News
-
"New Proposal Aims to Boost IoT Security With a Sticker"The Federal Communications Commission (FCC) has proposed a cybersecurity labeling program to protect smart device users. The new initiative encompasses Internet of Things (IoT) devices such as Wi-Fi routers, digital personal assistants, home security…
-
"German Spy Chief Warns of Cyberattacks Targeting Liquefied Natural Gas Terminals"Bruno Kahl, the head of Germany's foreign intelligence service, warned that state-sponsored hackers could target the country's Liquefied Natural Gas (LNG) terminals. Due to the Russian invasion of Ukraine in 2022, estimated to have reduced Germany's GDP…
-
"Clop Gang Stolen Data From Major North Carolina Hospitals"The Microsoft-owned healthcare technology company Nuance has disclosed that the Clop extortion gang stole personal data on major North Carolina hospitals as part of the Progress MOVEit Transfer campaign. Companies use MOVEit Transfer to securely transmit…
-
"California Settles With Google Over Location Privacy Practices for $93 Million"Google recently agreed to a $93 million settlement with the state of California over its location-privacy practices. The settlement follows a $391.5 million settlement with 40 states, reached in November 2022, to resolve an investigation into how…
-
"Canadian Government Targeted With DDoS Attacks by Pro-Russia Group"The pro-Russian cybercrime group named NoName057(16) has recently been observed launching distributed denial-of-service (DDoS) attacks against Canadian organizations. Since March 2022, the threat actor, also known as NoName05716, 05716nnm, or…
-
"Modeling Social Media Behaviors to Combat Misinformation"Social media manipulation is used to spread false narratives, influence democratic processes, and more. However, not everyone with whom you disagree on social media is a bot. Misinformation strategies have continued to evolve. Their detection has been a…
-
"New AMBERSQUID Cryptojacking Operation Targets Uncommon AWS Services"A novel cloud-native cryptojacking operation has targeted Amazon Web Services (AWS) offerings such as AWS Amplify, AWS Fargate, and Amazon SageMaker to mine cryptocurrency. Sysdig has given the malicious cyber activity the codename AMBERSQUID. The…
-
"Microsoft Flushes Out 'Ncurses' Gremlins"The "ncurses" programming library contains multiple memory corruption vulnerabilities that allow attackers to target applications running in macOS, Linux, and FreeBSD. Microsoft researchers discovered the vulnerabilities in the library that provides…
-
"Pirated Software Likely Cause of Airbus Breach"According to security researchers at Hudson Rock, a major data breach at Airbus revealed earlier this week stemmed from a RedLine info-stealer likely hidden in a pirated copy of Microsoft software. The European aerospace giant said it has launched…
-
"BlackCat Ransomware Hits Azure Storage With Sphynx Encryptor"The BlackCat (ALPHV) ransomware group encrypts Azure cloud storage using stolen Microsoft accounts and the recently discovered Sphynx encryptor. Sophos X-Ops incident responders found that the attackers used a new Sphynx variant with added support for…
-
"Kubernetes Vulnerability Allows RCE on Windows Endpoints"Three high-severity Kubernetes vulnerabilities, tracked as CVE-2023-3676, CVE-2023-3893, and CVE-2023-3955, could enable attackers to remotely execute code and take control of all Windows nodes in the Kubernetes cluster. The three flaws impact all…
-
"TikTok Fined $368m For Child Data Privacy Offenses"TikTok has recently been fined hundreds of millions of dollars after Ireland’s data protection regulator found it infringed the GDPR with regards to its processing of child users’ information. The Data Protection Commission (DPC) conducted a…