News
-
"Freecycle Breach May Have Hit Millions of Users"A non-profit organization used by millions on both sides of the Atlantic to recycle their possessions has admitted to suffering a data breach last month. The US-based Freecycle Network, which is also registered as a charity in the UK, claimed in an…
-
"Hacker Gains Admin Control of Sourcegraph and Gives Free Access to the Masses"An unidentified hacker gained administrative control of Sourcegraph, an Artificial Intelligence (AI)-powered service used by developers at Uber, Reddit, Dropbox, and other companies. Through this control, the hacker provided free access to resources…
-
"More Okta Customers Trapped in Scattered Spider's Web"Customers of Okta, one of the leading providers of authentication services and Identity and Access Management (IAM) systems, report social engineering attacks targeting their Information Technology (IT) service desks to compromise administrator-level…
-
"CDM Policies Provide a Vital Shield Against Climate-Driven Cyberattacks, Experts Say"According to cybersecurity experts, critical infrastructure operators can use traditional but increasingly innovative security practices to prevent emerging threats related to extreme heat waves, massive storms, and other weather events exacerbated by…
-
"Ransomware Attackers Are Targeting Exposed Microsoft SQL Databases, Report Says"Researchers at Securonix found ransomware campaigns using Internet-exposed Microsoft SQL (MSSQL) databases as a launching point for attacks against victim systems. Oleg Kolesnikov, vice president of threat research at Securonix, says the typical attack…
-
"Telegram's Popularity Continues to Soar as Catalog of Available Cyber Crime Services Matures"The Telegram messaging application has become cybercriminals' go-to assistant for various cyberattacks, as it provides services similar to those found on the dark web via a more accessible platform. Phishing and other cyberattack services are often…
-
Pub Crawl #77Pub Crawl summarizes, by hard problems, sets of publications that have been peer reviewed and presented at SoS conferences or referenced in current work. The topics are chosen for their usefulness for current researchers.
-
"Researchers Released a Free Decryptor for the Key Group Ransomware"The threat intelligence company EclecticIQ has released a free decryption tool for the Key Group ransomware that enables victims to recover their data without paying the demanded ransom. Since at least January 2023, the Key Group ransomware gang has been…
-
"A Brief History of ICS-Tailored Attacks"According to Oleg Brodt, Chief Innovation Officer for Cyber at Ben-Gurion University of the Negev, Industrial Control System (ICS)-specific malware is relatively difficult to develop for malware authors. It takes more effort to attack ICS. ICS facilities…
-
"North Korean Hackers Behind Malicious VMConnect PyPI Campaign"North Korean state-sponsored hackers are responsible for the VMConnect campaign, which uploaded malicious packages to the Python Package Index (PyPI) repository. One of the packages mimicked the VMware vSphere connector module vConnector. The packages…
-
"New SuperBear Trojan Emerges in Targeted Phishing Attack on South Korean Activists"SuperBear, a novel Remote Access Trojan (RAT), was discovered due to a new phishing attack targeting civil society groups in South Korea. According to Interlabs, the attack targeted an unnamed activist who was contacted in late August 2023 and received a…
-
"Cybercriminals Use Research Contests to Create New Attack Methods"According to Sophos, adversary-sponsored research contests on cybercriminal forums focus on novel attack and evasion techniques. The contests mirror legitimate security conference 'Call For Papers' and provide winners with monetary rewards, peer…