March 11, 2024News about hackersCybersecurity/browser security As the shift of IT infrastructure to cloud-based solutions celebrates its 10th anniversary, it is becoming clear that traditional on-premise approaches to data security…
Category: Cyber Security
Magnet Goblin Hacker Group leverages 1-day exploits to implement Nerbian RAT
March 11, 2024PressroomZero-day/endpoint security He called a financially motivated threat actor Goblin Magnet is rapidly adopting day-old security vulnerabilities into its arsenal in order to opportunistically breach edge devices and…
Proof-of-Concept exploit released for Progress Software’s OpenEdge vulnerability
March 11, 2024PressroomNetwork security/vulnerabilities Technical specifications and a Proof-of-Concept (PoC) exploit have been released for a recently disclosed critical security flaw in Progress Software OpenEdge Authentication Gateway and AdminServer, which…
Japan blames North Korea for cyberattack on PyPI supply chain
Japanese cybersecurity officials have warned that the infamous North Korean hacking team Lazarus Group recently conducted a supply chain attack targeting the PyPI software repository for Python apps. Threat actors…
APT Attacks on Tibetans – Safe Week with Tony Anscombe
video Evasive Panda was spotted targeting Tibetans in several countries and territories with payloads that included a previously undocumented backdoor that ESET called Nightdoor 08 March 2024 This week, ESET…
Enhanced PLC malware, similar to Stuxnet, aims to disrupt critical infrastructure
The proliferation of programmable logic controllers (PLCs) with web servers embedded within them has provided attackers with a way to launch potentially catastrophic remote attacks against operational technology (OT) for…
North Korea targets ScreenConnect bugs to eliminate ‘ToddleShark’ malware.
North Korean hackers are exploiting a critical vulnerability in ConnectWise’s ScreenConnect software to spread new, morphing spy malware. Two weeks ago, ConnectWise disclosed two flaws in its popular remote desktop…
Army Vet Reveals National Secrets to Fake Ukrainian Girlfriend
A U.S. Air Force civilian employee has been charged with three counts of conspiracy to disclose classified information after falling for an online romance scam and revealing national secrets. David…
BlackCat goes dark after stealing healthcare ransom
After days of outages causing chaos in the US healthcare system, United Healthcare’s Change Healthcare subsidiary decided its best solution was to pay off the BlackCat/ALPHV ransomware affiliate that breached…
Cyber insurance strategy requires collaboration between CISO and CFO
The ever-growing volume of cyberattacks and online threats helps make purchasing cyber insurance a routine activity for many organizations. While insurance has generally been the responsibility of the organization’s board…