News
-
"8 Million People Hit by Data Breach at US Govt Contractor Maximus"U.S. government services contractor Maximus has recently disclosed a data breach warning that hackers stole the personal data of 8 to 11 million people during the recent MOVEit Transfer data-theft attacks. Maximus is a contractor that manages and… -
"Akira Ransomware Compromised at Least 63 Victims Since March, Report Says"According to researchers at the cybersecurity company Arctic Wolf, the recently discovered Akira ransomware actively targets small and medium-sized businesses (SMBs) worldwide, with the US and Canada as its primary targets. Since its discovery in March…
-
"'Call of Duty' Players Are Being Hit With Self-Spreading Malware"Hackers are targeting Call of Duty players with a massive malware push that can self-replicate and spread through the game's multiplayer lobbies. The malware infection appears to have been sufficient for Activision to take the game offline. Some members…
-
"CardioComm Takes Systems Offline Following Cyberattack"Canadian heart monitoring and medical electrocardiogram solutions provider CardioComm recently announced it has taken systems offline following a cyberattack. The company stated that the cyberattack impacted its production server environments and…
-
"Multiple Security Issues Identified in Peloton Fitness Equipment"Security researchers at Check Point have discovered that internet-connected Peloton fitness equipment is plagued with numerous security issues that could allow attackers to obtain device information or deploy malware. The researchers analyzed the…
-
"EPSS Vulnerability Scores Can Help Focus on Key Patches, Says Study"According to a study by Rezilion, the new Machine Learning (ML)-based Exploit Prediction Scoring System (EPSS) can help overcome the limitations of existing vulnerability tracking systems. Researchers at Rezilion say that the leading vulnerability…
-
"DepositFiles Exposed Config File, Jeopardizing User Security"DepositFiles is a service that claims to be the ideal location to store and share files. However, researchers discovered DepositFiles' publicly hosted environment configuration (config) file, a critical record of how to run software. The file exposed…
-
"NCSC Publishes New Guidance on Shadow IT"The UK’s leading cybersecurity agency NCSC has released new guidance for system owners and technical staff on managing shadow IT in their organization. Shadow IT refers to the devices and services employees use for work without the IT department…
-
"Infostealer Incidents More Than Doubled in Q1 2023"In the first quarter of 2023, the number of incidents involving infostealer malware more than doubled compared to last year, mainly targeting Windows, Linux, and macOS. According to a recent study by Uptycs, most of the perpetrators behind infostealer…
-
"Cybersecurity Performance Goals: Sector-Specific Goals"Now that the cross-sector Cybersecurity Performance Goals (CPGs) have been published, the US Cybersecurity and Infrastructure Security Agency (CISA) is collaborating with Sector Risk Management Agencies (SRMAs) to develop Sector-Specific Goals (SSGs) for…
-
"Supply Chain Attack Hits NHS Ambulance Trusts"A cyberattack on an NHS supplier has recently left two ambulance trusts serving millions of people without access to electronic patient records. Swedish healthcare IT firm Ortivus said in a statement that an attack on July 18 left affected UK…
-
"Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining"As part of a new campaign designed to deliver the Mirai botnet malware and cryptocurrency miners, misconfigured and inadequately secured Apache Tomcat servers are being targeted. Over 800 attacks were detected against Aqua's Tomcat server honeypots over…