware loaders are designed to deploy and execute diverse malware strains on the targeted computer system of the victim.

Promising Jobs at the U.S. Postal Service, ‘US Job Services’ Website Leaks Customer Data

03 May 2023
A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers.

Chrome 113 Released With 15 Security Patches

03 May 2023
Released roughly two weeks after Google resolved two zero-day vulnerabilities in the popular browser, the latest Chrome update only resolves medium- and low-severity flaws, despite the major version change.

Most open source maintainers still consider themselves hobbyists, despite compensation pledges

03 May 2023
Despite a major push to strengthen the security of the software supply chain, a report released Tuesday from Tidelift shows more than 60% of open source maintainers describe themselves as unpaid hobbyists.

Murfreesboro Medical Clinic Closed for Multiple Days After Cyberattack

03 May 2023
The criminal cyberattack on April 22 led Murfreesboro Medical Clinic & SurgiCenter to initiate an emergency shutdown of their network to limit the spread of stolen information within their systems.

Gary Starling appointed as CISO at IntelePeer

03 May 2023
IntelePeer recently named Gary Starling as CISO. Starling brings with him more than 20 years of domestic and multi-national IT and information security experience.

Card Skimmers and ATMs Used to Drain EBT Accounts in SoCal

03 May 2023
The suspects are accused of using card skimmers and ATMs to drain electronic benefit transfer (EBT) accounts, which are used to pay for food through the Supplemental Nutrition Assistance Program (SNAP).

How AI and other technologies have changed password management

03 May 2023
AI has changed the way security leaders look at passwords. Learn more in this Security podcast episode with Parteek Saran, founder and CEO of Uno. 

Häfele recovers from ransomware attack with new SASE platform

03 May 2023
An international manufacturer and supplier of furniture fittings, recovered from a recent ransomware attack after utilizing a single-vendor SASE platform. 

Attacks increasingly use malicious HTML email attachments

03 May 2023
Researchers warn that attackers are relying more on malicious HTML files in their attacks, with malicious files now accounting for half of all HTML attachments sent via email.

Google will remove secure website indicators in Chrome 117

03 May 2023
The lock icon will be changed in Chrome 117 with a "variant of the tune icon," a user interface element commonly linked to app settings and designed to show that it's a clickable item.

Google Introduces Passwordless Secure Sign-In with Passkeys for Google Accounts

03 May 2023
Almost five months after Google added support for passkeys to its Chrome browser, the tech giant has begun rolling out the passwordless solution across Google Accounts on all platforms. Passkeys, backed by the FIDO Alliance, are a more secure way to sign in to apps and websites without having to use a traditional password. This, in turn, can be achieved by simply unlocking their computer or

Apple and Google try anti-stalking spec for Bluetooth tags

03 May 2023
Though Tile has been selling Bluetooth Low Energy (BLE) wireless tracking tags for a decade, it wasn't until 2021, when Samsung introduced its Galaxy SmartTag and Apple introduced its AirTag, that reports of abuse of the devices became commonplace.

Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

03 May 2023
A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in Taiwan, Thailand, the Philippines, and Fiji after more than six months of no activity. Trend Micro attributed the intrusion set to a cyber espionage group it tracks under the name Earth Longzhi, which is a subgroup within APT41 (aka HOODOO

Tython: Open-source Security as Code framework and SDK

03 May 2023
Tython revolutionizes how security and development teams operate and collaborate — it democratizes security for developers, enables development and security to work autonomously, and creates shared responsibility around security.

Meta Warns of Cyberespionage Campaigns Targeting Military Personnel in South Asia

03 May 2023
State-linked hackers in Pakistan have been spying on military personnel in India and the Pakistan Air Force using fake apps and websites to compromise their personal devices, Meta announced on Wednesday.