December 2024
229 posts. Browse all months
- Study Finds AI Can Guess Crypto Seed Phrases in 0.02 Seconds
A study by NFTEvening and Storible tested whether AI could crack cryptocurrency seed phrases. The study found that while AI can recover missing words quickly, …
- A boy created AI-generated porn with the faces of girls he knew. Why Toronto police said he didn’t break the law
A recent case in Toronto highlighted critical gaps in Canadian legislation regarding AI-generated deepfake images, particularly concerning minors. The case …
- The Threat of SIM Swapping Attacks on Financial Institutions - SOCRadar® Cyber Intelligence Inc.
SIM swapping attacks, where cybercriminals hijack phone numbers to bypass security measures, pose a significant threat to financial institutions. These …
- US Finalizes Rule Throttling Bulk Data Sales to China
The U.S. government finalized a rule restricting the bulk transfer of sensitive data, including location, health, and biometric data, to China and Russia. The …
- White House Clears HIPAA Security Rule Update
The U.S. Department of Health and Human Services (HHS) is proposing a significant update to the Health Insurance Portability and Accountability Act (HIPAA) …
- 2024 Attack Surface Threat Intelligence Report - Cogility - TacitRed - Cybersecurity Insiders
The 2024 Attack Surface Threat Intelligence Report reveals a significant increase in impactful attack surface incidents, with smaller organizations facing …
- Blue Yonder says November ransomware attack not connected to Cleo vulnerability - The Cyber Post
Blue Yonder, a supply chain management company, denies a connection between a recent ransomware attack and a vulnerability in Cleo file sharing software. The …
- US adds 9th telecom company to list of known Salt Typhoon targets - The Cyber Post
A Chinese espionage campaign, known as Salt Typhoon, has breached nine U.S. telecommunications firms, including unclassified communications from senior …
- North Korean Hackers Deploy OtterCookie Malware in Contagious Interview Campaign
North Korean threat actors, known as CL-STA-0240 or Famous Chollima, are deploying a new JavaScript malware called OtterCookie in their Contagious Interview …
- Prioritizing patching: A deep dive into frameworks and tools – Part 1: CVSS – Sophos News
CVSS is a widely used framework for scoring vulnerability severity, providing a numerical ranking between 0.0 and 10.0. While CVSS is a useful tool, it has …
- Volkswagen data breach of Electric cars and D Link router botnet attack - Cybersecurity Insiders
Volkswagen experienced a data breach affecting over 800,000 electric vehicle owners due to a misconfiguration in their cloud infrastructure. The exposed data, …
- Top 10 Identity Attacks in 2024: Protecting Credentials in a Digital World - SOCRadar® Cyber Intelligence Inc.
In 2024, identity attacks reached new heights, with cybercriminals using sophisticated methods like deepfake video calls and polymorphic loaders to breach …
- The Best, the Worst and the Ugliest in Cybersecurity | 2024 Edition
2024 saw both positive and negative developments in cybersecurity, including law enforcement successes against ransomware gangs and a surge in vulnerabilities …
- Defining & Defying Cybersecurity Staff Burnout
Cybersecurity burnout, characterized by exhaustion, cynicism, and ineffectiveness, is a serious issue exacerbated by chronic stress and lack of control. While …
- 2024 in AI: It’s changed the world, but it’s not all good | Malwarebytes
In 2024, AI technology showcased its potential for both good and evil, with incidents ranging from heightened ransomware threats to data breaches and scams. …
- What’s new in Cloudflare: MASQUE now powers 1.1.1.1 & WARP apps, DEX now generally available with Remote Captures
Cloudflare announces two updates: 1.1.1.1 & WARP apps now use MASQUE, a modern HTTP/3-based protocol, for faster and more stable Internet connections. DEX, a …
- Quantum Computing Advances in 2024 Put Security In Spotlight
Google’s announcement of its Willow chip, which reduces noise and errors in quantum computing, marks a significant milestone towards a usable quantum computer. …
- Cloud Atlas Deploys VBCloud Malware: Over 80% of Targets Found in Russia
Cloud Atlas, a threat actor active since 2014, is using a new malware called VBCloud in cyber attacks targeting primarily Russian users. The attack chain …
- Dark Web Profile: Storm-842 (Void Manticore) - SOCRadar® Cyber Intelligence Inc.
Storm-842, also known as Void Manticore, is an Iranian threat actor linked to the Ministry of Intelligence and Security (MOIS). They specialize in destructive …
- Palo Alto Releases Patch for PAN-OS DoS Flaw — Update Immediately
Palo Alto Networks has released a patch for a high-severity vulnerability in PAN-OS software that could cause a denial-of-service (DoS) condition on …
- FICORA and Kaiten Botnets Exploit Old D-Link Vulnerabilities for Global Attacks
Cybersecurity researchers warn of a surge in malicious activity involving two botnets, FICORA and CAPSAICIN, exploiting vulnerabilities in D-Link routers. …
- Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization
Apache MINA has a critical vulnerability (CVE-2024-52046) that allows remote code execution through unsafe serialization. The vulnerability affects versions …
- The future of data and AI: Seven trends shaping 2025 and beyond - Help Net Security
Seven trends will shape the future of data and AI in 2025, including the rise of small language models and agentic generative AI, a reality check for AI …
- Law enforcement agencies see AI as a key tool for reducing crime - Help Net Security
A U.S. national survey of first responders reveals strong support for AI adoption, particularly for its potential to reduce crime and enhance efficiency. …
- Netflix is suing Broadcom’s VMware over virtual machine patents | TechSpot
Netflix is suing Broadcom’s VMware for patent infringement related to virtual machine operations. Netflix alleges that VMware’s products, including vSphere and …
- A new Mirai botnet variant targets DigiEver DS-2105 Pro DVRs
Akamai researchers discovered a new Mirai botnet variant targeting DigiEver DS-2105 Pro DVRs and TP-Link devices. The variant, dubbed “Hail Cock Botnet,” …
- SEC Disclosures Up, But Not Enough Details Provided
The new SEC cybersecurity disclosure rules have led to a 60% increase in incident reports from public companies, but most reports lack detailed material impact …
- The Intersection of AI and OSINT: Advanced Threats On The Horizon - SecurityWeek
Open Source Intelligence (OSINT) has become a double-edged sword in cybersecurity, with both defenders and threat actors leveraging publicly available …
- Defense Giant General Dynamics Says Employees Targeted in Phishing Attack - SecurityWeek
General Dynamics experienced a phishing attack that compromised 37 employee benefits accounts, exposing personal information. The attackers accessed accounts …
- Cl0p Ransomware Group to Name Over 60 Victims of Cleo Attack - SecurityWeek
Cl0p ransomware group will soon name over 60 organizations hacked through Cleo vulnerabilities, offering proof of data theft and a ransom demand. The group, …
- Researchers Uncover Dark Web Operation Entirely Focused on KYC Bypass
iProov uncovered a dark web operation selling stolen identities with matching biometrics, posing a significant threat to KYC verification systems. The …
- Dark Web Profile: Trinity Ransomware - SOCRadar® Cyber Intelligence Inc.
Trinity ransomware, first discovered in May 2024, is a double extortion ransomware that encrypts files and exfiltrates sensitive data. It is believed to be a …
- DDoS Attacks Surge as Africa Expands Its Digital Footprint
Organizations in North African countries with high internet penetration rates are increasingly targeted by DDoS attacks, reflecting the growing cyber threats …
- 2024 Cloud Security Report Fortinet - Cybersecurity Insiders
The 2024 Cloud Security Report reveals a preference for hybrid and multi-cloud strategies, driven by flexibility and unique benefits. However, security and …
- How are you securing your communications in the wake of the Volt Typhoon revelations? | CSO Online
The recent revelations about Chinese-affiliated threat groups infiltrating US telecommunications infrastructure highlight the need for enhanced network …
- Cybersecurity Resolutions: Skill Sets to Prioritize in 2025
Cybersecurity professionals should prioritize skill development in 2025, including strengthening cloud security mastery, embedding security in the development …
- iOS devices more exposed to phishing than Android - Help Net Security
The mobile threat landscape is growing, with a 17% increase in enterprise-focused credential theft and phishing attempts. iOS devices are more exposed to …
- SEO Poisoning: How Scammers Turn Search Engines into Traps
SEO poisoning is a cyber threat where cybercriminals manipulate search engine rankings to spread malware and phishing scams. By exploiting high-demand keywords …
- Pittsburgh Regional Transit attributes recent service disruptions to ransomware attack - The Cyber Post
Pittsburgh Regional Transit (PRT) is experiencing service disruptions due to a ransomware attack detected on December 19th. While rail service is operating …
- Iran’s Christmas Cyber Attack on Israeli Tech Firm Sparks Alarm - Cybersecurity Insiders
Iran launched a cyber attack on Israeli software company ReutOne during Christmas 2024, causing a data wipe-out and disrupting business operations. The attack, …
- JAL’s system under cyberattack, domestic and international flights delayed
Japan Airlines (JAL) is experiencing a cyberattack, causing delays for at least 14 domestic flights and some international flights. The airline has halted …
- The 2024 cyberwar playbook: Tricks used by nation-state actors | CSO Online
Nation-state actors in 2024 relied on a mix of advanced tactics, including sophisticated backdoors and stealthy LOTL, to compromise critical systems for …
- Iran’s Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware
Charming Kitten, an Iranian hacking group, has been deploying a new C++ variant of BellaCiao malware, dubbed BellaCPP. BellaCPP, lacking the web shell …
- Top Phishing Tricks Attackers Use to Target Employees & The Recent ‘You’re Fired’ Campaign - SOCRadar® Cyber Intelligence Inc.
Phishing remains a prevalent cyber attack method, exploiting human emotions and psychological triggers to steal sensitive information or deliver malware. The …
- Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now
A critical SQL injection vulnerability in Apache Traffic Control allows attackers to execute arbitrary SQL commands. The vulnerability, rated 9.9 CVSS, has …
- Ruijie Networks' Cloud Platform Flaws Could Expose 50,000 Devices to Remote Attacks
Cybersecurity researchers discovered vulnerabilities in Ruijie Networks’ cloud management platform, potentially exposing 50,000 devices to remote attacks. …
- FAA halts all American Airlines flights in the US after airline reports technical issues systemwide
The Federal Aviation Administration grounded all American Airlines flights in the U.S. due to a technical issue affecting the airline’s entire system. The …
- Microsoft Teams Rooms introduces digital signage and AI features to revolutionize hybrid workspaces | TechRadar
Microsoft Teams Rooms introduces digital signage and AI features to enhance hybrid work collaboration. Signage mode allows displays to show company information …
- This VPN sells access to people’s home internet networks | Tom’s Guide
Big Mama VPN, a free VPN service, has been discovered to sell access to users’ home internet connections, enabling strangers to use their IP addresses. This …
- How Will Health Data Privacy, Cyber Regs Shape Up in 2025?
States are expected to continue enacting data privacy laws in 2025, particularly in response to potential reductions in federal regulations. This trend is …
- Online Extortion Gang Clop Threatens Cleo Hacking Victims
The Clop cybercriminal group, responsible for mass attacks on Cleo Communications’ managed file-transfer software, is threatening to expose data from 66 …
- Postman Workspaces Leak 30000 API Keys and Sensitive Tokens
CloudSEK researchers discovered over 30,000 publicly accessible Postman workspaces leaking sensitive information, including API keys and tokens. The leaks …
- Python Malware in Zebo-0.1.0 and Cometlogger-0.1 Found Stealing User Data
Fortinet FortiGuard Lab discovered two malicious Python packages, Zebo-0.1.0 and Cometlogger-0.1, on PyPI. These packages steal sensitive information, capture …
- Dark Web Profile: Just Evil - SOCRadar® Cyber Intelligence Inc.
Just Evil, a pro-Russian cyber threat group, emerged in January 2024 following internal changes within KillNet. Led by KillMilk, the group aims to maintain an …
- Dark Web Profile: CosmicBeetle (NoName) Ransomware - SOCRadar® Cyber Intelligence Inc.
CosmicBeetle, a ransomware group active since 2020, primarily targets small to medium-sized enterprises globally using customized ransomware tools. They employ …
- Dark Web Profile: APT31 - SOCRadar® Cyber Intelligence Inc.
APT31, a Chinese state-sponsored hacking group, has been active since 2010, engaging in cyber espionage and targeted attacks. The group uses sophisticated …
- Dark Web Profile: SpaceBears - SOCRadar® Cyber Intelligence Inc.
SpaceBears, a new data broker group, is extorting organizations by threatening to leak sensitive data if payment is not received. They operate a Data Leak Site …
- Dark Web Profile: Dark Angels - SOCRadar® Cyber Intelligence Inc.
Dark Angels, a sophisticated ransomware group, has gained notoriety for their aggressive tactics and record-breaking ransom demands. Operating since May 2022, …
- Dark Web Profile: LockBit 3.0 Ransomware - SOCRadar® Cyber Intelligence Inc.
LockBit 3.0, a Ransomware-as-a-Service (RaaS) group, is responsible for over one-third of all ransomware attacks in 2022 and 2023. The group, which operates …
- Dark Web Profile: ShinyHunters - SOCRadar® Cyber Intelligence Inc.
ShinyHunters, a cyber threat group, has gained notoriety for orchestrating data breaches and selling stolen information on the dark web. They employ various …
- Dark Web Profile: BlackCat (ALPHV) - SOCRadar® Cyber Intelligence Inc.
BlackCat, or ALPHV, is a ransomware group known for using Rust to evade detection and target multiple operating systems. They operate on a lucrative …
- Dark Web Profile: Hunters International - SOCRadar® Cyber Intelligence Inc.
Hunters International, a Ransomware-as-a-Service (RaaS) operation, emerged in late 2023, exhibiting significant technical overlap with the Hive ransomware …
- Dark Web Profile: INC Ransom - SOCRadar® Cyber Intelligence Inc.
INC Ransom is a sophisticated cybercriminal group known for its targeted ransomware attacks, primarily focusing on corporate and organizational networks. Their …
- Dark Web Profile: Ymir Ransomware - SOCRadar® Cyber Intelligence Inc.
Ymir ransomware, originating from RustyStealer infostealer malware, employs advanced in-memory execution and stealthy tactics to encrypt systems. Organizations …
- Dark Web Profile: UserSec - SOCRadar® Cyber Intelligence Inc.
UserSec, a pro-Russian hacktivist group, targets Western governments and organizations, particularly those supporting Ukraine, through cyberattacks. Operating …
- Dark Web Profile: KillSec - SOCRadar® Cyber Intelligence Inc.
KillSec, a threat actor active since October 2023, offers penetration testing, OSINT, and RaaS services. Their RaaS program, advertised on their website and …
- Dark Web Profile: RansomHub - SOCRadar® Cyber Intelligence Inc.
RansomHub, a new ransomware group, has emerged in February 2024, claiming responsibility for 18 attacks and leaking data from 14 victims. The group, which …
- Dark Web Profile: Evil Corp - SOCRadar® Cyber Intelligence Inc.
Evil Corp, a pro-Russian hacktivist group, has been involved in large-scale financial cyberattacks since 2007, using malware like Dridex and WastedLocker. The …
- Dark Web Profile: Bashe (APT73) - SOCRadar® Cyber Intelligence Inc.
Bashe, a ransomware group active since 2024, targets critical industries in developed nations using tactics similar to LockBit. Operating through a TOR-based …
- American Addiction Centers Data Breach Impacts 422,000 People - SecurityWeek
American Addiction Centers experienced a data breach impacting over 422,000 individuals, with stolen information including names, addresses, and Social …
- When the world logs off: Christmas, New Year’s, and the Internet’s holiday rhythm
Internet traffic drops significantly during Christmas and New Year’s Eve, reflecting offline traditions and celebrations. While Christmas dominates in many …
- North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin
North Korean hackers, attributed to the TraderTraitor threat activity cluster, stole $308 million worth of Bitcoin from DMM Bitcoin in May 2024. The hackers …
- Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks
Apache Tomcat servers are vulnerable to remote code execution (RCE) attacks due to incomplete mitigation of CVE-2024-50379. This vulnerability, CVE-2024-56337, …
- 2025 is going to be a bumpy year for IoT - Help Net Security
2025 promises to be a tumultuous year for the Internet of Things (IoT) industry, marked by geopolitical tensions, impending regulations, and potential trade …
- Non-Human Identities Gain Momentum, Requires Both Management, Security
The rapid growth of machine-to-machine communication, driven by IoT and digital transformation, necessitates effective management of Non-Human Identities …
- Why Hackers Love Weekend and Holiday Attacks - GovInfoSecurity
Healthcare organizations are frequently targeted by hackers during weekends and holidays, when staffing is often reduced. To mitigate this risk, organizations …
- Turmoil Besets Phishing-as-a-Service Toolkit Rockstar 2FA
The phishing-as-a-service toolkit Rockstar 2FA, known for its prolific attacks, has experienced significant infrastructure problems, leading to its apparent …
- A Vulnerability in Apache Struts2 Could Allow for Remote Code Execution
OVERVIEW: A vulnerability has been discovered in Apache Struts2, which could allow for remote code execution. Apache Struts2 is an open-source web …
- RIBridges data breach: What RI residents should do to protect selves
A data breach in Rhode Island’s public benefits computer system, RIBridges, has compromised personal information of thousands of residents. The state advises …
- Brightline data breach class action settlement
Brightline Inc. agreed to a class action settlement for a 2023 data breach that compromised consumer data. Class members can receive payments, reimbursement …
- McDonalds delivery customers put at risk by possible data breach | TechRadar
A cybersecurity researcher discovered a flaw in McDonald’s India’s delivery system, exposing customer and driver data and allowing fraudulent orders. The bug, …
- Duke Energy Hit by Major Data Breach, 370,000 Customers' Sensitive Data Exposed in Security Incident | DUK Stock News
Duke Energy Corporation recently disclosed a data breach affecting approximately 370,000 individuals, compromising sensitive customer information. Law firm …
- Alta Resources Corporation Provides Notice of Data Breach Affecting Over 37k People | Console and Associates, P.C. - JDSupra
Alta Resources Corporation experienced a data breach in November 2023, exposing sensitive consumer information including names, addresses, and Social Security …
- November 2024 Healthcare Data Breach Report
November 2024 saw a 15.3% increase in healthcare data breaches, with 68 incidents reported to the OCR. While the number of breaches rose, the total number of …
- Records of Nearly 1,000,000 Americans Exposed As Massive Data Breach Reveals Names, Phone Numbers, Medical Conditions, Social Security Numbers and More - The Daily Hodl
A security breach on ConnectOnCall, a doctor-patient communications platform, exposed sensitive information of nearly a million Americans. The breach included …
- US Cracks Down On China For Cyber Attacks
The US imposed sanctions on a Chinese cybersecurity firm and one of its researchers for alleged involvement in a 2020 ransomware attack. This move highlights …
- McAfee Predicts 2025 Cyber Threats as AI Drives Advanced Scams
McAfee’s 2025 predictions highlight the increasing use of AI by cybercriminals to create sophisticated scams, including deepfakes, phishing, and malware …
- Malaysian eatery operator arrested for selling SIM cards to Chinese cyber fraudsters - The Tribune
A Malaysian eatery operator was arrested in India for selling SIM cards to Chinese cyber fraudsters. He was apprehended along with four associates involved in …
- Advent of Cyber 2024 DAY 22 — Tryhackme walkthrough | by TRedEye | Dec, 2024 | Medium
Kubernetes DFIR walkthrough for Advent of Cyber 2024 Day 22. Answers to questions about Mayor Malware’s activities are provided.
- Navigating the Cyber Threat Landscape: Lessons Learned & What’s Ahead
The cybersecurity landscape in 2024 was marked by record-breaking breaches, evolving regulatory requirements, and emerging threats. Organizations faced …
- Organizations Need To Get Real About Threat Of Cyber Attacks
Cyber attacks pose a significant risk to organizations, with the NCSC emphasizing the need for improved defenses and resilience. While technology is crucial, a …
- North Korean Hackers Tied to $1.3B in Stolen Crypto in 2024
North Korean hackers have stolen a record amount of cryptocurrency in 2024, totaling $1.34 billion across 47 incidents. This surge in activity, which accounts …
- Beware Of Shadow AI – Shadow IT’s Less Well-Known Brother - SecurityWeek
Shadow AI, the unauthorized use of AI tools by employees, poses significant risks to organizations, including data leakage, compliance issues, and cyberattack …
- Middle East Cyberwar Rages On, With No End in Sight
Cyberattacks between Israel and Hamas, fueled by the ongoing conflict, have persisted since October 2023, involving various threat groups and targeting …
- Global elections in 2024: Internet traffic and cyber threat trends
The 2024 elections saw a rise in DDoS attacks targeting political campaigns and election infrastructure, with notable incidents in the United States, France, …
- Government to Name ‘Key Witness’ Who Provided FBI With Backdoored Encrypted Chat App Anom
The government will reveal the identity of the confidential human source (CHS) who provided the FBI with the backdoored encrypted chat app Anom. The CHS, known …
- AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case
Cybersecurity researchers have demonstrated that large language models (LLMs) can be used to generate new variants of malicious JavaScript code, making it …
- Vulnerability Summary for the Week of December 16, 2024 | CISA
The CISA Vulnerability Bulletin summarizes new vulnerabilities recorded weekly, categorized by severity based on CVSS scores. The bulletin includes identifying …
- 5.6 Million Impacted by Ransomware Attack on Healthcare Giant Ascension - SecurityWeek
Ascension Health, a major US healthcare provider, suffered a ransomware attack in May 2024, impacting 5.6 million individuals. The attack compromised personal, …
- Supply Chain Attack Hits Rspack, Vant npm Packages with Monero Miner
Popular npm packages Rspack and Vant were compromised with malicious code that deployed a Monero miner. Sonatype’s malware detection systems quickly identified …
- Cloud Atlas using a new backdoor, VBCloud, to steal data | Securelist
Cloud Atlas, a cyber threat group active since 2014, has been observed using a new toolset in its attacks. The toolset, which includes VBShower and PowerShower …
- 4 Security Controls Keeping Up with the Evolution of IT Environments |
Modern IT environments, increasingly complex due to cloud adoption and DevOps practices, require security controls that can adapt to rapid changes. Security …
- Phishing Report Findings Call For A Fundamental Shift In Organizational Approaches To Defense
SlashNext’s 2024 Phishing Intelligence Report reveals a significant increase in phishing attacks, particularly credential phishing and zero-day threats. The …
- Top 7 zero-day exploitation trends of 2024 | CSO Online
Zero-day vulnerabilities in network security devices, remote monitoring and management tools, and managed file transfer software saw a significant increase in …
- Lazarus APT targeted employees at an unnamed nuclear-related organization
The North Korea-linked Lazarus Group targeted employees of a nuclear-related organization in January 2024 as part of their cyber espionage campaign, Operation …
- Top 5 Ransomware Attacks and Data Breaches of 2024 - Cybersecurity Insiders
The year 2024 saw a surge in devastating ransomware attacks and data breaches, impacting various sectors including healthcare, finance, and public …
- Maximizing the impact of cybercrime intelligence on business resilience - Help Net Security
Integrating cybercrime intelligence into an organization’s security strategy enables proactive threat management by providing insights into adversary …
- How companies can fight ransomware impersonations - Help Net Security
Companies must protect data from ransomware impersonations through cybersecurity training and strategic defense measures. Rodman Ramezanian discusses these …
- MacPorts: Remote Code Execution · Advisory · google/security-research · GitHub
A vulnerability in MacPorts allows arbitrary commands to be executed on a client machine when updating ports from a malicious or compromised mirror. The issue …
- Beware Feb. 3, 2025—Diabolic Ransomware Gang Issues New Attack Warning
The LockBit ransomware group, previously disrupted by law enforcement, plans to launch a new version, LockBit 4, on February 3, 2025. The group operates on a …
- 10 ways I use AI to simplify my daily life
Artificial Intelligence (AI) is increasingly integrated into daily life, simplifying tasks and making complex processes more accessible. AI-powered tools, such …
- Leading AI chatbots show dementia-like cognitive decline in tests, raising questions about their future in medicine
Leading AI chatbots, tested using the Montreal Cognitive Assessment (MoCA) test, show signs of mild cognitive impairment, particularly in visuospatial skills …
- 12 days of OpenAI: The Ars Technica recap - Ars Technica
OpenAI concluded its “12 days of OpenAI” event, announcing new features and product releases. Key highlights include the full release of the o1 model, ChatGPT …
- Week in review: MUT-1244 targets both security workers and threat actors, Kali Linux 2024.4 released - Help Net Security
MUT-1244, a threat actor, targets security researchers, red teamers, and threat actors to steal sensitive data. Kali Linux 2024.4 was released with new tools, …
- The UK’s Cybersecurity Landscape: Key Trends and Challenges for 2025 - Cybersecurity Insiders
The UK’s cybersecurity landscape in 2025 will be shaped by nation-state threats, supply chain attacks, and complex regulatory compliance. Organizations must …
- BadBox rapidly grows, 190,000 Android devices infected - Security Affairs
Bitsight researchers discovered a botnet of over 190,000 Android devices infected with the BADBOX bot, primarily Yandex smart TVs and Hisense smartphones. The …
- Albania to close TikTok for a year | AP News
Albania will ban TikTok for a year due to concerns about the platform promoting violence and bullying, particularly among children. The decision comes after a …
- Google CEO Sundar Pichai says company slashed manager roles by 10%
Google CEO Sundar Pichai has announced a 10% reduction in managerial positions since 2023 as part of the company’s broader efficiency initiatives. The …
- Largest data breach of health information affects estimated third of U.S. population
Change Healthcare (CHC) has confirmed a major cybersecurity incident that occurred on February 21, 2024, potentially affecting millions of Americans' …
- Ascension: Health data of 5.6 million stolen in ransomware attack
Ascension, a major U.S. healthcare provider with $28.3B in annual revenue, recently disclosed a significant cybersecurity incident from May 2023 affecting 5.6M …
- Ledger Users Targeted in New Data Breach Phishing Campaign – Security Bitcoin News
A new phishing campaign targets Ledger hardware wallet users, claiming a data breach exposed seed phrases. The campaign, leveraging a 2020 data leak, directs …
- The Breachies 2024: The Worst, Weirdest, Most Impactful Data Breaches of the Year | Electronic Frontier Foundation
The Breachies, a series of awards highlighting notable data breaches, highlight the impact of companies’ data collection practices. Breaches at companies like …
- Chinese national cyber centre says U.S. hacks stole trade secrets from tech firms | Reuters
China’s national cyber center, CNCERT/CC, reported two U.S. cyber attacks on Chinese tech firms since May 2023, alleging the theft of trade secrets. The …
- Hackney Council: Cyber-attack cost ‘hundreds of thousands’
Hackney Council is spending hundreds of thousands of pounds to recover from a 2020 cyber attack, including hiring agency staff and IT consultants. The attack, …
- OpenAI announces new o3 models | TechCrunch
OpenAI unveiled o3, a new family of reasoning models, claiming it approaches AGI in certain conditions. o3, trained via reinforcement learning, exhibits …
- The Feds Have Some Advice for ‘Highly Targeted’ Individuals: Don’t Use a VPN | PCMag
CISA advises highly targeted individuals to prioritize end-to-end encrypted messaging, hardware security keys, and prompt software updates. While endorsing …
- Metasploit Weekly Wrap-Up 12/20/2024 | Rapid7 Blog
This week’s Metasploit update includes four new exploit modules, targeting vulnerabilities in GameOver(lay), Clinic’s Patient Management System, WordPress WP …
- Sophos security advisory (AV24-725) - Canadian Centre for Cyber Security
Sophos published a security advisory for critical vulnerabilities in Sophos Firewall versions v21.0 GA and prior. Users and administrators are encouraged to …
- LockBit Ransomware Developer Arrested in Israel
Rostislav Panev, a dual Russian-Israeli national, was arrested in Israel for his role in developing and distributing the LockBit ransomware. Panev, who …
- Ukraine’s state registers hit with one of Russia’s largest cyberattacks, officials say - The Cyber Post
Suspected Russian hackers launched a significant cyberattack on Ukraine’s state registers, disrupting access to critical information and prompting an …
- Builder.ai Database Misconfiguration Exposes 1.29 TB of Unsecured Records
A publicly accessible Builder.ai database containing over 3 million records was discovered without password protection or encryption. The exposed data included …
- How Generative AI Is Powering A New Era Of Cybersecurity
Google is set to allow advertisers to track users across devices using digital fingerprinting, a practice it previously criticized. This change, set to take …
- Critical Flaws Expose 25,000 SonicWall Devices to Hackers
Over 25,000 SonicWall SSLVPN devices are exposed to the internet with critical security flaws, including outdated firmware and unpatched vulnerabilities. …
- US eyes ban on TP-Link routers amid cybersecurity concerns | CSO Online
The US government is investigating TP-Link, a Chinese router manufacturer, for potential cybersecurity risks. Concerns stem from reports of vulnerabilities …
- The Year of Takedowns: Significant Law Enforcement Operations of 2024 - SOCRadar® Cyber Intelligence Inc.
Law enforcement agencies worldwide successfully dismantled numerous cybercrime operations in 2024, including Grandoreiro banking malware, LockBit ransomware, …
- Exploring vulnerable Windows drivers
Threat actors exploit vulnerable Windows drivers through the Bring Your Own Vulnerable Driver (BYOVD) technique, using them for privilege escalation, loading …
- Silent Heists: The Danger of Insider Threats | Tripwire
Insider threats, both careless and malicious, pose a significant risk to cybersecurity, with negligent insiders being the leading cause of incidents. …
- Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits
Fortinet has issued an advisory for a critical security flaw in FortiWLM, CVE-2023-34990, which could lead to unauthorized access and code execution. The …
- Lazarus targets nuclear-related organization with new malware | Securelist
Lazarus group targets nuclear-related organization with new and old malware, including MISTPEN, LPEClient, RollMid, CookieTime, and a new modular backdoor, …
- Are threat feeds masking your biggest security blind spot? - Help Net Security
Threat feeds, while valuable, are limited in protecting against dynamic client-side attacks. The guyacave[.]fr attack, active since August 2022, highlights the …
- Banking, Utilities API Attacks Surge in India
Cyberattacks targeting India-based organizations, particularly in banking and utilities, have surged in 2024, with a 92% increase compared to the previous …
- In potential reversal, European authorities say AI can indeed use personal data — without consent — for training | CSO Online
The European Data Protection Board (EDPB) released a report acknowledging the use of personal data, without consent, for AI training, provided the final …
- APT29 group used red team tools in rogue RDP attacks
Russia-linked APT29 group used rogue RDP attacks via phishing emails to compromise systems and steal data. The group employed red team tools, including …
- Apache security advisory (AV24-722) - Canadian Centre for Cyber Security
Apache published a security advisory for critical vulnerabilities in Tomcat versions 9.0.0.M1 to 11.0.1. Users are encouraged to review and apply the necessary …
- Threat actors are attempting to exploit Apache Struts vulnerability CVE-2024-53677
Threat actors are exploiting a recently disclosed Apache Struts vulnerability, CVE-2024-53677, which allows remote code execution. The vulnerability, related …
- Regional Care Data Breach Impacts 225,000 People - SecurityWeek
Nebraska-based healthcare insurance firm Regional Care disclosed a data breach impacting over 225,000 individuals. The breach, discovered in September 2024, …
- European companies hit with effective DocuSign-themed phishing emails - Help Net Security
A threat actor targeted European companies with DocuSign-themed phishing emails, compromising Microsoft Azure cloud infrastructure. The campaign, which peaked …
- APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP
The Russia-linked APT29 threat actor, Earth Koshchei, is using a “rogue RDP” technique to target high-profile victims, including governments and armed forces. …
- Dark Web Market: BidenCash - SOCRadar® Cyber Intelligence Inc.
BidenCash, a dark web marketplace, has significantly impacted global cybersecurity by enabling cybercriminals to trade stolen data, including credit card …
- BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products
BeyondTrust disclosed a critical vulnerability in PRA and RS products, allowing unauthenticated attackers to execute arbitrary commands. The vulnerability, …
- The Mask APT is back after 10 years of silence
Kaspersky researchers linked a new wave of cyber attacks to the cyber espionage group known as The Mask, which has been active since at least 2007. The group, …
- Effective Phishing Campaign Targeting European Companies and Institutions
A phishing campaign targeting European companies, particularly in the automotive, chemical, and industrial sectors, was identified in June 2024. The campaign, …
- Data Sovereignty In A Cloud-Driven World Is Not A Given
Data sovereignty in a cloud-driven world is challenging due to data crossing borders and being subject to different laws. Organizations must prioritize cyber …
- Nearly 400,000 WordPress credentials stolen | Security Magazine
MUT-1244 stole over 390,000 WordPress credentials after a year-long campaign targeting pentesters, security researchers, and malicious actors. This attack …
- Lesson from latest SEC fine for not completely disclosing data breach details: ‘Be truthful’ | CSO Online
The SEC fined Flagstar Financial $3.55 million for misleading disclosures about a 2021 data breach, emphasizing the importance of truthful incident reporting. …
- Thai Police Systems Under Fire From ‘Yokai’ Backdoor
Hackers are targeting Thai law enforcement with a new malware, “Yokai,” disguised as official US government documents. The attack chain uses legitimate Windows …
- Texas Tech Fumbles Medical Data in Massive Breach
Texas Tech University’s Health Sciences Centers experienced a cyberattack, exposing the data of 1.4 million patients. The attackers accessed sensitive …
- Hackers Leak Partial Cisco Data from 4.5TB of Exposed Records
Hackers leaked 2.9GB of Cisco data on Breach Forums, claiming it is part of a larger 4.5TB dataset exposed in October 2024. The data includes sensitive …
- CISA Directs Federal Agencies to Secure Cloud Environments
CISA issued a directive requiring federal agencies to secure cloud environments by implementing specific security configurations. This action aims to reduce …
- Namibia’s state telecom provider says hackers leaked data after it refused to pay ransom - The Cyber Post
Namibia’s state-owned telecom provider, Telecom Namibia, confirmed a data breach by hackers known as Hunters International. The company refused to pay a …
- 5 million payment card details stolen in painful reminder to monitor Christmas spending | Malwarebytes
Five million US credit card details were leaked online from a freely accessible Amazon S3 bucket. The data, likely obtained through phishing operations, …
- Azure Data Factory Bugs Expose Cloud Infrastructure
Three vulnerabilities in Azure Data Factory’s Apache Airflow integration could have allowed attackers to gain shadow administrative control over enterprise …
- FBI warns of HiatusRAT scanning campaigns against Chinese-branded web cameras and DVRs
The FBI warns of HiatusRAT malware campaigns targeting Chinese-branded web cameras and DVRs, particularly in the US, Australia, Canada, New Zealand, and the …
- Foxit security advisory (AV24-720) - Canadian Centre for Cyber Security
Foxit published security advisories for multiple versions of Foxit PDF Editor and Reader on December 17, 2024. Users and administrators are encouraged to …
- Canada’s Top Cybersecurity Threats: How Attackers Target Critical Industries - SOCRadar® Cyber Intelligence Inc.
Canada’s rapid digital growth makes it a prime target for cyber threats, particularly in finance, retail, and healthcare. Ransomware groups like LockBit, Play, …
- DHS Says China, Russia, Iran, and Israel Are Spying on People in US with SS7
The Department of Homeland Security (DHS) believes China, Russia, Iran, and Israel are exploiting security holes in telecommunications networks to spy on …
- Hackers Use Fake PoCs on GitHub to Steal WordPress Credentials, AWS Keys
A year-long cyber campaign, MUT-1244, targeted cybersecurity professionals, stealing over 390,000 WordPress credentials and other sensitive data. The campaign …
- Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks
A new phishing campaign, FLUX#CONSOLE, uses tax-themed lures to deliver a backdoor payload targeting Pakistan. The campaign leverages Microsoft Common Console …
- Uncovering GStreamer secrets - The GitHub Blog
Antonio Morales discovered 29 vulnerabilities in GStreamer, a multimedia framework, by fuzzing MP4 files. He found that traditional fuzzing methods were slow …
- Texas Tech University Data Breach Impacts 1.4 Million People - SecurityWeek
Texas Tech University experienced a ransomware attack that compromised the personal information of 1.4 million individuals. The attackers accessed the …
- Bitter APT Targets Turkish Defense Sector with WmRAT and MiyaRAT Malware
The Bitter APT group, active since 2013 and linked to South Asian governments, targeted a Turkish defense sector organization in November 2024. The attack used …
- Unveiling India’s Cyber Threat Landscape: Data, Trends, and Resilience - SOCRadar® Cyber Intelligence Inc.
India’s rapid digital growth makes it a prime target for cyber threats, particularly in the educational, public administration, and information sectors. …
- The Mask APT Resurfaces with Sophisticated Multi-Platform Malware Arsenal
The Mask APT, a sophisticated cyber espionage actor active since 2007, has resurfaced with a new set of attacks targeting a Latin American organization. The …
- The Domino Effect of Cyber Incidents: Understanding the Ripple Impact of Cybersecurity Breaches - Cybersecurity Insiders
The domino effect of cyber incidents, where a single breach can lead to cascading consequences, highlights the interconnectedness of our digital ecosystem. …
- CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT Campaign
CISA and the FBI have issued alerts about active cyber threats. The FBI warns of HiatusRAT campaigns targeting web cameras and DVRs, while CISA added two …
- 27 DDoS-for-hire operations shut down by law enforcement | Security Magazine
Law enforcement agencies across 15 countries have shut down 27 DDoS-for-hire services and apprehended three administrators. While these actions disrupt …
- European Union Sanctions Russian Malicious Cyber Actors
The European Union sanctioned Russian intelligence hackers and Kremlin officials responsible for digital disinformation campaigns. The sanctions target …
- Winnti-Like Glutton Backdoor Targets Cybercriminals
A new PHP-based backdoor, “Glutton,” is targeting cybercriminals, particularly in China, exploiting the cybercrime ecosystem for profit. Glutton, linked to the …
- Dirty DAG: New Vulnerabilities in Azure Data Factory’s Apache Airflow Integration
Unit 42 researchers discovered vulnerabilities in Azure Data Factory’s Apache Airflow integration, allowing attackers to gain unauthorized write permissions …
- Cicada3301 Ransomware Claims Attack on French Peugeot Dealership
Cicada3301, a ransomware group operating under a Ransomware-as-a-Service model, has claimed responsibility for a data breach targeting Concession Peugeot, a …
- Fourteen North Korean Nationals Indicted for Carrying Out Multi-Year Fraudulent Information Technology Worker Scheme and Related Extortions | Flashpoint
Fourteen North Korean nationals were indicted for a six-year scheme involving fraudulent IT work and extortion. The conspirators, working for DPRK-controlled …
- Black Hat Europe 2024: Key takeaways for cybersecurity pros | CSO Online
Black Hat Europe 2024 highlighted vulnerabilities in Windows, DNS, and SAP systems, while also exploring the potential of AI in cybersecurity. Presentations …
- CVE-2024-53677 - Vulnerability impacting Apache Struts 2 - Canadian Centre for Cyber Security
A critical vulnerability, CVE-2024-53677, impacts Apache Struts 2, allowing malicious actors to execute remote code and upload files. Organizations are advised …
- Ubuntu security advisory (AV24-718) - Canadian Centre for Cyber Security
Ubuntu published security notices addressing vulnerabilities in the Linux kernel affecting multiple Ubuntu products. Users and administrators are encouraged to …
- EU issues first-ever sanctions over ‘Russian hybrid threats’ - The Cyber Post
The European Council has imposed sanctions on 19 individuals and entities linked to Russian hybrid threats, including cyberattacks, propaganda, and …
- IBM security advisory (AV24-717) - Canadian Centre for Cyber Security
IBM published security advisories addressing vulnerabilities in multiple products, including critical updates for App Connect Enterprise, Cloud Pak for AIOps, …
- Android Zero-Day Exploited in Spyware Campaigns, Amnesty International Points to Cellebrite - SecurityWeek
Amnesty International uncovered a spyware campaign targeting journalists in Serbia using a zero-day Android exploit. The campaign, linked to Cellebrite, …
- Vulnerability Summary for the Week of December 9, 2024 | CISA
The CISA Vulnerability Bulletin summarizes new vulnerabilities recorded weekly, categorized by severity based on CVSS scores. The bulletin includes information …
- Microsoft Teams Vishing Spreads DarkGate RAT
A new attack vector for the DarkGate remote access Trojan (RAT) involves vishing, where attackers use voice calls to trick victims into downloading malicious …
- A defender’s guide to identity attacks | Red Canary
Identity attacks target authentication and authorization systems, exploiting vulnerabilities and stolen credentials to gain unauthorized access. Defenses …
- Citrix Warns of Password Spraying Attacks Targeting NetScaler Appliances - SecurityWeek
Citrix warns of password spraying attacks targeting NetScaler and NetScaler Gateway appliances, potentially leading to denial-of-service conditions. The …
- Dell security advisory (AV24-715) - Canadian Centre for Cyber Security
Dell published security advisories for multiple products, including critical updates for APEX Cloud Platform, Data Lakehouse Bundle, InsightIQ, PowerFlex …
- DeceptionAds Delivers 1M+ Daily Impressions via 3,000 Sites, Fake CAPTCHA Pages
A malvertising campaign, DeceptionAds, utilizes a single ad network, Monetag, to deliver over 1 million daily impressions. The campaign, which involves fake …
- HPE security advisory (AV24-714) - Canadian Centre for Cyber Security
HPE published security advisories for multiple products, including HPE Service Director and HPE SimpliVity, addressing vulnerabilities in versions prior to …
- 2024 Threat Landscape Statistics: Ransomware Activity, Vulnerability Exploits, and Attack Trends | Rapid7 Blog
The 2024 threat landscape saw a rise in ransomware activity, with 33 new or rebranded groups emerging and posting stolen data on leak sites. Incident …
- Major Auto Parts Firm LKQ Hit by Cyberattack - SecurityWeek
LKQ Corporation, a major US auto parts provider, experienced a cyberattack at a Canadian business unit in November. The attack caused disruptions for a few …
- SRP Federal Credit Union Ransomware Attack Impacts 240,000 - SecurityWeek
SRP Federal Credit Union experienced a cyberattack from September to November 2024, potentially exposing personal information of 240,000 individuals. The …
- Rydox cybercrime marketplace seixed by law enforcement, suspected admins arrested
Rydox, a cybercrime marketplace selling stolen personal information and tools, has been seized by law enforcement. Three Kosovan nationals suspected of being …
- CVE Assigned to Cleo Vulnerability as Cl0p Ransomware Group Takes Credit for Exploitation - SecurityWeek
The Cl0p ransomware group has claimed responsibility for exploiting vulnerabilities in Cleo file transfer products, specifically CVE-2024-55956, which allows …
- Evasive Node.js loader masquerading as game hack - Help Net Security
Malware peddlers are using NodeLoader, a loader written in Node.js, to deliver infostealers and cryptominers to gamers. The loader, disguised as a game hack, …
- 900,000 People Impacted by ConnectOnCall Data Breach - SecurityWeek
ConnectOnCall, a digital on-call answering solution for healthcare providers, experienced a data breach impacting over 900,000 individuals. The breach, which …
- Security ProbLLMs in xAI’s Grok: A Deep Dive · Embrace The Red
Grok, xAI’s chatbot, is vulnerable to several security threats, including prompt injection, data exfiltration, and ASCII smuggling. These vulnerabilities allow …
- Amazon refuses Microsoft 365 deployment because of lax cybersecurity | CSO Online
Amazon has halted its Microsoft 365 deployment due to security concerns, specifically inadequate logging and user activity tracking. While some view this as a …
- Rhode Island suffers major cyberattack, exposing personal data of thousands | CSO Online
Rhode Island suffered a significant cyberattack, exposing the personal data of hundreds of thousands of residents enrolled in state-run social services …
- CISA Requests Public Comment for Draft National Cyber Incident Response Plan Update | CISA
CISA released the National Cyber Incident Response Plan Update Public Comment Draft, seeking public input on the national approach to coordinating cyber …
- New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide
A new investment scam, Nomani, uses AI-generated video testimonials and social media malvertising to target victims worldwide. The scam, which grew by over …
- Cybersecurity In 2025 – A New Era Of Complexity
The cybersecurity landscape in 2025 will be shaped by emerging technologies, sophisticated threats, and tightening regulations. Organizations will need to …
- Dark market overview and predictions for 2025 | Securelist
In 2024, predictions about the growth of malware services, crypto asset draining, and black traffic schemes were largely fulfilled. Looking ahead to 2025, it …
- Security experts respond to Krispy Kreme cyber attack | Security Magazine
Krispy Kreme experienced a cyber attack that disrupted online ordering and is still causing operational issues. Security experts emphasize the importance of …
- The Top 10 State of Security Blog Posts From 2024 | Tripwire
This year’s top cybersecurity blog posts cover a range of topics, from AI-generated cyberattacks to practical security measures like USB monitoring. Key …
- New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP
Cybersecurity researchers have discovered a new PHP-based backdoor called Glutton, attributed to the Winnti (APT41) group. Glutton targets popular PHP …
- Multiple flaws in Volkswagen Group’s infotainment unit allow for vehicle compromise
Researchers discovered multiple vulnerabilities in Volkswagen Group vehicles’ infotainment systems, specifically the MIB3 units. These flaws allow remote …
- LW ROUNDTABLE: Lessons learned from the headline-grabbing cybersecurity incidents of 2024 - The Last Watchdog
The cybersecurity community faces escalating challenges in 2024, with a focus on software supply chain attacks, third-party risk management, and identity-based …
- Ukrainian Minors Recruited for Cyber Ops and Reconnaissance in Russian Airstrikes
The Security Service of Ukraine (SBU) uncovered a Russian espionage operation recruiting Ukrainian minors for reconnaissance and cyber operations. The minors …
- Cellebrite Unlocked This Journalist’s Phone. Cops Then Infected it With Malware
Authorities in Serbia used Cellebrite tools to unlock phones, including those of activists and a journalist, and then infected them with malware. This …
- Security leaders top 10 takeaways for 2024 | CSO Online
CISOs reflect on the security landscape in 2024, highlighting the challenges of AI adoption, the importance of transparency, and the increasing sophistication …
- ESET: RansomHub most active ransomware group in H2 2024 | TechTarget
ESET’s Threat Report H2 2024 reveals RansomHub as the most active ransomware group, filling the void left by the disrupted LockBit gang. The report highlights …
- Malicious ad distributes SocGholish malware to Kaiser Permanente employees | Malwarebytes
A malicious Google ad targeting Kaiser Permanente employees redirected to a compromised website, derailing the attackers’ phishing plan. The website, …
- Securing Against Shopping Scams: Cybersecurity Risks to Avoid During the Holidays - Cybersecurity Insiders
Cybercriminals exploit the holiday shopping season’s increased online activity, using tactics like phishing, malvertising, and fake websites to steal personal …
- PUMAKIT, a sophisticated rootkit that uses advanced stealth mechanisms
PUMAKIT, a sophisticated rootkit that uses advanced stealth mechanisms Elastic Security Lab researchers discovered PUMAKIT, a sophisticated Linux rootkit …