News
-
"Ongoing 'Roaming Mantis' Smishing Campaign Hits Over 70,000 Users in France"Security researchers at Sekoia warn that a Chinese threat actor group named Roaming Mantis has been targeting Android users in France with the MoqHao malware in a new smishing campaign. The researchers stated that the campaign uses phishing SMS messages… -
"Russian Hacking Unit Cozy Bear Adds Google Drive to Its Arsenal, Researchers Say"Security researchers at Palo Alto Networks’ Unit 42 threat intelligence team found that the state-backed Russian hacking team behind some of the biggest digital intrusions in recent years has been using both Google Drive and Dropbox to deliver malware…
-
"Removing the Blind Spots That Allow Lateral Movement"Almost every lateral movement action relies on compromised credentials. According to Expert Insights, credential compromise was responsible for more than 60 percent of all cyberattacks in 2021. Threat actors can obtain credentials from the machines they…
-
"CISA Set to Open London Office"The US Cybersecurity and Infrastructure Security Agency (CISA) has recently announced plans to open its first Attaché Office in London later this month. CISA noted that the office would help improve collaboration between itself, UK government…
-
"Health Sector Suffered 337 Healthcare Data Breaches in First Half of Year"In the first half of 2022, trends in healthcare data breaches showed some minor changes, according to Fortified Health Security's mid-year report on the state of healthcare cybersecurity. The Health and Human Services (HHS) Office for Civil Rights data…
-
"Quantum Ransomware Attack on Finance Company Impacts 657 Healthcare Organizations and Millions of Patients"Professional Finance Company Inc. (PFC) disclosed that it was the victim of a ransomware attack in February, which impacted more than 600 healthcare organizations. PFC did not disclose the attackers, but cybersecurity researchers suspect the Quantum…
-
"New CloudMensis Malware Backdoors Macs to Steal Victims' Data"In a highly targeted series of attacks, unknown threat actors are using previously undetected malware to backdoor macOS devices and exfiltrate information. ESET researchers discovered the new malware in April 2022 and named it CloudMensis as it uses…
-
"User Experience Plays a Critical Role in Cybersecurity"Attackers shifted to endpoints when network security was tightened, and systems were secured by technology teams. Now that they are more secure, hackers are focusing on the next security chain's weak link, which is people. According to Stanford…
-
"NSA Publishes Guidance on Characterizing Threats, Risks to DoD Microelectronics"The National Security Agency's (NSA) Joint Federation Assurance Center (JFAC) Hardware Assurance Lab published a report titled "DoD Microelectronics: Levels of Assurance Definitions and Applications" to characterize the threats and risks faced by Custom…
-
"TikTok Engaging in Excessive Data Collection"Security researchers at Internet 2.0 discovered that TikTok has been engaging in excessive data collection and connecting to mainland China-based infrastructure. The researchers analyzed the source code of TikTok mobile applications Android 25.1.3…
-
"Hackers Distributing Password Cracking Tool for PLCs and HMIs to Target Industrial Systems"A new campaign leveraging password cracking software to seize control of Programmable Logic Controllers (PLCs) and co-opt the machines to a botnet is targeting industrial engineers and operators. According to Dragos security researcher Sam Hanson, the…
-
"Fingerprint Sensors and Crypto Wallets: Security Vulnerabilities Revealed"A team of security researchers from Paluno, the Ruhr Institute for Software Technology at the University of Duisburg-Essen (UDE), has developed a new technique that allows fuzz testing of protected memory areas in modern processors for the first time.…