News
-
"Vice Society Claims Ransomware Attack Against University of Duisburg-Essen"The threat actor Vice Society has recently claimed responsibility for the ransomware attack against the University of Duisburg-Essen (UDE) in November 2022 and has reportedly published some stolen data on the dark web. UDE announced over the…
-
"Ransomware Attack on Maritime Software Impacts 1,000 Ships"A ransomware attack on a major software provider for ships has impacted about 1,000 vessels. DNV, one of the world's largest maritime companies, was forced to take down the Information Technology (IT) servers connected to its ShipManager system due to…
-
"RIT and Alstom Signaling Collaborate to Advance Transportation Cybersecurity"Rochester Institute of Technology (RIT) and Alstom, a French mobility technology company, will collaborate to promote cybersecurity education, development, and research within the transportation industry. Through this new partnership, Alstom will deliver…
-
"Researchers Warn Against Zoho ManageEngine Exploit Attacks"Horizon3.ai researchers are urging Zoho ManageEngine users to patch their software against a critical security vulnerability (tracked CVE-2022-47966) after designing and releasing a proof-of-concept (PoC) exploit code. The researchers said they…
-
"HR Platform's Data Leak Turns Into Privacy Nightmare for Employees"The Cybernews research team uncovered a publicly open database containing 260 GB of sensitive personal data belonging to myrocket[.]co on December 12, 2022. The Human Resources (HR) management platform provides end-to-end recruitment solutions and HR…
-
"InHand Industrial Router Vulnerabilities Expose Internal OT Networks to Attacks"According to the US Cybersecurity and Infrastructure Security Agency (CISA), a series of vulnerabilities affecting industrial routers made by InHand Networks could allow hackers to bypass security systems and gain access to internal operational…
-
"Third-Party Risk Contributes to Healthcare Data Breaches"The number of Americans impacted by health data breaches has surpassed the country's population of 331.9 million. According to federal statistics, this indicates that many individuals have been affected by more than one incident. In just the past three…
-
"Russia's Ukraine War Drives 62% Slump in Stolen Cards"Security researchers at Recorded Future stated that the Russian invasion of Ukraine in early 2022 appears to have led to a double-digit decrease in stolen payment card records published to the dark web. The researchers analyzed detailed threat…
-
"Sigstore Announces the First Stable Release of Code and Certificate Signing Tool for Python"The Sigstore community recently announced the first stable release of sigstore-python, enhancing software supply chain security and breaking ground for other client implementations of Sigstore currently in the earlier stages. Sigstore is an open-source…
-
"Fortinet Observed Three Rogue PyPI Packages Spreading the Wacatac Trojan"Researchers from FortiGuard Labs found three malicious PyPI packages named "colorslib," "httpslib," and "libhttps" uploaded to the PyPI repository by the same malicious actor, Lolip0p. The packages, which were found on January 10, 2023, are designed to…
-
"Free Decryptors Released for BianLian, MegaCortex Ransomware"Avast and Bitdefender have recently released decryptors to help victims of BianLian and MegaCortex ransomware recover their data for free. BianLian, written in Golang, emerged in August 2022 and has been used in targeted attacks against entertainment,…
-
"MSI Accidentally Breaks Secure Boot for Hundreds of Motherboards"According to a Polish security researcher named Dawid Potocki, more than 290 MSI motherboards are impacted by insecure default UEFI Secure Boot settings, which enable any operating system image to execute regardless of whether it has a valid or…