News
  • "Initial Access Broker Posts Targeting Banks Increase on Dark Web"
    According to research conducted by Searchlight Cyber, Initial Access Brokers (IABs) on the dark web are increasingly targeting the banking sector. In addition, the dark web intelligence company discovered evidence of insiders sharing information about…
  • "When Tech Vendors Make Key Logging Info Available for Free, Everyone Wins"
    Eric Goldstein, Executive Assistant Director for Cybersecurity at the Cybersecurity and Infrastructure Security Agency (CISA), emphasizes that access to key logging data is crucial for quickly mitigating cyber intrusions, such as the recently identified…
  • "Chrome 115 Patches 20 Vulnerabilities"
    Google recently announced the release of Chrome 115 to the stable channel, with patches for 20 vulnerabilities, including 11 reported by external researchers.  Google noted that four of the externally reported security defects are assessed with a "…
  • "FIA World Endurance Championship Driver Passports Leaked"
    The research team at Cybernews discovered that Le Mans Endurance Management, which operates the FIA World Endurance Championship (WEC) website, exposed data belonging to hundreds of drivers. The researchers discovered two misconfigured, publicly…
  • "US Gov Adds Surveillance Firms Cytrox and Intellexa to Entity List for Trafficking in Cyber Exploits"
    The US government has placed Cytrox and Intellexa on an economic blocklist for trafficking in cyber exploits. The US Department of Commerce's Bureau of Industry and Security (BIS) added the two surveillance technology vendors to the Entity List for…
  • "Estee Lauder Hit by Cyberattack Affecting Some Business Operations"
    Cosmetics maker Estee Lauder recently announced that a hacker had obtained some data from its systems, with the cyber incident causing, and expected to further cause, disruption to parts of the company’s business operations.  The company stated that…
  • "Chinese APT41 Hackers Target Mobile Devices with New WyrmSpy and DragonEgg Spyware"
    WyrmSpy and DragonEgg, two previously undocumented Android spyware strains, have been linked to APT41, a prolific nation-state actor with ties to China. According to Lookout, an established threat actor such as APT41, known for exploiting web-facing…
  • "Cybersecurity Firm Sophos Impersonated by New SophosEncrypt Ransomware"
    The cybersecurity vendor Sophos is being impersonated by a new Ransomware-as-a-Service (RaaS) called SophosEncrypt. MalwareHunterTeam recently discovered the ransomware that was initially believed to be part of a Sophos red team exercise. However, the…
  • "Cybersecurity Measures SMBs Should Implement"
    According to the 2023 Verizon Data Breach Investigations Report (DBIR), small and medium-sized businesses (SMBs) are targeted by cybercriminals as much as large companies. SMBs are often found to underestimate their appeal as potential targets since they…
  • "Hacker Infected & Foiled by Own Infostealer"
    The reputation of the malicious actor "La_Citrix" was based on gaining access to Citrix Remote Desktop Protocol (RDP) Virtual Private Network (VPN) servers and selling them to the highest bidder on Russian-language dark web forums. The threat actor was…
  • "Intern Develops Technology to Find EV Charging Vulnerabilities"
    Jake Guidry, an Idaho National Laboratory (INL) intern, has developed a cybersecurity research tool to improve the security of Electric Vehicle (EV) charging. The AcCCS tool provides access capabilities through the Combined Charging System (CCS)…
  • "DBST: A Lightweight Block Cipher Based on Dynamic S-Box"
    Block ciphers, a branch of cryptography, are important in information security as 5G technology advances. While encryption algorithms of the traditional Feistel structure have significant advantages regarding consistent encryption and decryption, they…