An alarming number of organizations are not properly offboarding employees when they leave, especially in regard to passwords. In a March PasswordManager.com survey of 1,000 U.S....
Author: admin
Microsoft, Fortra & Health-ISAC Team Up to Remove Illicit Cobalt Strike Tools
Microsoft’s Digital Crimes Unit (DCU), security software vendor Fortra, and the Health Information Sharing and Analysis Center (Health-ISAC), have joined forces to remove cracked legacy copies...
TikTok, Other Mobile Apps Violate Privacy Regulations
The popular and increasingly controversial social media app TikTok must pay a fine of 12.7 million pounds (equivalent to around $16 million) in the UK for...
Printers Pose Persistent Yet Overlooked Threat
A rash of printer-related vulnerabilities in 2023 have punctuated security expert warnings that printers continue to be a significant source of vulnerability within companies — especially...
US Space Force Requests $700M for Cybersecurity Blast Off
US Space Force top brass have requested a $700 million investment in cybersecurity as part of the military branch’s overall $30 billion 2024 budget. The Russian...
Cybercriminals ‘CAN’ Steal Your Car, Using Novel IoT Hack
Automotive security experts have uncovered a novel method for stealing cars by breaking into their control systems through a headlight. The key (so to speak) is...
Twitter ‘Shadow Ban’ Bug Gets Official CVE
A vulnerability in Twitter’s code was recently discovered that allows users to game the algorithm with mass blocking actions from large numbers of accounts, in an...
US Space Force Requests $700M for Cybersecurity Blast Off
US Space Force top brass have requested a $700 million investment in cybersecurity as part of the military branch’s overall $30 billion 2024 budget. The Russian...
‘BEC 3.0’ Is Here With Tax-Season QuickBooks Cyberattacks
Cybercriminals continue to target victims with cleverly-crafted phishing attacks, this time from QuickBooks online accounts, aimed harvesting credentials. The gambits use a level of legitimacy and social engineering...
What to Discuss at RSA Conference — and It’s Not ChatGPT
The security community is always pressured to jump to the next thing. So, it’s easy to guess what will likely dominate conversations at the 2023 RSA...
Styx Marketplace Provides Hub for Financial Cybercrime
Styx Marketplace, which opened in January, is a new platform on the Dark Web that focuses on financial fraud, designed to provide cybercriminals with the necessary resources...
The Pope’s Security Gets a Boost With Vatican’s MDM Move
The world’s smallest and most antiquated army is taking a step towards modernizing its cyber defenses. Just ahead of the pre-Easter Holy Week for Catholics, Samsung...
‘Proxyjacking’ Cybercriminals Exploit Log4j in Emerging, Lucrative Cloud Attacks
Threat actors have found a lucrative new attack vector that hijacks legitimate proxyware services, which allow people to sell portions of their Internet bandwidth to third parties. In...
US Space Force Requests $700M for Cybersecurity Blast Off
US Space Force top brass have requested a $700 million investment in cybersecurity as part of the military branch’s overall $30 billion 2024 budget. The Russian...
Garage Door Openers Open to Hijacking, Thanks to Unpatched Security Vulns
Garage door controllers, smart plugs, and smart alarms sold by Nexx contain cybersecurity vulnerabilities that could enable cyberattackers to crack open home garage doors, take over...
Researcher Tricks ChatGPT Into Building Undetectable Steganography Malware
A security researcher has tricked ChatGPT into building sophisticated data-stealing malware that signature and behavior-based detection tools won’t be able to spot — eluding the chatbot’s anti-malicious-use...
New GRC Platform TrustRegister Links Risk to Revenue Impact
TrustCloud’s latest application, TrustRegister, empowers businesses to verify and assure trust in every relationship. TrustRegister allows companies to leverage programmatic risk assessments to proactively identify risks, simplify...
Law Firm for Uber Loses Drivers’ Data to Hackers in Yet Another Breach
A law firm representing Uber Technologies has notified an unknown number of its drivers that sensitive data, including their names and Social Security numbers, has been...
eFile Tax Return Software Found Serving Up Malware
An IRS-approved software service for filing taxes electronically, eFile.com, was found to be delivering JavaScript malware just at the height of tax-return season. eFile.com, which was...
15M+ Services & Apps Remain Sitting Ducks for Known Exploits
More than 15 million instances of Internet-connected applications, services, and devices are vulnerable to software flaws that the US government has confirmed are being exploited by...
Designing Tabletop Exercises That Actually Thwart Attacks
It’s Monday morning, 8 a.m. You walk into the office and, on your computer screen, you witness something you’ve only ever experienced in your nightmares. “Boom!...
DoJ Recovers $112M in Crypto Stolen With Romance Scams
Half a dozen cryptocurrency accounts, allegedly used to launder romance scam proceeds, have been seized by the Department of Justice. The DoJ said in a statement...
3CX Breach Widens as Cyberattackers Drop Second-Stage Backdoor
The threat actor — believed to be the Lazarus Group — that recently compromised 3CX’s VoIP desktop application to distribute information-stealing software to the company’s customers has also...
For Cybercrime Gangs, Professionalization Comes With ‘Corporate’ Headaches
Today’s foremost cybercrime gangs operate like large enterprises, with more than $50 million dollars in annual revenue and around 80% of operating expenses going to wage...
Data Breach Strikes Western Digital
Business operations for Western Digital, a data storage hardware provider, have been disrupted due to a recent systems breach that the company said occurred on March...
US Space Force Requests $700M for Cybersecurity Blast Off
US Space Force top brass have requested a $700 million investment in cybersecurity as part of the military branch’s overall $30 billion 2024 budget. The Russian...
The FDA’s Medical Device Cybersecurity Overhaul Has Real Teeth, Experts Say
The Food and Drug Administration (FDA) this week put into effect fresh guidance concerning the cybersecurity of medical devices — long a concerning area of risk...
‘Vulkan files’ leak reveals Putin’s global and domestic cyberwarfare tactics
The inconspicuous office is in Moscow’s north-eastern suburbs. A sign reads: “Business centre”. Nearby are modern residential blocks and a rambling old cemetery, home to ivy-covered...
The FDA’s Medical Device Cybersecurity Overhaul Has Real Teeth, Experts Say
The Food and Drug Administration (FDA) this week put into effect fresh guidance concerning the cybersecurity of medical devices — long a concerning area of risk...
The FDA’s Medical Device Cybersecurity Overhaul Has Real Teeth, Experts Say
The Food and Drug Administration (FDA) this week put into effect fresh guidance concerning the cybersecurity of medical devices — long a concerning area of risk...























