"Cybersecurity Researchers Spotlight a New Ransomware Threat – Be Careful Where You Upload Files"

"Cybersecurity Researchers Spotlight a New Ransomware Threat – Be Careful Where You Upload Files"

A team of researchers from Florida International University's (FIU) Cyber-Physical Systems Security Lab, in collaboration with Google Senior Research Scientist Guliz Seray Tuncay, delved into how hackers can gain access to a user's computer files via the File System Access Application Programming Interface (API), which allows web applications in modern browsers to interact with users' local file systems. The threat affects Google Chrome and Microsoft Edge browsers, but not Apple Safari or Mozilla Firefox.

Submitted by Gregory Rigby on

"HelloKitty Ransomware Rebranded and Back in Business, Looking for Employees"

"HelloKitty Ransomware Rebranded and Back in Business, Looking for Employees"

As reported by security researcher "3xp0rt," a hacker claiming to be the creator of "HelloKitty" ransomware has rebranded the gang as "HelloGookie." HelloKitty is known for hacking the game company CD Project Red in 2021 and stealing the source code for Cyberpunk 2077, Witcher 3, and Gwent. The threat actor debuted with a massive data dump on a new dark web website. HelloGookie uploaded a 750GB archive with Witcher 3 builds and Cyberpunk 2077 source code. This article continues to discuss the rebranding of the HelloKitty ransomware. 

Submitted by Gregory Rigby on

IEEE Secure Development Conference (SecDev)

"SecDev​ ​is​ ​a​ ​venue​ ​for​ ​presenting​ ​ideas,​ ​research,​ ​and​ ​experience​ ​about​ ​how​ ​to​ ​develop​ ​secure systems. It focuses on theory,​ ​techniques,​ ​and​ ​tools​ ​to ​'build​ ​security​ ​in' to​ ​existing​ ​and​ ​new​ ​computing​ ​systems, and does not focus on simply discovering​ ​the​ ​absence​ ​of​ ​security.​

 

6th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)

"IEEE TPS-ISA is an international multidisciplinary forum for presentation of state-of-the art innovations, and discussion among academic, industrial researchers, and practitioners on issues related to trust, privacy and security in emerging smart and intelligent systems and applications."

11th International Conference on Internet of Things: Systems, Management and Security (IOTSMS 2024)

"The international conference on Internet of Things: Systems, Management, and Security (IoTSMS) aims at soliciting original ideas on the broad area of IoT, including challenges and opportunities, concepts and applications, and future trends. The IoTSMS aims to facilitate discussions among academics and IoT practitioners and make positive contributions to the field."

24th International Conference on Software Quality, Reliability and Security (QRS)

"This conference gives engineers and scientists from both industry and academia a platform to present their ongoing work, relate their research outcomes and experiences, and discuss the best and most efficient techniques for the development of reliable, secure, and trustworthy systems."

 

9th IEEE European Symposium on Security and Privacy

"Euro S&P has traditionally focused on technical aspects of computer security and privacy research. We consider the scope of the symposium to include economic, ethical, legal, and social aspects and interdependencies of computer security and privacy. We especially encourage submissions that address global aspects of computer security and privacy, including issues particular to parts of the world and communities that are often neglected."

 

"Why Banks Should be Taking Quantum Security Very Seriously"

"Why Banks Should be Taking Quantum Security Very Seriously"

According to Elshan Kashefi, UK's National Quantum Computing Centre Chief Scientist, banks should be concerned about quantum security. Kashefi warned of the immense threat quantum computers pose before they are even fully functional. Today, cybercriminals are stealing encrypted data in bulk to decrypt it with a quantum device in the future. These Harvest Now, Decrypt Later (HNDL) attacks put today's sensitive information at risk of theft. Due to their large and varied data, financial institutions are prime targets for these attacks.

Submitted by Gregory Rigby on

"Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries"

"Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries"

Over 1,000 "Godfather" mobile banking Trojan samples are circulating in dozens of countries, targeting hundreds of banking apps. Godfather, which can record screens and keystrokes, intercept Two-Factor Authentication (2FA) calls and texts, initiate bank transfers, and more, was discovered in 2022. It has become one of the most popular Malware-as-a-Service (MaaS) offerings in cybercrime. According to Zimperium's 2023 "Mobile Banking Heists Report," Godfather targeted 237 banking apps in 57 countries as of late 2023.

Submitted by Gregory Rigby on

"LA County Health Services: Patients' Data Exposed in Phishing Attack"

"LA County Health Services: Patients' Data Exposed in Phishing Attack"

​The Los Angeles County Department of Health Services recently disclosed a data breach after thousands of patients' personal and health information was exposed in a data breach resulting from a recent phishing attack impacting over two dozen employees. This integrated health system operates the public hospitals and clinics in L.A. County (the most populous county in the United States) and is the second largest public health care system in the country after NYC Health + Hospitals.

Submitted by Adam Ekwall on
Subscribe to