News in the Security category

Chinese Cyberspies Employ Ransomware in Attacks for Diversion

Cyberespionage groups have been using ransomware as a tactic to make attack attribution more challenging, distract defenders, or for a financial reward as a secondary goal to data theft.
- Bill Toulas
- June 27, 2024
- 12:20 AM
- 1
LockBit lied: Stolen data is from a bank, not US Federal Reserve

Recently-disrupted LockBit ransomware group, in a desperate attempt to make a comeback, claimed this week that it had hit the Federal Reserve, the central bank of the United States. Except, the rumor has been quashed.
- Ax Sharma
- June 26, 2024
- 02:20 PM
- 6
CISA: Most critical open source projects not using memory safe code

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published research looking into 172 key open-source projects and whether they are susceptible to memory flaws.
- Bill Toulas
- June 26, 2024
- 01:56 PM
- 6
Exploit for critical Fortra FileCatalyst Workflow SQLi flaw released

The Fortra FileCatalyst Workflow is vulnerable to an SQL injection vulnerability that could allow remote unauthenticated attackers to create rogue admin users and manipulate data on the application database.
- Bill Toulas
- June 26, 2024
- 12:56 PM
- 0
Hackers target new MOVEit Transfer critical auth bypass bug

Threat actors are attempting to exploit a critical authentication bypass flaw impacting Progress MOVEit Transfer, which the vendor disclosed yesterday.
- Bill Toulas
- June 26, 2024
- 10:49 AM
- 2
Snowblind malware abuses Android security feature to bypass security

A novel Android attack vector from a piece of malware tracked as Snowblind is abusing a security feature to bypass existing anti-tampering protections in apps that handle sensitive user data.
- Bill Toulas
- June 26, 2024
- 09:33 AM
- 1
Plugins on WordPress.org backdoored in supply chain attack

A threat actor modified the source code of at least five plugins hosted on WordPress.org to include malicious PHP scripts that create new accounts with administrative privileges on websites running them.
- Bill Toulas
- June 25, 2024
- 03:25 PM
- 2
Polyfill.io JavaScript supply chain attack impacts over 100K sites

Over 100,000 sites have been impacted in a supply chain attack by the Polyfill.io service after a Chinese company acquired the domain and the script was modified to redirect users to malicious and scam sites.
- Lawrence Abrams
- June 25, 2024
- 02:10 PM
- 1
New Medusa malware variants target Android users in seven countries

The Medusa banking trojan for Android has re-emerged after almost a year of keeping a lower profile in campaigns targeting France, Italy, the United States, Canada, Spain, the United Kingdom, and Turkey.
- Bill Toulas
- June 25, 2024
- 01:02 PM
- 0
Neiman Marcus confirms data breach after Snowflake account hack

Luxury retailer Neiman Marcus confirmed it suffered a data breach after hackers attempted to sell the company's database stolen in recent Snowflake data theft attacks.
- Lawrence Abrams
- June 25, 2024
- 10:43 AM
- 0
FBI warns of fake law firms targeting crypto scam victims

The FBI is warning of cybercriminals posing as law firms and lawyers that offer cryptocurrency recovery services to victims of investment scams and steal funds and personal information.
- Bill Toulas
- June 25, 2024
- 10:11 AM
- 0
Sponsored Content
Why Passphrases are Safer and Easier than Passwords

The move from passwords to passphrases may seem daunting, but some simple approaches can help. Learn more from Specops Software about the benefits of passphrases and how to migrate to them.
- Sponsored by Specops Software
- June 25, 2024
- 10:02 AM
- 1
P2PInfect botnet targets REdis servers with new ransomware module

P2PInfect, originally a dormant peer-to-peer malware botnet with unclear motives, has finally come alive to deploy a ransomware module and a cryptominer in attacks on Redis servers.
- Bill Toulas
- June 25, 2024
- 06:00 AM
- 0
Chemical facilities warned of possible data theft in CISA CSAT breach

CISA is warning that its Chemical Security Assessment Tool (CSAT) environment was breached in January after hackers deployed a webshell on its Ivanti device, potentially exposing sensitive security assessments and plans.
- Lawrence Abrams
- June 24, 2024
- 04:53 PM
- 1
New attack uses MSC files and Windows XSS flaw to breach networks

A novel command execution technique dubbed 'GrimResource' uses specially crafted MSC (Microsoft Saved Console) and an unpatched Windows XSS flaw to perform code execution via the Microsoft Management Console.
- Bill Toulas
- June 24, 2024
- 03:03 PM
- 0
Four FIN9 hackers indicted for cyberattacks causing $71M in losses

Four Vietnamese nationals linked to the international cybercrime group FIN9 have been indicted for their involvement in a series of computer intrusions that caused over $71 million in losses to companies in the U.S.
- Bill Toulas
- June 24, 2024
- 01:35 PM
- 0
CoinStats says North Korean hackers breached 1,590 crypto wallets

CoinStats suffered a massive security breach that compromised 1,590 cryptocurrency wallets, with the attack suspected to have been carried out by North Korean threat actors.
- Bill Toulas
- June 24, 2024
- 10:56 AM
- 0
Sponsored Content
Is your cybersecurity vendor transparent about vulnerability fixes?

Transparent disclosure empowers consumers with the information they need to to safeguard their assets effectively. Learn more from Fortinet about choosing a vendor that is transparent with their bug fixes.
- Sponsored by Fortinet
- June 24, 2024
- 10:02 AM
- 0
Facebook PrestaShop module exploited to steal credit cards

Hackers are exploiting a flaw in a premium Facebook module for PrestaShop named pkfacebook to deploy a card skimmer on vulnerable e-commerce sites and steal people's payment credit card details.
- Bill Toulas
- June 23, 2024
- 10:08 AM
- 0
CDK Global outage caused by BlackSuit ransomware attack

The BlackSuit ransomware gang is behind CDK Global's massive IT outage and disruption to car dealerships across North America, according to multiple sources familiar with the matter.
- Lawrence Abrams
- June 22, 2024
- 03:08 PM
- 7