Source: www.bleepingcomputer.com – Author: Bill Toulas The United States government has recommended that Conor Brian Fitzpatrick, the creator and lead administrator of the now-defunct BreachForums hacking...
Month: January 2024
Credentials are Still King: Leaked Credentials, Data Breaches and Dark Web Markets – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sponsored by Flare Infostealer malware is one of the most substantial and underappreciated risk vectors for corporate information security teams. Infostealers infect...
Google: Russian FSB hackers deploy new Spica backdoor malware – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Google says the ColdRiver Russian-backed hacking group is pushing previously unknown backdoor malware using payloads masquerading as a PDF decryption tool....
Docker hosts hacked in ongoing website traffic theft scheme – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas A new campaign targeting vulnerable Docker services deploys an XMRig miner and the 9hits viewer app on compromised hosts, allowing...
Jira down: Atlassian outage affecting multiple cloud services – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Ax Sharma Multiple Atlassian Jira products are experiencing an ongoing outage as of this morning. Users of Jira Work management, Jira Software,...
Popular GPUs Used AI Systems Vulnerable to Memory Leak Flaw – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 Artificial Intelligence & Machine Learning , Next-Generation Technologies & Secure Development LeftoverLocals Affects Apple, AMD and Qualcomm Devices Akshaya Asokan (asokan_akshaya)...
Swiss Government Reports Nuisance-Level DDoS Disruptions – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 Critical Infrastructure Security , Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime Self-Proclaimed Russian Hacktivists Continue Putin-Aligned Information Operations Mathew...
White House Official Warns of AI Risks in 2024 Elections – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 Artificial Intelligence & Machine Learning , Government , Industry Specific No ‘Magic Solution’ to Prevent Malicious Use of AI in Elections,...
PHMSA Launches Initiatives to Bolster Pipeline Cybersecurity – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 Agency Tasked With Pipeline Security Takes New Steps to Combat Rise in Cyberattacks Chris Riotta (@chrisriotta) • January 18, 2024 ...
AHA: Rise in Scams Targeting IT Help Desks for Payment Fraud – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 Fraud Management & Cybercrime , Healthcare , Industry Specific American Hospital Association Warns of Social Engineering Schemes Marianne Kolbasuk McGee (HealthInfoSec)...
New Docker Malware Steals CPU for Crypto & Drives Fake Website Traffic – Source:thehackernews.com
Source: thehackernews.com – Author: . Jan 18, 2024NewsroomServer Security / Cryptocurrency Vulnerable Docker services are being targeted by a novel campaign in which the threat actors...
Russian COLDRIVER Hackers Expand Beyond Phishing with Custom Malware – Source:thehackernews.com
Source: thehackernews.com – Author: . The Russia-linked threat actor known as COLDRIVER has been observed evolving its tradecraft to go beyond credential harvesting to deliver its...
TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks – Source:thehackernews.com
Source: thehackernews.com – Author: . Jan 18, 2024NewsroomSupply Chain Attacks / AI Security Continuous integration and continuous delivery (CI/CD) misconfigurations discovered in the open-source TensorFlow machine...
MFA Spamming and Fatigue: When Security Measures Go Wrong – Source:thehackernews.com
Source: thehackernews.com – Author: . Jan 18, 2024The Hacker NewsAuthentication Security / Passwords In today’s digital landscape, traditional password-only authentication systems have proven to be vulnerable...
Attackers Could Eavesdrop on AI Conversations on Apple, AMD, Imagination and Qualcomm GPUs – Source: www.techrepublic.com
Source: www.techrepublic.com – Author: Megan Crouse Researchers at cybersecurity research and consulting firm Trail of Bits have discovered a vulnerability that could allow attackers to read...
Androxgh0st Malware Botnet Steals AWS, Microsoft Credentials and More – Source: www.techrepublic.com
Source: www.techrepublic.com – Author: Cedric Pernet The Federal Bureau of Investigation and Cybersecurity & Infrastructure Security Agency warned in a joint advisory about a threat actor...
Canadian Citizen Gets Phone Back from Police – Source: www.schneier.com
Source: www.schneier.com – Author: Bruce Schneier HomeBlog Canadian Citizen Gets Phone Back from Police After 175 million failed password guesses, a judge rules that the Canadian...
E-Crime Rapper ‘Punchmade Dev’ Debuts Card Shop – Source: krebsonsecurity.com
Source: krebsonsecurity.com – Author: BrianKrebs The rapper and social media personality Punchmade Dev is perhaps best known for his flashy videos singing the praises of a...
Bangladeshi Elections Come into DDoS Crosshairs – Source: www.darkreading.com
Source: www.darkreading.com – Author: Nate Nelson, Contributing Writer Source: Muhammad Toqeer via Alamy Stock Photo The end of 2023 saw an uptick in distributed denial-of-service (DDoS)...
With Attacks on the Upswing, Cyber-Insurance Premiums Poised to Rise Too – Source: www.darkreading.com
Source: www.darkreading.com – Author: Robert Lemos, Contributing Writer Source: Photon Photo via Shutterstock An increase in cyber-insurance claims in 2023, driven by a more active threat...
Stealthy New macOS Backdoor Hides on Chinese Websites – Source: www.darkreading.com
Source: www.darkreading.com – Author: Elizabeth Montalbano, Contributing Writer Source: Age Foto Stock via Alamy Stock Photo A sneaky macOS backdoor that allows attackers to remotely control...
‘Chaes’ Infostealer Code Contains Hidden Threat Hunter Love Notes – Source: www.darkreading.com
Source: www.darkreading.com – Author: Becky Bracken, Editor, Dark Reading 1 Min Read Source: Grenar via Alamy Stock Photo Appearing flattered by the dogged analysis of Chaes...
Building AI That Respects Our Privacy – Source: www.darkreading.com
Source: www.darkreading.com – Author: Arjun Bhatnagar Source: marcos alvarado via Alamy Stock Photo COMMENTARY As a technologist, I experiment for a living. I consider it my...
InfoSec 101: Why Data Loss Prevention is Important to Enterprise Defense – Source: www.darkreading.com
Source: www.darkreading.com – Author: Ross Moore Source: Constantin Stanciu via Alamy Stock Photo Data loss prevention (DLP) is an information security strategy that helps organizations prevent...
Lock Down the Software Supply Chain With ‘Secure by Design’ – Source: www.darkreading.com
Source: www.darkreading.com – Author: Nathan Eddy, Contributing Writer Source: Parichat via Adobe Stock Photo Software that prioritizes security at its most foundational level means designing the...
Sophisticated macOS Infostealers Get Past Apple’s Built-In Detection – Source: www.darkreading.com
Source: www.darkreading.com – Author: Elizabeth Montalbano, Contributing Writer Source: Bits and Splits via Shutterstock Increasingly sophisticated infostealers are targeting macOS with the capability to evade Apple’s...
Nearly 7K WordPress Sites Compromised by Balada Injector – Source: www.darkreading.com
Source: www.darkreading.com – Author: Dark Reading Staff Source: Primakov via Shutterstock About 6,700 WordPress websites have been infected with the Balada Injector malware, after using a...
Strength in Numbers: The Case for Whole-of-State Cybersecurity – Source: www.darkreading.com
Source: www.darkreading.com – Author: Jack Danahy Source: vska via Alamy Stock Photo COMMENTARY Threat actors have paid particular attention to the public sector recently, increasing efforts...
Russian APT Known for Phishing Attacks Is Also Developing Malware, Google Warns – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Russian threat group ColdRiver has developed Spica, a malware that enables it to compromise systems and steal information. The post...
Energy Department to Invest $30 Million in Clean Energy Cybersecurity Solutions – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire Organizations can earn up to $3 million in federal funding for cyber tools securing the clean energy infrastructure. The post...



























