News
-
"Scientists Put Forth a Smarter Way to Protect a Smarter Grid"A team of experts at the US Department of Energy's (DOE) Pacific Northwest National Laboratory (PNNL) presented a new approach to protecting the electric grid against cyberattacks.
-
"Flaws in Public Records Management Tool Could Let Hackers Nab Sensitive Data Linked to Requests"According to Jason Parker, an independent cybersecurity researcher, a popular tool used by many state and local governments to manage public records requests had flaws that could have enabled hackers to download unsecured files associated with records
-
"Research Exposes Security, Privacy and Safety Issues in Female Technology Apps Used to Track Fertility, Menopause and Monthly Cycle"A team of researchers identified significant security, privacy, and safety issues with FemTech, which is a collection of digital technologies focusing on women's health and well-being. Such technologies include apps, wearable devices, and software.
-
"Hacked WordPress Sites Abusing Visitors' Browsers for Distributed Brute-Force Attacks"Threat actors are using malicious JavaScript injections to launch brute-force attacks on WordPress sites.
-
"Linux Variants of Bifrost Trojan Evade Detection via Typosquatting"A 20-year-old Remote Access Trojan (RAT) has reemerged with new variants targeting Linux and impersonating a trusted hosted domain.
-
"Web-Based PLC Malware: A New Potential Threat to Critical Infrastructure"Researchers from Georgia Tech's College of Engineering developed web-based Programmable Logic Controller (PLC) malware capable of targeting most PLCs from major manufacturers.
-
"Snake, a New Info Stealer Spreads Through Facebook Messages"According to Cybereason researchers, threat actors are using Facebook messages to spread malware called "Snake," which is a Python-based information stealer.
-
"Fidelity Investments Notifying 28,000 People of Data Breach"Fidelity Investments Life Insurance Company recently started informing roughly 28,000 individuals that their personal information was compromised in a data breach at third-party services provider Infosys McCamish System (IMS).
-
"FBI: US Lost Record $12.5 Billion to Online Crime in 2023"The Federal Bureau of Investigation's (FBI) Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, revealing a 22 percent increase in reported losses compared to 2022, totaling a record $12.5 billion.
-
"ChatGPT Credentials Snagged by Infostealers on 225K Infected Devices"In 2023, at least 225,000 sets of OpenAI credentials were listed for sale on the dark web, potentially enabling access to sensitive data sent to ChatGPT.
-
"NSA Releases Maturity Guidance for the Zero Trust Network and Environment Pillar"The National Security Agency (NSA) has released a Cybersecurity Information Sheet (CSI) on how to limit adversarial lateral movement within an organization's network aimed at gaining access to sensitive data and critical systems.
-
"CISA Announces New Efforts to Help Secure Open Source Ecosystem"The US Cybersecurity and Infrastructure Security Agency (CISA) has announced several initial key actions that it will take in collaboration with the open source community to help secure the open source ecosystem.