Security News Bundle

"New Windows 10 22H2 beta fixes many leaks and crashes."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 24 August 2024, 0328 UTC.

Contents and Source:  Email subscription via https://feedly.com.   https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895

Please check the link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

63

Most popular

New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data
15 TTPs
•
62The Hacker News / 16h
•
Qilin ransomware steals Chrome credentials
The threat actors behind a recently observed Qilin ransomware attack have stolen credentials stored in Google Chrome browsers on a small set of compromised endpoints. The use of credential harvesting in connection with a ransomware infection marks an unusual twist, and one that could have cascading consequences, cybersecurity firm Sophos said in a Thursday report. The attack, detected in July

Today

Qilin ransomware steals credentials stored in Google Chrome
18 TTPs
•
Security Affairs / 5h
•
Qilin ransomware steals Chrome credentials
Sophos researchers investigated a Qilin ransomware breach attack that led to the theft of credentials stored in Google Chrome browsers. Sophos researchers investigated a Qilin ransomware attack where operators stole credentials stored in Google Chrome browsers of a limited number of compromised endpoints. The experts pointed out that the credential harvesting activity is usually not associated wi
Meta deep-sixes WhatsApp accounts tied to Iranian hacking group
5 TTPs
•
CyberScoop / 5h
•
Meta disrupts Iranian hackers targeting officials
Meta security teams blocked “a small cluster” of WhatsApp accounts associated with APT42, an Iranian government-backed group accused by U.S. officials of hacking into the Trump campaign’s email accounts , the company said Friday. According to a blog post from Meta , the Iranian-linked accounts were “likely” for social engineering purposes, with the actors posing as tech support for companies like
Kentucky man gets 81 months in prison for cyber fraud to fake his own death
Man fakes death to evade child support
•
CyberScoop / 6h
Deadbeat parents across America are responsible for more than $113 billion in unpaid child support payments, according to the Department of Health and Human Services. Few of those offenders likely spent as much effort to get out their obligations as Kentucky resident Jesse Kipf. According to the Department of Justice and court documents, Kipf starting in January 2023 began using stolen online cre
Former Verizon employee pleads guilty to conspiring to aid Chinese spy agency
CyberScoop / 7h
A former Verizon employee pleaded guilty Friday to conspiring to serve as an agent of the People’s Republic of China, namely by using his job to send information about Chinese enemies to a spy agency there, as well as details related to cyber incidents. Ping Li faces up to five years in prison for his contacts with the Ministry of State Security. He provided information on Chinese dissidents, pro
Phishing attacks target mobile users via progressive web applications (PWA)
New phishing attack targets mobile users
•
Security Affairs / 9h
Cybercriminals use progressive web applications (PWA) to impersonate banking apps and steal credentials from mobile users. ESET researchers detailed a phishing campaign against mobile users that uses Progressive Web Applications (PWAs). The threat actors used fake apps almost indistinguishable from real banking apps on both iOS and Android. The technique was first disclosed in Poland in July 2023
Feds arrest Latvian man accused of extorting Karakurt victims
CyberScoop / 9h
Federal prosecutors this week charged a Latvian national who was living in Russia for his alleged role in extorting companies targeted by the Karakurt ransomware operation. Deniss Zolotarjovs, 33, was arrested in the country of Georgia in December and extradited to the U.S. in August, the U.S. Attorney’s Office in the Southern District of Ohio said in a statement Tuesday . Zolotarjovs is facing c
Member of cybercrime group Karakurt charged in the US
13 TTPs
•
Security Affairs / 10h
•
Russian Karakurt member charged in US
The Russian national Deniss Zolotarjovs has been charged in a U.S. court for his role in the Karakurt cybercrime gang. Deniss Zolotarjovs (33), a Russian cybercriminal, has been charged in a U.S. court for his role in the Russian Karakurt cybercrime gang. The man has been charged with money laundering, wire fraud, and extortion. The man was arrested in Georgia in December 2023 and recently extrad
New PEAKLIGHT Dropper Deployed in Attacks Targeting Windows with Malicious Movie Downloads
12 TTPs
•
43The Hacker News / 11h
•
PEAKLIGHT malware uses pirated movies
Cybersecurity researchers have uncovered a never-before-seen dropper that serves as a conduit to launch next-stage malware with the ultimate goal of infecting Windows systems with information stealers and loaders. "This memory-only dropper decrypts and executes a PowerShell-based downloader," Google-owned Mandiant said. "This PowerShell-based downloader is being tracked as PEAKLIGHT." Some of
How Immigration Can Solve America’s Cybersecurity Shortage
IT Security Guru / 11h
The U.S. is facing a critical shortage of cybersecurity professionals, a challenge that is not only growing but also poses a significant threat to national security. CyberSeek, a joint initiative of NIST’s NICE program, CompTIA, and Lightcast, reports in its dashboard over 469,930 job openings in cybersecurity. (CyberSeek, 2024) Despite the escalating cyber threats, the talent pool to combat thes
Halliburton confirms cyber incident in SEC filing
Halliburton suffers cyberattack disruption
•
CyberScoop / 12h
U.S. energy services titan Halliburton proactively took certain systems offline “to help protect them” after a cyberattack this week, the company said Friday in a filing with federal regulators. The company learned Wednesday that “an unauthorized third party gained access to certain parts of its systems” and that it was working with external advisers to assess and remediate the situation, the com
Webinar: Experience the Power of a Must-Have All-in-One Cybersecurity Platform
43The Hacker News / 15h
Let's be honest. The world of cybersecurity feels like a constant war zone. You're bombarded by threats, scrambling to keep up with patches, and drowning in an endless flood of alerts. It's exhausting, isn’t it? But what if there was a better way? Imagine having every essential cybersecurity tool at your fingertips, all within a single, intuitive platform, backed by expert support 24/7. This is
Focus on What Matters Most: Exposure Management and Your Attack Surface
28The Hacker News / 16h
Read the full article for key points from Intruder’s VP of Product, Andy Hornegold’s recent talk on exposure management. If you’d like to hear Andy’s insights first-hand, watch Intruder’s on-demand webinar. To learn more about reducing your attack surface, reach out to their team today. Attack surface management vs exposure management Attack surface management (ASM) is the ongoing

Comments

Post a Comment

Please leave a comment about our recent post.

Popular posts from this blog

The Cyberwire Daily Briefing

Image
"Fortinet confirms breach of customer data." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 15 September 2024, 1339 UTC. Content and Source:   https://thecyberwire.com/newsletters/daily-briefing/13/176 Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). V13 | Issue 176 | 9.13.24 Daily Briefing for 09.13.24 Announcement Cloud Security in the Age of Generative AI. Artificial Intelligence is revolutionizing business, but it also introduces new risks. Join us on Wednesday, September 18th at 2pm EDT for a compelling live webinar on "Good vs. Evil: Cloud Security in the Age of Generative AI" with N2K CyberWire’s Dave Bittner and Sysdig’s Loris Degioanni.  Learn more and register now . Summary By the CyberWire staff At a glance. Fortinet confirms breach of customer data. Iran's Scarred Manticore deplo...
Read more

Cyber War News Today.

Image
"International Defence Cooperation:  A key to regional stability." Views expressed in this cybersecurity, cyber espionage, and cyber crime update are those of the reporters and correspondents.  Accessed on 15 December 2024, 0134 UTC. Content and Source:   https://cyberwar.einnews.com/news/cyber-war-news?n=2&code=FA9GNesSTpp2rjO1&utm_source=NewsletterNews&utm_medium=email&utm_campaign=Cyber+War+News&utm_content=navig Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). Cyber War News Monitoring Get by    Email    •     RSS Published on  Dec 13, 2024 The Cyber Warfare Market Size Reach USD 127.1 Billion by 2032 Exhibiting CAGR at 13.3% WILMINGTON, DE, UNITED STATES, December 13, 2024 /⁨EINPresswire.com⁩/ -- According to the report, The Cyber Warfare Market Size Reach USD 127.1 Billion by 2032 Exhibiting CAGR at 1...
Read more

SecurityWeek Briefing

Image
"New RAMBO attack allows air-gapped data theft." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 10 September 2024, 0035 UTC. Content and Source:  https://www.securityweek.com Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net).   Monday, September 9 , 2024 Are you worried about unmanaged devices and apps? LATEST CYBERSECURITY HEADLINES New RAMBO Attack Allows Air-Gapped Data Theft Predator Spyware Resurfaces With Fresh Infrastructure Google Pushes Rust in Legacy Firmware to Tackle Memory Safety Flaws 300,000 Impacted by Data Breach at Car Rental Firm Avis One Million US Kaspersky Customers Transferred to Pango’s UltraAV Two Indicted in US for Running Dark Web Marketplaces Offering Stolen Information Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks CISA Breaks Silence on Controvers...
Read more