News
-
"Security Experts Develop Method of Generating 'Highly Evasive' Polymorphic Malware Using ChatGPT"Security researchers at CyberArk Labs have demonstrated the use of ChatGPT to develop polymorphic malware that can go undetected by most anti-malware products. It took the researchers weeks to produce a proof-of-concept (POC) for the highly evasive…
-
"Ransomware Attacks on America's Health Care Systems More Than Doubled From 2016 to 2021, Exposing the Personal Health Information of Millions"From 2016 to 2021, the annual number of ransomware attacks on healthcare provider organizations more than doubled, leaving the sensitive health information of around 42 million people exposed to threat actors. A new report from the University of…
-
"Credential Phishing Attack Uses Fake DHL Emails to Breach Microsoft 365"Armorblox researchers have detailed a new twist on a credential phishing attack that involves using a fake DHL shipment notification to compromise Microsoft 365 and Exchange Online Protection. The phishing campaign has targeted over 10,000 inboxes at a…
-
"Vice Society Claims Ransomware Attack Against University of Duisburg-Essen"The threat actor Vice Society has recently claimed responsibility for the ransomware attack against the University of Duisburg-Essen (UDE) in November 2022 and has reportedly published some stolen data on the dark web. UDE announced over the…
-
"Ransomware Attack on Maritime Software Impacts 1,000 Ships"A ransomware attack on a major software provider for ships has impacted about 1,000 vessels. DNV, one of the world's largest maritime companies, was forced to take down the Information Technology (IT) servers connected to its ShipManager system due to…
-
"RIT and Alstom Signaling Collaborate to Advance Transportation Cybersecurity"Rochester Institute of Technology (RIT) and Alstom, a French mobility technology company, will collaborate to promote cybersecurity education, development, and research within the transportation industry. Through this new partnership, Alstom will deliver…
-
"Researchers Warn Against Zoho ManageEngine Exploit Attacks"Horizon3.ai researchers are urging Zoho ManageEngine users to patch their software against a critical security vulnerability (tracked CVE-2022-47966) after designing and releasing a proof-of-concept (PoC) exploit code. The researchers said they…
-
"HR Platform's Data Leak Turns Into Privacy Nightmare for Employees"The Cybernews research team uncovered a publicly open database containing 260 GB of sensitive personal data belonging to myrocket[.]co on December 12, 2022. The Human Resources (HR) management platform provides end-to-end recruitment solutions and HR…
-
"InHand Industrial Router Vulnerabilities Expose Internal OT Networks to Attacks"According to the US Cybersecurity and Infrastructure Security Agency (CISA), a series of vulnerabilities affecting industrial routers made by InHand Networks could allow hackers to bypass security systems and gain access to internal operational…
-
"Third-Party Risk Contributes to Healthcare Data Breaches"The number of Americans impacted by health data breaches has surpassed the country's population of 331.9 million. According to federal statistics, this indicates that many individuals have been affected by more than one incident. In just the past three…
-
"Russia's Ukraine War Drives 62% Slump in Stolen Cards"Security researchers at Recorded Future stated that the Russian invasion of Ukraine in early 2022 appears to have led to a double-digit decrease in stolen payment card records published to the dark web. The researchers analyzed detailed threat…
-
"Sigstore Announces the First Stable Release of Code and Certificate Signing Tool for Python"The Sigstore community recently announced the first stable release of sigstore-python, enhancing software supply chain security and breaking ground for other client implementations of Sigstore currently in the earlier stages. Sigstore is an open-source…