News
-
"Dell Urges Customers to Patch Vulnerabilities in PowerProtect Products"Dell is urging customers of its PowerProtect products to review a newly released security advisory and patch a series of potentially serious vulnerabilities.
-
"NSA Releases Recommendations to Mitigate Software Supply Chain Risks"In response to a rise in supply chain cyberattacks over the past five years, the National Security Agency (NSA) has released a Cybersecurity Information Sheet (CSI) titled "Recommendations for Software Bill of Materials (SBOM) Management." This CSI off
-
"MITRE Debuts ICS Threat Modeling for Embedded Systems"In collaboration with researchers from three other organizations, MITRE has released a draft of a new threat-modeling framework for those who make embedded devices used in critical infrastructure environments.
-
"Hackers Keep Winning by Gambling on SQL Injection Exploits"Group-IB warns that a hacking group dubbed GambleForce has been targeting businesses and government agencies in attacks involving exploiting SQL injection flaws.
-
"Cybercrime Operation That Sold Millions of Fraudulent Microsoft Accounts Disrupted"Microsoft has disrupted Storm-1152, an alleged threat actor group that built Cybercrime-as-a-Service (CaaS) businesses.
-
"Stealthy KV-Botnet Hijacks SOHO Routers and VPN Devices"Volt Typhoon, also known as Bronze Silhouette, a Chinese state-sponsored Advanced Persistent Threat (APT) hacking group, has been linked to a botnet called KV-botnet, which it has been using since at least 2022 to attack Small Office Home Office
-
"Approval Phishing Scams Drain $1bn of Cryptocurrency From Victims"According to security researchers at Chainalysis, approval phishing scams have been used to steal at least $1bn in cryptocurrency since May 2021.
-
"Nearly a Million Non-profit Donors' Details Left Exposed in Unsecured Database"A database owned and operated by DonorView exposed nearly a million records containing Personally Identifiable Information (PII) of donors who sent money to non-profits.
-
"Share of LockBit 3.0 Ransomware Attacks Hardly Drops in Europe"According to a recent study by researchers from ZeroFox, the share of ransomware attacks by the infamous LockBit 3.0 hackers is slowly declining. In Europe, there is also a slow decline, but it is almost negligible.
-
"LockBit Ransomware Now Poaching BlackCat, NoEscape Affiliates"The LockBit ransomware operation is now starting to recruit affiliates and developers from the BlackCat/ALPHV and NoEscape ransomware gangs after recent disruptions and exit scams.
-
"UCalgary Legal Researchers Receive Grant to Expand Offerings in Cybersecurity"Beyond the technical core of cybersecurity, there are complex policy and regulatory aspects.
-
"Major Leak Exposes Users From Russian Crypto Exchanges"According to the Cybernews research team, customers at nine Russian cryptocurrency exchanges have been exposed, with private user data being revealed for over two months.