News in the Security category

Five charged for cyber schemes to benefit North Korea's weapons program

The U.S. Justice Department charged five individuals today, a U.S. Citizen woman, a Ukrainian man, and three foreign nationals, for their involvement in cyber schemes that generated revenue for North Korea's nuclear weapons program.
- Sergiu Gatlan
- May 16, 2024
- 03:17 PM
- 0
Norway recommends replacing SSL VPN to prevent breaches

The Norwegian National Cyber Security Centre (NCSC) recommends replacing SSLVPN/WebVPN solutions with alternatives due to the repeated exploitation of related vulnerabilities in edge network devices to breach corporate networks.
- Bill Toulas
- May 16, 2024
- 03:07 PM
- 1
MediSecure e-script firm hit by ‘large-scale’ ransomware data breach

Electronic prescription provider MediSecure in Australia has shut down its website and phone lines following a ransomware attack believed to originate from a third-party vendor.
- Bill Toulas
- May 16, 2024
- 01:08 PM
- 1
Russian hackers use new Lunar malware to breach a European govt's agencies

Security researchers discovered two previously unseen backdoors dubbed LunarWeb and LunarMail that were used to compromise a European government's diplomatic institutions abroad.
- Bill Toulas
- May 16, 2024
- 11:57 AM
- 0
Sponsored Content
How to manage the security risks of generative AI tools

Growth in AI use is widespread, evolving, and showing no signs of slowing, and with it comes risks ranging from competitive and legal concerns to a slew of security implications. Here's how Nudge Security can help you discover and manage AI security risks.
- Sponsored by NudgeSecurity
- May 16, 2024
- 10:02 AM
- 1
Kimsuky hackers deploy new Linux backdoor in attacks on South Korea

The North Korean hacker group Kimsuki has been using a new Linux malware called Gomir that is a version of the GoBear backdoor delivered via trojanized software installers.
- Bill Toulas
- May 16, 2024
- 09:28 AM
- 0
Google fixes third actively exploited Chrome zero-day in a week

Google has released a new emergency Chrome security update to address the third zero-day vulnerability exploited in attacks within a week.
- Sergiu Gatlan
- May 15, 2024
- 06:36 PM
- 2
Android 15, Google Play Protect get new anti-malware and anti-fraud features

Today, Google announced new security features coming to Android 15 and Google Play Protect that will help block scams, fraud, and malware apps on users' devices.
- Lawrence Abrams
- May 15, 2024
- 03:53 PM
- 0
Nissan North America data breach impacts over 53,000 employees

Nissan North America (Nissan) suffered a data breach last year when a threat actor targeted the company's external VPN and shut down systems to receive a ransom.
- Bill Toulas
- May 15, 2024
- 03:32 PM
- 1
Brothers arrested for $25 million theft in Ethereum blockchain attack

The U.S. Department of Justice has indicted two former MIT students for allegedly manipulating the Ethereum blockchain and stealing $25 million worth of cryptocurrency within approximately 12 seconds in a "first-of-its-kind" scheme.
- Sergiu Gatlan
- May 15, 2024
- 02:36 PM
- 0
Apple blocked $7 billion in fraudulent App Store purchases in 4 years

Apple's antifraud technology has blocked more than $7 billion in potentially fraudulent transactions in four years, the company states in its latest annual fraud prevention analysis.
- Bill Toulas
- May 15, 2024
- 01:42 PM
- 0
Windows Quick Assist abused in Black Basta ransomware attacks

Financially motivated cybercriminals abuse the Windows Quick Assist feature in social engineering attacks to deploy Black Basta ransomware payloads on victims' networks.
- Sergiu Gatlan
- May 15, 2024
- 01:06 PM
- 1
FBI seize BreachForums hacking forum used to leak stolen data

The FBI has seized the notorious BreachForums hacking forum that leaked and sold stolen corporate data to other cybercriminals.
- Lawrence Abrams
- May 15, 2024
- 10:44 AM
- 3
Banco Santander warns of a data breach exposing customer info

Banco Santander S.A. announced it suffered a data breach impacting customers after an unauthorized actor accessed a database hosted by one of its third-party service providers.
- Bill Toulas
- May 15, 2024
- 10:11 AM
- 0
Sponsored Content
Protect against lateral movement attacks by securing credentials

Organizations need to detect and remove intruders quickly to prevent data loss and minimize the impact of lateral movement attacks. Learn more from Specops Software on blocking lateral movement in networks.
- Sponsored by Specops Software
- May 15, 2024
- 10:01 AM
- 0
PoC exploit released for RCE zero-day in D-Link EXO AX4800 routers

The D-Link EXO AX4800 (DIR-X4860) router is vulnerable to remote unauthenticated command execution that could lead to complete device takeovers by attackers with access to the HNAP port.
- Bill Toulas
- May 14, 2024
- 06:10 PM
- 0
Singing River Health System: Data of 895,000 stolen in ransomware attack

The Singing River Health System is warning that it is now estimating that 895,204 people are impacted by a ransomware attack it suffered in August 2023.
- Bill Toulas
- May 14, 2024
- 04:08 PM
- 0
Microsoft fixes Windows zero-day exploited in QakBot malware attacks

Microsoft has fixed a zero-day vulnerability exploited in attacks to deliver QakBot and other malware payloads on vulnerable Windows systems.
- Sergiu Gatlan
- May 14, 2024
- 02:18 PM
- 0
Microsoft May 2024 Patch Tuesday fixes 3 zero-days, 61 flaws

Today is Microsoft's May 2024 Patch Tuesday, which includes security updates for 61 flaws and three actively exploited or publicly disclosed zero days.
- Lawrence Abrams
- May 14, 2024
- 01:49 PM
- 3
Ebury botnet malware infected 400,000 Linux servers since 2009

A malware botnet known as 'Ebury' has infected almost 400,000 Linux servers since 2009, with roughly 100,000 still compromised as of late 2023.
- Bill Toulas
- May 14, 2024
- 12:31 PM
- 0