News
-
"PoC Exploit Published for Cisco AnyConnect Secure Vulnerability"A security researcher has recently published proof-of-concept (PoC) code targeting a recently patched high-severity vulnerability in the Cisco AnyConnect Secure Mobility Client and Secure Client for Windows. Cisco AnyConnect Secure Mobility Client… -
"Bipartisan Bill Proposes Cybersecurity Funds for Rural Water Systems"A new bill announced on June 5, 2023, proposes increasing cybersecurity funding for rural water systems by $7.5 million per year. It's not a lot of money for part of the critical infrastructure, but it's better than nothing for an area that misses…
-
"Johns Hopkins APL Designs Framework for a Digital Red Cross"In the physical world, the Red Cross, Red Crescent, and Red Crystal displayed on hospitals and ambulances across the globe are internationally recognized symbols of legal protection for the sick, the wounded, and those who care for them during armed…
-
"Emerging Ransomware Group 8Base Doxxes SMBs Globally"A series of business data leaks on the dark web has brought a ransomware group that operated undetected for over a year to light in recent weeks. "8Base," not to be confused with the Florida-based software company of the same name, has been conducting…
-
"APT37 Hackers Deploy New FadeStealer Eavesdropping Malware"The North Korean APT37 hacking group uses a new information-stealing malware called "FadeStealer" with a wiretapping feature, allowing the threat actor to eavesdrop and record from victims' microphones. It is believed that APT37, also known as Reaper and…
-
"New Report Exposes Operation Triangulation's Spyware Implant Targeting iOS Devices"More information about the spyware implant delivered to iOS devices as part of the Operation Triangulation campaign has emerged. The malware has a 30-day lifespan, after which it is automatically uninstalled unless the attackers extend the time. The "…
-
"US and European IT Decision-Makers Have Different Cloud Security Priorities"According to SUSE, increased cloud adoption has raised cloud security concerns among Information Technology (IT) teams, who are faced with challenges stemming from the widespread use of complex cloud environments. According to a survey, IT decision-…
-
"AI vs AI: Next Front in Phishing Wars"Business Email Compromise (BEC), which surpassed ransomware last year as the leading financially motivated attack vector organizations face, will likely become more difficult to catch. Abnormal Security's latest investigations suggest that attackers are…
-
"Keeping Hackers Off the Electrical Grid"Attacks on grid substations increased by 70 percent in 2022 alone. Therefore, engineers at the Department of Energy's (DOE) Oak Ridge National Laboratory (ORNL) expect new attack vectors and are taking measures against hackers using them. According to…
-
"Standardized Information Sharing Framework 'Essential' for Improving Cyber Security"How private sector organizations share threat intelligence data with the broader industry has been called for development by security experts. It is believed that improved cross-organizational collaboration would increase cyber resilience in the face of…
-
"Harvard Pilgrim Data Breach Affected Millions, Yet Insurer Struggled to Contact Many Potential Victims For Months"A ransomware attack and subsequent data breach at Harvard Pilgrim Health Care in April affected over 2.5 million members, but the system outage caused by the ransomware attack has prevented the insurer from directly informing many of the potential…
-
"Enphase Ignores CISA Request to Fix Remotely Exploitable Flaws"The US Cybersecurity and Infrastructure Security Agency (CISA) recently issued advisories detailing two unpatched vulnerabilities in Enphase products. Enpahse is an American energy technology company that sells solar micro-inverters, charging…