News
-
"Web-Based PLC Malware: A New Potential Threat to Critical Infrastructure"Researchers from Georgia Tech's College of Engineering developed web-based Programmable Logic Controller (PLC) malware capable of targeting most PLCs from major manufacturers.
-
"Snake, a New Info Stealer Spreads Through Facebook Messages"According to Cybereason researchers, threat actors are using Facebook messages to spread malware called "Snake," which is a Python-based information stealer.
-
"Fidelity Investments Notifying 28,000 People of Data Breach"Fidelity Investments Life Insurance Company recently started informing roughly 28,000 individuals that their personal information was compromised in a data breach at third-party services provider Infosys McCamish System (IMS).
-
"FBI: US Lost Record $12.5 Billion to Online Crime in 2023"The Federal Bureau of Investigation's (FBI) Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, revealing a 22 percent increase in reported losses compared to 2022, totaling a record $12.5 billion.
-
"ChatGPT Credentials Snagged by Infostealers on 225K Infected Devices"In 2023, at least 225,000 sets of OpenAI credentials were listed for sale on the dark web, potentially enabling access to sensitive data sent to ChatGPT.
-
"NSA Releases Maturity Guidance for the Zero Trust Network and Environment Pillar"The National Security Agency (NSA) has released a Cybersecurity Information Sheet (CSI) on how to limit adversarial lateral movement within an organization's network aimed at gaining access to sensitive data and critical systems.
-
"CISA Announces New Efforts to Help Secure Open Source Ecosystem"The US Cybersecurity and Infrastructure Security Agency (CISA) has announced several initial key actions that it will take in collaboration with the open source community to help secure the open source ecosystem.
-
"Cisco Patches High-Severity Vulnerabilities in VPN Product"Cisco recently announced patches for two high-severity vulnerabilities in Secure Client, the enterprise VPN application that also incorporates security and monitoring capabilities.
-
"Nigerian BEC Scammer Pleads Guilty in US Court"A Nigerian national has recently pleaded guilty in a US court to his role in a business email compromise (BEC) fraud scheme that caused roughly $200,000 in losses.
-
"Duvel Says it Has More Than Enough Beer After Ransomware Attack"Late last night, Duvel Moortgat Brewery was hit by a ransomware attack, halting beer production in the company's bottling facilities. Duvel is a Belgian beer brand best known for its strong and fruity golden pale ale bearing the same name.
-
"Skype, Google Meet, and Zoom Used in New Trojan Scam Campaign"According to security researchers at Zscaler, a threat actor has been distributing remote access Trojans (RATs) on Android and Windows operating systems using online meeting lures.
-
"Android’s March 2024 Update Patches Critical Vulnerabilities"Android recently announced security updates that resolve 38 vulnerabilities, including two critical severity issues in the System component.