News
-
"Cybercriminals Register .AI Domains of Trusted Brands for Malicious Activity"According to CSC's 2023 Domain Security Report, nearly half of Forbes Global 2000 companies do not have control over their branded Artificial Intelligence (.AI) domain names, which third parties register. -
"Russia's Sandworm Hacking Unit Targets Ukrainian Telecom Providers"According to a recent report from Ukrainian cybersecurity authorities, the Russian state hacking group Sandworm has targeted at least 11 Ukrainian Internet and telecommunication providers since May.
-
"ServiceNow Leak: Thousands of Companies at Risk"According to cybersecurity expert Daniel Miessler, a potential data exposure issue within a built-in capability of the digital business platform ServiceNow has been identified, which could enable unauthenticated users to extract data from records.
-
"'EtherHiding' Blockchain Technique Hides Malicious Code in WordPress Sites"A threat actor has been using blockchain technology to hide malicious code in a campaign involving fake browser updates that distribute malware, including RedLine, Amadey, and Lumma.
-
"Cyberattacks on Healthcare Organizations Affect Patient Care"A Proofpoint and Ponemon Institute survey found that 66 percent of healthcare organizations affected by the most common types of cyberattacks reported disruptions to patient care.
-
"Phishing Attacks Hit Record High in Third Quarter, With Malware Not Far Behind"According to a new report from the threat detection and response company Vade Secure SASU, phishing and malware attacks increased significantly in the third quarter, to the point where the number of attacks is among the highest ever recorded for a quar
-
"Fake Browser Updates Used in Malware Distribution"Cybersecurity researchers at Proofpoint have identified a rising trend in threat activity that employs fake browser updates to disseminate malware.
-
"Thousands of Cisco IOS XE Devices Hacked in Widespread Attacks"Attackers have exploited a recently disclosed critical zero-day vulnerability to infect thousands of Cisco IOS XE devices with malicious implants.
-
"Experts Warn of Severe Flaws Affecting Milesight Routers and Titan SFTP Servers"Milesight's industrial cellular routers may have been actively exploited in real-world attacks, according to new research from VulnCheck.
-
"NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics"The National Security Agency (NSA) has recently published a repository of tools to help critical infrastructure entities hunt for malicious activity in ICS and other OT environments.
-
"NSA and Partners Issue Additional Guidance for Secure By Design Software"The Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), the FBI, and international partners have released a Cybersecurity Information Sheet (CSI) to provide guidance for technology manufacturers to ensure
-
"Microsoft Defender Thwarted Akira Ransomware Attack on an Industrial Engineering Firm"Microsoft announced that its Microsoft Defender for Endpoint solution helped thwart a large-scale hacking campaign conducted by Akira ransomware operators, which Microsoft tracks as Storm-1567.