CISA warns of trojanized versions of JavaScript library’s NPM package
The warning comes days after three rogue packages, okhsa, klow, and klown discovered by devsecops firm Sonatype, were removed from the NPM repository. The library rakes in more than six
CISA awards $2 million to cybersecurity programs for rural, diverse communities
cisa has announced “CISA is dedicated to recruiting and training individuals from all areas and all backgrounds with the aptitude and attitude to succeed in this exciting field,” Easterly said.
UpdateAgent malware variant impersonates legitimate macOS software
The new variant of UpdateAgent malware is also capable of dropping adware against macOS. New variant, new capabilities, new adware In a series of tweets, Microsoft explained that the variant
Nebraska Issues First Federal Cyber-stalking Sentence
Nebraska Issues First Federal Cyber-stalking Sentence The first ever person to be convicted of cyber-stalking in the District of Nebraska has been sentenced to federal prison. Dennis Sryniawski, a 48-year-old
FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks
The infamous Carbanak operator is moving is looking to juice its ransomware game by recruiting IT staff to its fake Bastion Secure ‘pen-testing’ company. The financially motivated cybercrime gang behind
New Cybersecurity World Record Set
New Cybersecurity World Record Set A new Guinness World Record in cybersecurity training has been set by a cloud-based identity and access management (IAM) provider, a security awareness training platform,
Google details cookie stealer malware campaign targeting YouTubers
Google attributed the malware campaign to a group of attackers recruited via a Russian-language hacker forum. Google has disclosed details of a new campaign involving phishing attacks launched against YouTube
US warns that Chinese government is using 'wide variety' of methods, some illegal, to steal trade secrets
Written by AJ Vicens Oct 22, 2021 | CYBERSCOOP The Chinese government’s aggressive push to dominate emerging technology such as artificial intelligence, quantum computing, and biotechnology make Beijing the “primary
REvil Servers Shoved Offline by Governments – But They’ll Be Back, Researchers Say
A multi-country effort has given ransomware gang REvil a taste of its own medicine by pwning its backups and pushing its leak site and Tor payment site offline. The REvil
US Secret Service Announces Cyber Games Winner
US Secret Service Announces Cyber Games Winner A team of law enforcement officials from South Carolina has seized first place in a nationwide cybersecurity contest. More than 200 teams from
WinRAR vulnerability allowed attackers to remotely hijack systems
The vulnerability in WinRAR trialware could be abused by a remote attacker for executing arbitrary code on any system thus, getting an opportunity to launch a range of attacks. According
FOI Request Reveals Scale of Data Breaches at UK Councils
FOI Request Reveals Scale of Data Breaches at UK Councils UK councils have been hit by a staggering 33,645 data breaches caused by human error in the past five years,
Cisco SD-WAN Security Bug Allows Root Code Execution
The high-severity bug, tracked as CVE-2021-1529, is an OS command-injection flaw. Cisco SD-WAN implementations are vulnerable to a high-severity privilege-escalation vulnerability in the IOS IE operating system that could allow
Pentesters Wanted for Ransomware Attacks!
The Russian Advanced Persistent Threat (APT) group FIN7 is trying to break into the lucrative ransomware market by creating bogus cybersecurity organizations that perform network attacks under the pretense of
Webhards and Torrents: the New Channels for RAT Malware Propagation in Korea
South Korea seems to be a target of a new malicious campaign that propagates RAT malware camouflaged into a game for adults. The way it is distributed happens via torrents
What Is Conti Ransomware?
Conti ransomware is an extremely damaging malicious actor due to the speed with which encrypts data and spreads to other systems. The cyber-crime action is thought to be led by
Hackers somehow got their rootkit a Microsoft-issued digital signature
Cybersecurity researchers at Bitdefender have detailed how cyber criminals have been using FiveSys, a rootkit that somehow made its way through the driver certification process to be digitally signed by Microsoft.
Illinois candy giant hit with ransomware weeks before Halloween
Ferrara Candy — the candy giant behind Nerds, Laffy Taffy, Now and Laters, SweetTarts, Jaw Busters, Nips, Runts and Gobstoppers — announced that it was hit with a ransomware attack
This monster of a phishing campaign is after your passwords
Microsoft has detailed an unusual phishing campaign aimed at stealing passwords that uses a phishing kit built using pieces of code copied from other hackers’ work. A “phishing kit” is
Macaw Locker, Evil Corp’s Latest Version Makes New Victims
In order to avoid US sanctions that avert victims from paying ransom demands, Evil Corp threat actor has released a new ransomware dubbed Macaw Locker. About Evil Corp Also known as the
Threat Actors Abuse Discord to Push Malware
The platform’s Content Delivery Network and core features are being used to send malicious files—including RATs–across its network of 150 million users, putting corporate workplaces at risk. Threat actors are
What Is Extended Detection and Response (XDR)? Features, Benefits, and Beyond
Overloaded security teams, poor visibility, and threat alert overload have quite an impact when it comes to detecting and effectively responding to cyber threats. Since today’s cyberattacks are extremely tricky
YouTube Used to Push Password-Stealing Malware
A Trojan is a type of malware that acts according to the Greek legend, as it camouflages itself as a legitimate file or program to trick unsuspecting users into installing
Ex-carrier employee sentenced for role in SIM-swapping scheme
A former sales representative of a mobile carrier has been sentenced after accepting bribes to perform SIM-swapping attacks. This week, the US Department of Justice (DoJ) said that Stephen Defiore,
22% of Brits Received Proof of Vaccination Phishing Email in Past Six Months
22% of Brits Received Proof of Vaccination Phishing Email in Past Six Months Nearly a quarter (22%) of Brits have received phishing emails asking them to download their ‘proof of
Network Computing Awards 2021: Heimdal™ Wins Best Cloud-Delivered Security Solution
Great efforts pay off! We are very proud and thrilled to announce that Heimdal™ won first place in the Cloud-Delivered Security Solution of the Year category at the Network Computing
Enhancing Cyber Resilience through Extended Detection and Response (XDR)
Summary Advanced attacks represent a challenge for organizations that are getting breached due to architectural misfits and resource challenges Enlarging the width and depth of threat detection and response helps
South African police arrest eight men suspected of targeting widows in romance scams
South African police have arrested eight suspects in connection to romance scams that defrauded at least 100 women. The gang used “sob stories” as a lure to push women —
Microsoft Teams: Now your video calls support end-to-end encryption
Microsoft has rolled out a public preview of E2EE for one-to-one Teams calls, bringing its enterprise platform up to par with Facebook’s consumer apps, WhatsApp and Messenger. Microsoft announced the
Halloween Horror-Show for Candy-Maker Hit by Ransomware
Halloween Horror-Show for Candy-Maker Hit by Ransomware A major US confectionary manufacturer has been hit by ransomware at one of its busiest times of the year, according to reports. Chicago-based Ferrara –
Ransomware: Looking for weaknesses in your own network is key to stopping attacks
Ransomware is a major cybersecurity threat to organisations around the world, but it’s possible to reduce the impact of an attack if you have a thorough understanding of your own
Over 80% of Brits Deluged with Scam Calls and Texts
Over 80% of Brits Deluged with Scam Calls and Texts Some 45 million Brits received fraudulent phone calls and texts over the summer, according to new data from Ofcom. The UK’s
Government Agents Compromise REvil Backups to Force Group Offline
Government Agents Compromise REvil Backups to Force Group Offline The US authorities appear to have scored another win in their fight against ransomware by forcing the infamous REvil group offline.
All You Need to Know About DNS Spoofing to Keep Your Organization Safe
This post is also available in: Danish The DNS in and of itself has never been secure. Being created in the 1980s when the Internet was a complete novelty, protection
My Health Record imaging services security failed ADHA password standards
My Health Record system’s physical and information security measures used to access the My Health Record system for pathology and diagnostic imaging services did not meet the ADHA’s recommended standard
Google reports new highs for governments requesting content to be removed
Google issued its Content Removal Transparency Report for the first half of 2021, and warned it has continued to see a rising trend in requests from governments, as they pass
India Releases Cybersecurity Guidelines for Power Sector
Trend Micro – The Indian Government’s Power Ministry and the Central Electricity Authority (CEA) recently released cybersecurity guidelines to enhance the power sector’s cybersecurity readiness. It is the first time
Multiple governments involved in coordinated takedown of REvil ransomware group: Reuters
Cybersecurity experts have told Reuters that law enforcement officials from multiple countries were involved in the disruption of the REvil ransomware gang, which went dark for the second time on
Republican Senate leaders slam new TSA cybersecurity regulations for rail, aviation industry
Republican leaders in the US Senate have come out harshly against new cybersecurity regulations designed to protect US railroad and airport systems. The new rules were handed down earlier this
US Imprisons Bulletproof Hosting Providers
US Imprisons Bulletproof Hosting Providers Two men from Eastern Europe have been imprisoned in the United States for helping cyber-criminals carry out cyber-attacks against individuals and financial institutions in America.
DOJ Sues Robocaller to Pay Massive Fine
DOJ Sues Robocaller to Pay Massive Fine The United States' Department of Justice (DOJ) is seeking to recover a financial penalty of nearly $10m that was imposed on a man
U.S. Ban on Sales of Cyberattack Tools Is Anemic, Experts Warn
Meanwhile, Zerodium’s quest to buy VPN exploits is problematic, researchers said. The launch of a standing offer to pay for Windows virtual private network (VPN) software zero-day exploits came to
TA551 Shifts Tactics to Install Sliver Red-Teaming Tool
A new email campaign from the threat group uses the attack-simulation framework in a likely leadup to ransomware deployment. The criminal threat group known as TA551 has added the Sliver
450 million cyberattacks attempted on Japan Olympics infrastructure: NTT
The NTT Corporation, which provided wide-ranging telecommunications services and network security for the Olympic & Paralympic Games in Tokyo this summer, said there were more than 450 million attempted cyberattacks
CISA Awards $2M to Cybersecurity Training Programs
CISA Awards $2M to Cybersecurity Training Programs The United States' Cybersecurity and Infrastructure Security Agency (CISA) has awarded two organizations $2m to develop cybersecurity workforce training programs. Award recipients NPower
Gigabyte Allegedly Hit by AvosLocker Ransomware
If AvosLocker stole Gigabyte’s master keys, threat actors could force hardware to download fake drivers or BIOS updates in a supply-chain attack a la SolarWinds. The AvosLocker ransomware gang is
US rolls out new rules governing export of hacking, cyberdefense tools
The US Commerce Department has released new rules designed to stop companies from selling hacking tools to China, Russia and other countries that may use them for nefarious purposes. The
72% of Organizations Experienced a DNS Attack in the Last Year
72% of Organizations Experienced a DNS Attack in the Last Year Nearly three-quarters (72%) of organizations have suffered a domain name system (DNS) attack in the last 12 months, according