News
-
"Researchers Find Zero-Victim Method to Block Scammers' Websites"Researchers at Palo Alto Networks' Unit 42 developed a Machine Learning (ML) model that feeds on "crumbs of information" left by malicious actors and detects tens of thousands of malicious domains each week before they are used for illegal activities. -
"Novel SMTP Smuggling Technique Slips Past DMARC, Email Protections"A novel way to exploit a decades-old protocol that has been used to send emails allows attackers to bypass Domain-based Message Authentication, Reporting, and Conformance (DMARC) and other email security mechanisms, putting organizations and individual
-
"Enabling Threat-Informed Cybersecurity: Evolving CISA's Approach to Cyber Threat Information Sharing"The US Cybersecurity and Infrastructure Security Agency (CISA) will launch a strategic effort to modernize its approach to enterprise cyber threat information-sharing in 2024.
-
"CISA Urges Manufacturers Eliminate Default Passwords to Thwart Cyber Threats"The US Cybersecurity and Infrastructure Security Agency (CISA) urges manufacturers to eliminate default passwords on Internet-connected systems, citing serious risks that malicious actors could exploit to gain initial access to and move laterally
-
"Mortgage Giant Mr. Cooper Data Breach Affects 14.7 Million People"Mr. Cooper is sending data breach notifications warning that a recent cyberattack has exposed the data of 14.7 million customers who have, or previously had, mortgages with the company. Mr.
-
"Air France-KLM Data Leak Left Customer Information Vulnerable to Scrapers"According to the Dutch public news organization NOS, together with security researcher Benjamin Broersma, some of the private data belonging to KLM and Air France passengers was easy to obtain.
-
"InfectedSlurs Botnet Targets QNAP VioStor NVR Vulnerability"InfectedSlurs, a Mirai-based botnet, was discovered targeting QNAP VioStor Network Video Recorder (NVR) devices.
-
"VF Corp Disrupted by Cyberattack, Online Operations Impacted"VF Corporation, a company that owns and operates some of the biggest apparel and footwear brands, has recently been hit by a ransomware attack that included the theft of sensitive corporate and personal data.
-
"Rhadamanthys Stealer Malware Evolves With More Powerful Features"According to researchers at Check Point, the Rhadamanthys malware's developers recently released two major versions with multiple improvements, including new stealing capabilities and enhanced evasion.
-
"New QakBot Phishing Campaign Appears, Months After FBI Takedown"A new QakBot phishing campaign has emerged months after the takedown of the QakBot botnet in the international law enforcement operation dubbed "Operation Duck Hunt." QakBot, also known as QBot, QuackBot, and Pinkslipbot, was one of the most widely use
-
"MongoDB Corporate Systems Breached, Customer Data Exposed"MongoDB, the database management company, has been breached, with attackers gaining access to some of its corporate systems as well as customer data and metadata.
-
"NIST Issues Guidance on a Mathematical Approach to Data Privacy"The National Institute of Standards and Technology (NIST) recently released new draft guidance to clarify how organizations can use differential privacy as part of their security infrastructure.