Latest Cybersecurity News and Articles
03 May 2023
According to a tip sent to Heimdal by an anonymous reader, the APT’s choice in phishing is an email in which the victim is informed about the status of an unclaimed postal package.
03 May 2023
On average, five out of every 1,000 enterprise users attempted to download malware in Q1 2023, and new malware families and variants represented 72% of those malware downloads, according to Netskope.
03 May 2023
During a House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection hearing on Thursday, CISA Director Jen Easterly told lawmakers that “innovation should not trump safety and security in a world where we all rely on tech.”
03 May 2023
Hackers exploited a Level Finance smart contract vulnerability to drain 214,000 LVL tokens from the decentralized exchange and swapped them for 3,345 BNB, worth approximately $1,100,000.
03 May 2023
The company first revealed in an incident report five days ago that the notifications were erroneous and linked to routine database maintenance scheduled on Thursday, April 27th.
03 May 2023
Almost half of MSP clients fell victim to a cyberattack within the last 12 months. In the SMB world, the danger is especially acute as only 50% of SMBs have a dedicated internal IT person to take care of cybersecurity. No wonder cybercriminals are targeting SMBs so heavily. No wonder SMBs are increasingly willing to pay a subscription or retainer to gain access to expert C-level cyber-assistance
03 May 2023
An international law enforcement operation has resulted in the arrest of 288 vendors who are believed to be involved in drug trafficking on the dark web, adding to a long list of criminal enterprises that have been shuttered in recent years.
The effort, codenamed Operation SpecTor, also saw the authorities confiscating more than $53.4 million in cash and virtual currencies, 850 kg of drugs, and
03 May 2023
ChatGPT has not released an official desktop client, but this bogus version looks remarkably similar to what one would expect. The infostealer is being distributed via a zip archive carrying a file named ChatGPT For Windows Setup 1.0.0.exe.
03 May 2023
A recently fixed vulnerability in Oracle Opera, a property management system widely used in hotel and resort chains, is more critical than what Oracle says and could be exploited by unauthenticated remote attackers to access sensitive information.
03 May 2023
The police’s search may have been part of an investigation into hackers who often use VPN services to hide their cybercrime. Mullvad is a VPN service that is known for its strict privacy policy and does not require user registration upon connection.
03 May 2023
South Korean education, diplomatic, political, and construction firms are being targeted by the China-aligned Tonto Team, which is using a file related to anti-malware products to execute its attacks. Tonto Team, active since 2009, is known for targeting different sectors across Asia and Eastern Europe.
03 May 2023
Apple and Google have teamed up to work on a draft industry-wide specification that's designed to tackle safety risks and alert users when they are being tracked without their knowledge or permission using devices like AirTags.
"The first-of-its-kind specification will allow Bluetooth location-tracking devices to be compatible with unauthorized tracking detection and alerts across Android and
03 May 2023
The seized sites allowed users to anonymously convert cryptocurrency into harder-to-trace coins to obscure the money trace and help cybercriminals launder their pilfers without being traced by law enforcement.
03 May 2023
Advance fee fraud occurs when a scammer tricks a victim into paying for an item or service that never turns up. Unlike other types of fraud, banks will often not reimburse the victims.
03 May 2023
The discovery is the result of an analysis of seven different implementations of BGP carried out by Forescout Vedere Labs: FRRouting, BIRD, OpenBGPd, Mikrotik RouterOS, Juniper JunOS, Cisco IOS, and Arista EOS.
03 May 2023
Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording (DVR) devices, according to an advisory issued by Fortinet FortiGuard Labs.
The vulnerability in question is CVE-2018-9995 (CVSS score: 9.8), a critical authentication bypass issue that could be exploited by remote actors to gain elevated permissions.
"The 5-year-old vulnerability (
03 May 2023
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday released an Industrial Control Systems (ICS) advisory about a critical flaw affecting ME RTU remote terminal units.
The security vulnerability, tracked as CVE-2023-2131, has received the highest severity rating of 10.0 on the CVSS scoring system for its low attack complexity.
"Successful exploitation of this
02 May 2023
By Sergey Shykevich, Threat Intelligence Group Manager, Check Point. Hacktivism has traditionally been associated with loosely managed underground cyber criminal entities. These decentralized and unstructured groups are typically composed of individuals cooperating in support of specific agendas. Over the course of the last year, and following developments in the Russian-Ukrainian conflict, the hacktivist ecosystem has […]
The post Hacktivism and the new age of cyber warfare appeared first on CyberTalk.
02 May 2023
A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers. The leaked records indicate the network's chief technology officer in Pakistan has been hacked for the past year, and that the entire operation was created by the principals of a Tennessee-based telemarketing firm that has promoted USPS employment websites since 2016.
02 May 2023
A survey asked how organizations are responding to emerging threat vectors created by cloud-based communication and collaboration applications.