News
-
"HR Topics Used the Most as Attack Method in Phishing Attacks"According to findings from KnowBe4's research, Human Resources (HR)-related topics are the most commonly used by hackers to facilitate phishing attacks. The strategy is not new, but it consistently results in successful attacks.
-
"NSA Shares Recommendations to Advance Device Security Within a Zero Trust Framework"The National Security Agency (NSA) has published a Cybersecurity Information Sheet (CSI) to help federal agencies, partners, and organizations assess devices within their systems and respond more effectively to threats.
-
"Sophisticated MATA Framework Strikes Eastern European Oil and Gas Companies"As part of a cyber espionage operation between August 2022 and May 2023, an updated version of a sophisticated backdoor framework called MATA was used in attacks against more than a dozen Eastern European oil and gas sector and defense industry compani
-
"Google Ads for KeePass, Notepad++ Lead To Malware"According to Jérôme Segura, Director of Threat Intelligence at Malwarebytes, people who have used Google to search for and download the KeePass password manager and the Notepad++ text editor may have been infected with malware.
-
"Google Play Protect Gets Real-Time Code Scanning"Google recently announced improved protections against malware for all Android devices with Google Play Services in the form of real-time scanning at code level in Google Play Protect.
-
"Ragnar Locker Ransomware's Dark Web Extortion Sites Seized by Police"The Ragnar Locker ransomware operation's Tor negotiation and data leak websites have been seized as part of an international law enforcement operation.
-
"North Korean Hackers Exploiting Recent TeamCity Vulnerability"According to Microsoft, multiple North Korean threat actors have been observed exploiting a recent vulnerability in JetBrains’ TeamCity continuous integration and continuous deployment (CI/CD) server.
-
"AI Chatbots Can Infer an Alarming Amount of Info About You From Your Responses"New research reveals that Artificial Intelligence (AI)-driven chatbots such as ChatGPT can infer a great deal of sensitive information about the people they are chatting with.
-
"Lazarus Group Targeting Defense Experts with Fake Interviews via Trojanized VNC Apps"The North Korea-leaked Lazarus Group, also known as Hidden Cobra or TEMP.Hermit, has been observed using trojanized Virtual Network Computing (VNC) apps as lures to target the defense industry and nuclear engineers in the ongoing Operation Dream Job ca
-
"NSA: How to Protect Against Evolving Phishing Attacks"The National Security Agency (NSA) and its US partners have published a new report describing phishing attack techniques and the defenses that organizations can implement to combat them.
-
"A Flaw in Synology DiskStation Manager Allows Admin Account Takeover"A Synology DiskStation Manager (DSM) vulnerability could be exploited to decipher an administrator's password. Claroty's Team82 researchers discovered the vulnerability, tracked as CVE-2023-2729, with a CVSS score of 5.9.
-
"Hacker Leaks Millions of New 23andMe Genetic Data Profiles"A hacker has leaked an additional 4.1 million stolen 23andMe genetic data profiles for people in Great Britain and Germany on a hacking forum.