News
-
"Ransomware Hits Critical Infrastructure Hard, Costs Adding Up"Claroty surveyed 1,100 cybersecurity professionals responsible for securing Cyber-Physical Systems (CPS), including Operational Technology (OT), Internet of Things (IoT), Building Management Systems (BMS), and more. -
"DPRK's APT37 Targets Cambodia With Khmer, 'VeilShell' Backdoor"The North Korean state-sponsored threat actor known as "APT37" is spreading a new backdoor named "VeilShell." Most North Korean Advanced Persistent Threats (APTs) target South Korean or Japanese organizations, but APT37's latest campaign appears to tar -
"Cybercriminals Capitalize on Poorly Configured Cloud Environments"Researchers at Elastic found that off-the-shelf offensive security tools and poorly configured cloud environments expand the attack surface. -
"NJIT PhD Researcher Develops Secure Code Generation System, Achieves Early Conference Acceptance"Security vulnerabilities are a major issue in Artificial Intelligence (AI)-powered code generation. Therefore, Khiem Ton, a Ph.D. -
"Cloudflare Blocks Largest Recorded DDoS Attack Peaking at 3.8Tbps"In a Distributed Denial-of-Service (DDoS) campaign aimed at financial services, Internet, and telecommunications companies, volumetric attacks peaked at 3.8 terabits per second (Tbps), the largest publicly recorded. -
"NSA joins Australian Signals Directorate and Others in Promoting Six Principles of Operational Technology (OT) Cybersecurity"The National Security Agency (NSA), together with the Australian Signals Directorate's Australian Cyber Security Centre (ASD ACSC) and others, released a new Cybersecurity Information Sheet (CSI) titled "Principles of Operational Technology Cyber -
"Fake Browser Updates Spread Updated WarmCookie Malware"The new "FakeUpdate" campaign targeting users in France involves compromised websites that display fake browser and app updates, which deliver a new version of the WarmCookie backdoor. -
"Sellafield Fined for Cybersecurity Failures at Nuclear Site"Sellafield Ltd was recently fined $437,440 for cybersecurity failings running the Sellafield nuclear facility in Cumbria, North-West England. The fine was issued by Westminster Magistrates Court. -
"New MedusaLocker Ransomware Variant Deployed by Threat Actor"According to security researchers at Cisco Talos, a financially-motivated threat actor has been observed targeting organizations globally with a MedusaLocker ransomware variant. -
"LockBit Ransomware and Evil Corp Members Arrested and Sanctioned in Joint Global Effort"New international law enforcement actions have resulted in four arrests and the takedown of nine servers linked to the "LockBit" ransomware operation. -
"Private US Companies Targeted by Stonefly APT"Symantec threat analysts warns that the North Korean Advanced Persistent Threat (APT) group "Stonefly," also known as "APT45," continues to target US companies despite an indictment. -
"Linux Malware '"Perfctl'" Behind Years-Long Cryptomining Campaign"For at least three years, the Linux malware named "perfctl" has targeted Linux servers and workstations, evading detection with rootkits.