News
  • "Ransomware Attack Played Major Role in Shutdown of Illinois Hospital"

    St. Margaret’s Health is shutting down hospitals and other facilities in Peru and Spring Valley, Illinois, and says a 2021 ransomware attack is partly to blame.  The cyberattack occurred in late February 2021 and forced the shutdown of the Spring…

  • "Historic Zacks Breach Impacts Nearly Nine Million"

    Security researchers have recently discovered a breach at Zacks Investment Research dating back to 2020, which appears to have impacted millions of customers.  So far, the stock research and analysis firm has made no public disclosure about the…

  • "RDP Honeypot Targeted 3.5 Million Times in Brute-Force Attacks"

    A study involving high-interaction honeypots with a Remote Desktop Protocol (RDP) connection accessible from the public web demonstrates that attackers are relentless and follow a daily schedule that closely resembles office hours. Researchers at…

  • "Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer"

    According to security researchers, an "easily exploitable" vulnerability in the Microsoft Visual Studio installer could be exploited by an attacker to impersonate a legitimate publisher and distribute malicious extensions. Dolev Taler, a researcher at…

  • "Incorporating Cloud Security Teams Into the SOC Enhances Operational Efficiencies"

    According to Trend Micro, security leaders recognize that the cloud and how cloud security teams operate today are becoming increasingly critical to business and Information Technology (IT) operations. Therefore, cloud security and the foundational…

  • "Researchers Report First Instance of Automated SaaS Ransomware Extortion"

    The 0mega ransomware group has effectively executed an extortion attack against the SharePoint Online environment of a company without using a compromised endpoint, as is typically the case with these types of attacks. Instead, the threat group appears…

  • "How Analytics Tools, Third-Party Tracking Tech Pose Threats to Patient Privacy"

    Transferring sensitive data to non-Health Insurance Portability and Accountability Act (HIPAA)-covered entities may result in compliance complications, data breaches, lawsuits, and patient privacy risks. Third-party tracking tools promise functionality…

  • "Microsoft Warns of Multi-Stage AiITM Phishing and BEC Attacks"

    Microsoft discovered multi-stage adversary-in-the-middle (AiTM) phishing and Business Email Compromise (BEC) attacks targeting financial service organizations. In AiTM phishing, threat actors set a proxy server between a target user and the website the…

  • "Log4J Exploits May Rise Further as Microsoft Continues War on Phishing"

    Researchers expect a rise in Log4J exploits as cybercriminals continue to find new methods to circumvent the ongoing implementation of Microsoft's anti-phishing measures. Microsoft blocked the enablement of VBA macros in Office documents by default in…

  • "New Entrants to Ransomware Unleash Frankenstein Malware"

    Ransomware hackers are pushing the concept of code reuse to its limits. In their rush to make money, some new cybercriminals are turning to previous ransomware groups' discarded remnants, piecing together ransomware rather than developing their own…

  • "Nvidia's AI Software Tricked Into Leaking Data"

    According to researchers at the San Francisco-based company Robust Intelligence, a feature in Nvidia's Artificial Intelligence (AI) software can be manipulated to disregard safety restrictions and reveal private information. The "NeMo Framework"…

  • "Confidential Data Downloaded From UK Regulator Ofcom in Cyberattack"

    Ofcom, Britain's communications regulator, has disclosed that hackers exploiting a flaw in Progress Software's MOVEit Transfer file transfer app downloaded confidential information on companies it regulates. A spokesperson for Ofcom revealed that the…