News
-
"Hacker Tries to Poison Water Supply of Florida Town"A threat actor remotely accessed the IT system of the water treatment facility of Oldsmar, Florida, and tried to poison the town’s water supply by raising the levels of sodium hydroxide, or lye, in the water supply. According to local authorities, the… -
"Microsoft to Alert Enterprise Security Teams When Nation-State Attackers Target Their Employees"Microsoft will be introducing a new security alert that will notify enterprise security teams when an employee is being targeted by suspected nation-state attackers this month. The Microsoft Threat Intelligence Center follows these threats, builds…
-
"Personal Data, Fodder for Cyberwarfare? New Models for Stepping up Cybersecurity"Regner Sabillon, a doctoral student at the Open University of Catalonia (UOC), has published a book titled "Cyber Security Auditing, Assurance, and Awareness Through CSAM and CATRAM," which has been praised by the US website BookAuthority as the best new…
-
"Hacking Group Also Used an IE Zero-Day Against Security Researchers"Last month, Google's Threat Analysis Group revealed an ongoing campaign, targeting security researchers. It was revealed that the North Korean state-sponsored hacking group known as the Lazarus Group is behind the campaign. According to Google, the…
-
"Three Ways MITRE ATT&CK Can Improve Your Organizational Security"Ganesh Pai, the CEO of the security analytics company Uptycs, has outlined the different ways in which MITRE ATT&CK can help organizations improve their security. MITRE ATT&CK is an objective, third-party standard that security leaders and…
-
"With One Update, This Malicious Android App Hijacked Millions of Devices"Researchers at Malwarebytes have discovered that a popular barcode scanner app on Google Play was transformed into malware by adversaries. Lavabird Ltd.'s Barcode Scanner was an Android app available on Google's official app repository for years.…
-
"Machine Learning Algorithm May Be the Key to Timely, Inexpensive Cyber-Defense"Zero-day attacks on vulnerable computer networks and cyber-infrastructure can significantly overwhelm traditional defenses, leading to billions of dollars in damage and weeks of manual work to recover systems after they have been infiltrated. A team of…
-
"Web Application Attacks Grow Reliant on Automated Tools"A new report released by Barracuda Networks researchers shares findings from two months of attack data analysis. The findings reveal that cybercriminals have grown more reliant on the use of automated tools to perform their attacks. According to the…
-
"Plex Media Servers Are Being Abused For DDoS Attacks"Researchers at security firm Netscout have found that DDoS-for-hire services have found a way to abuse Plex Media servers to bounce junk traffic and amplify distributed denial of service (DDoS) attacks. The security researchers scanned the internet…
-
"Spotify Suffers Second Credential-Stuffing Cyberattack in 3 Months"Spotify is being affected by another credential-stuffing cyberattack, just three months after the last one. A researcher named Bob Diachenko on Thursday uncovered a malicious #Spotify logger database, with 100K+ account details (leaked elsewhere…
-
"A Coordinated Takedown Targets 'OGUser' Account Thieves"Instagram, TikTok, and Twitter have taken action against the hacker community called OGUsers, in which members buy and sell stolen social media accounts. Hackers affiliated with OGUsers were allegedly behind the attack faced by Twitter last year that…
-
"Agent Tesla Trojan Can Evade Endpoint Protection, Sophos Reports"Sophos researchers have reported the continued refinement of the Trojan called Agent Tesla. New evidence suggests that Agent Tesla is now capable of disabling endpoint protection. Agent Tesla emerged in 2014, spreading through spam emails with…