News
  • "Clop Drives Record Ransomware Activity in June"

    According to researchers at NCC Group, ransomware attacks in June soared 221% year-on-year to hit a record 434 for the month.  The researchers claimed that the figures were driven by Clop’s targeting of global organizations via the MOVEit flaw, “…

  • "Take the First Steps Towards Better Cybersecurity With these Four Goals"

    President Biden's National Security Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems required the Cybersecurity and Infrastructure Security Agency (CISA) to develop a set of voluntary Cross-Sector Cybersecurity…

  • "HHS, FTC Warn Hospitals and Telehealth Providers About Third-Party Tracking Tech"

    The US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) and the Federal Trade Commission (FTC) sent a letter to 130 hospitals and telehealth providers highlighting the security and privacy risks posed by third-party tracking…

  • "Rite Aid Announces Data Breach That May Have Compromised Customers' Personal Information"

    Rite Aid recently announced that a data breach may have compromised customers' personal information.  The drug store chain said an "unknown party" had accessed names, birth dates, addresses, and prescription information.  The company noted that…

  • "Rutgers Among Universities Impacted by MOVEit Hack That Exposed Data"

    Rutgers recently announced that it was among numerous universities across the nation that may have exposed the personal information of students and employees through vendors that use a particular file transfer software that was hacked by a Russian…

  • "Sophisticated BundleBot Malware Disguised as Google AI Chatbot and Utilities"

    Using .NET single-file deployment techniques, a new malware strain called BundleBot operates under the radar, allowing threat actors to steal sensitive data from compromised hosts. Researchers at Check Point noted that BundleBot exploits the dotnet…

  • "GitHub Warns of Lazarus Hackers Targeting Devs With Malicious Projects"

    According to GitHub, a social engineering campaign is attempting to infect the devices of developers in the blockchain, cryptocurrency, online gambling, and cybersecurity industries with malware. The campaign has been attributed to the North Korean state…

  • "CyLab Presents at White House's Launch of New IoT Cybersecurity Labeling System"

    Carnegie Mellon University's (CMU) CyLab Security and Privacy Institute recently met with government officials and technology industry leaders as the White House launched its new Internet of Things (IoT) cybersecurity label. CMU was represented at the…

  • "Life Sciences Leaders Act to Counter Insider-Driven Data Loss"

    According to Code42, life sciences companies, such as medical device manufacturers, biotechnology companies, and pharmaceutical companies, are experiencing increased insider-caused data loss. With this expanding threat, life sciences leaders increasingly…

  • "Mallox Ransomware Group Activity Shifts Into High Gear"

    A ransomware actor that infiltrates target networks via vulnerable SQL servers has become highly active. Mallox, also known as TargetCompany, Fargo, and Tohnichi, emerged in June 2021 and claims to have infected hundreds of organizations since then.…

  • "Firmware Vulnerabilities in Millions of Computers Could Give Hackers Superuser Status"

    Two years ago, ransomware criminals breached the hardware manufacturer Gigabyte and released over 112 GB of data, including information from Intel and AMD, two of its most important supply chain partners. Researchers now warn that the leaked information…

  • "Satellites Are Rife With Basic Security Flaws"

    A new study by a group of German academics reveals some of the security vulnerabilities of satellites currently circling the Earth. Researchers from Ruhr University Bochum and the Cispa Helmholtz Center for Information Security examined the software used…