Latest Cybersecurity News and Articles
20 April 2023
GitHub has released features for secure vulnerability reporting and npm package provenance. In other news, the Node.js open source package repository, npm, was overwhelmed with fake packages by malicious actors, which caused a temporary denial-of-service (DoS) attack.
20 April 2023
"This leak is of more interest to programmers, since it contains the source codes of the following Bing products, Bing Maps and Cortana," the crew wrote on its website, which was screenshotted and shared by Emsisoft threat analyst Brett Callow.
20 April 2023
Telecommunication services providers in Africa are the target of a new campaign orchestrated by a China-linked threat actor at least since November 2022.
The intrusions have been pinned on a hacking crew tracked by Symantec as Daggerfly, and which is also tracked by the broader cybersecurity community as Bronze Highland and Evasive Panda.
The campaign makes use of "previously unseen plugins from
20 April 2023
Israeli spyware maker NSO Group deployed at least three novel "zero-click" exploits against iPhones in 2022 to infiltrate defenses erected by Apple and deploy Pegasus, according to the latest findings from Citizen Lab.
"NSO Group customers widely deployed at least three iOS 15 and iOS 16 zero-click exploit chains against civil society targets around the world," the interdisciplinary laboratory
20 April 2023
Since the content hosted on IPFS is decentralized and distributed, there are challenges in locating and removing malicious content from the ecosystem, making it akin to bullet-proof hosting.
20 April 2023
Researchers started observing attackers making use of an unorthodox type of backdoor and reinfection method which would go completely undetected if website monitoring doesn’t happen to include the database.
20 April 2023
This scam is all a spin on the much older fake check scam, covered in detail by the FTC. Some of the variations include personal assistant scams, car wrap scams, and overpayments scams.
20 April 2023
An independent security analyst and bug hunter, Nagli (@naglinagli), recently uncovered a critical security vulnerability in ChatGPT that allow attackers to easily exploit the vulnerability and gain complete control of any ChatGPT user’s account.
19 April 2023
By Edwin Doyle, Global Cyber Security Strategist. Cyber security policy is a comprehensive framework consisting of guidelines, protocols, principles and regulations that aim to safeguard an organization’s information technology infrastructure, networks and sensitive data from a variety of cyber threats; ranging from inadvertent breaches to malicious attacks. Who owns policy? The Chief Risk Officer, typically […]
The post Why BISOs should oversee policy & report to CROs appeared first on CyberTalk.
19 April 2023
Northern Ireland continues to play a critical role in securing UK-wide online resilience 25 years after the pivotal accord was signed.
19 April 2023
New guide, published during CYBERUK 2023, sets out cyber security best practices for creating connected places.
19 April 2023
Report from the European Cyber Conflict Research Initiative (ECCRI) gives new insights into the role of cyber criminals and political hacktivists in a conflict, and critical questions around industry support to Ukraine's cyber resilience.
19 April 2023
The rival chat apps WhatsApp and Signal have joined forces in a rare show of unity to protest against the online safety bill, which they say could undermine the UK’s privacy and safety.
19 April 2023
A database containing more than 1.2 million police records and 800 GB of information on people who work or applied for employment in law enforcement in the Philippines appears to have been breached, according to a cybersecurity researcher.
19 April 2023
EXECUTIVE SUMMARY: Although the topics of climate change and cyber security seem worlds apart, the reality is that they’re deeply interconnected. The intersection of the two fields is a complex and rapidly evolving domain that demands attention from enterprises across industries and market verticals. In this article, we’ll explore key points pertaining to climate change […]
The post Climate change, cyber security and saving the planet appeared first on CyberTalk.
19 April 2023
Most of today’s space systems were developed under the premise that space was a sanctuary from conflict, but according to the CSC 2.0 commission, this is no longer the case.
19 April 2023
With hybrid and remote work, security leaders are tracking employee productivity. New research analyzed the effect that monitoring had on employees.
19 April 2023
The cyber espionage actor tracked as Blind Eagle has been linked to a new multi-stage attack chain that leads to the deployment of the NjRAT remote access trojan on compromised systems.
19 April 2023
The Silicon Valley startup has banked $12 million in venture capital funding to drive innovation in the data security and governance space. The Series A funding round was led by Storm Ventures and brings the total raised by Dasera to $20 million.
19 April 2023
A rising trend has been identified among cybercriminals; they are using Action1 remote access software for reconnaissance activity and to run code with system privileges on network hosts. In fact, it was observed in at least three ransomware attacks by threat actor groups.