News
-
"KIST Develops Key Technology for Quantum Cryptography Commercialization"Users generate public and private keys that guarantee security based on computational complexity in modern cryptosystems and use them to encrypt and decrypt data. However, modern public-key cryptosystems have recently faced potential security flaws… -
"Code Execution and Other Vulnerabilities Patched in Drupal"Drupal developers have released updates that patch several vulnerabilities in the open source content management system (CMS). One of the vulnerabilities patched has been rated “critical” and the other three “moderately critical.” Drupal uses the NIST…
-
"US Cyber Command Spots Another 20 Malware Strains Targeting Ukraine"US Cyber Command has revealed 20 new strains of malware being used against Ukrainian targets. The Pentagon's cyberspace wing made indicators of compromise (IOCs) associated with various malware strains discovered in Ukrainian networks by the country's…
-
"Mixed Messages as Neopets Scrambles to Respond to Mega Breach"Tens of millions of users of a popular virtual pet site may have had their data compromised in the first known US mega breach of 2022. Neopets is owned by US giant Viacom. Viacom stated that Neopets recently discovered that customer data may…
-
"PayPal Used to Send Malicious “Double Spear” Invoices"Security experts at Avanan warn users not to fall for a new threat campaign using PayPal to send out phishing invoices. PayPal domains are usually “allow-listed” by organizations’ email filters. So cybercriminals are registering accounts and…
-
"Game Publisher Bandai Namco Confirms a Suspected BlackCat Ransomware Attack"Bandai Namco, a popular game publisher, has admitted to a suspected ransomware attack that may have compromised customer data. The company's internal systems in Asia, excluding Japan, were breached, according to an official statement. Bandai Namco did…
-
"Hackers Breach Ukrainian Radio Network to Spread Fake News about Zelenskiy"The Ukrainian media outlet TAVR Media announced that it had been hacked to spread false information about President Zelenskiy's critical condition and intensive care placement. The network runs nine major radio stations in Ukraine, including Hit FM,…
-
"Visibility into Runtime Threats against Mobile Apps and APIs Still Lacking"A new Osterman Research report codifies businesses' increasing reliance on mobile apps, revealing the disparity between the strategic importance of apps and the level of focus and resources applied to protect organizational apps from runtime threats.…
-
"TSA Revises and Reissues Cybersecurity Requirements for Pipeline Owners and Operators"The Transportation Security Administration (TSA) has revised and reissued its Security Directive on oil and natural gas pipeline cybersecurity. This revised directive will continue the effort to strengthen the cybersecurity of the nation's critical…
-
"Google/Apple's Contact-Tracing Apps Susceptible to Digital Attacks"Scientists and health officials have relied on COVID-19 contact-tracing technologies to help manage the virus's spread. However, there is a major flaw in the framework used by many of these mobile apps that attackers could exploit to increase false…
-
"Scanning for Red-Team Tools Reveals Likely Campaign Tied to Medusalocker Ransomware"Censys has announced that it mapped several servers involved in the MedusaLocker criminal network as proxies or ransomware victims by scanning the Internet for common red-teaming tools. In late June, the company published a report on the prevalence of…
-
"Atlassian Patches Servlet Filter Vulnerabilities Impacting Multiple Products"Atlassian recently announced patches for two critical Servlet Filter vulnerabilities that impact multiple products across its portfolio. Servlet Filters are pieces of Java code designed to intercept and process HTTP requests sent between a client…