May 2023

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government 25/05/2023 at 17:30 By An unnamed government entity associated with the United Arab Emirates (U.A.E.) was targeted by a likely Iranian threat actor to breach the victim’s Microsoft Exchange Server with a “simple yet effective” backdoor dubbed PowerExchange. According to a new report from Fortinet […]

React to this headline:

Loading spinner

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government Read More »

Corvus Signal provides continuous threat analysis, tailored alerts and always-on recommendations

Corvus Signal provides continuous threat analysis, tailored alerts and always-on recommendations 25/05/2023 at 17:17 By Industry News Corvus Insurance has unveiled Corvus Signal, the risk prevention solution that brings together brokers, policyholders, and Corvus security experts in partnership. Corvus Signal has been shown to reduce cyber breach frequency and cost by up to 20 percent.

React to this headline:

Loading spinner

Corvus Signal provides continuous threat analysis, tailored alerts and always-on recommendations Read More »

IT-ISAC launches food and agriculture analysis center

IT-ISAC launches food and agriculture analysis center 25/05/2023 at 17:17 By The food and agriculture special interest group of the Information Technology-Information Sharing and Analysis Center is now its own analysis center. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

IT-ISAC launches food and agriculture analysis center Read More »

Trustwave DbProtect and MailMarshal Named Finalists for SC Media and SC Europe Awards

Trustwave DbProtect and MailMarshal Named Finalists for SC Media and SC Europe Awards 25/05/2023 at 16:18 By SC Media and SC Media Europe have named two of Trustwave’s premiere products, DbProtect and MailMarshal, as a finalist in several award categories the cybersecurity media outlet plans to announce this summer. This article is an excerpt from

React to this headline:

Loading spinner

Trustwave DbProtect and MailMarshal Named Finalists for SC Media and SC Europe Awards Read More »

Apria Healthcare Notifying 2 Million People of Years-Old Data Breaches

Apria Healthcare Notifying 2 Million People of Years-Old Data Breaches 25/05/2023 at 16:03 By Ionut Arghire Apria Healthcare is informing 1.86 million individuals of personal information compromise in 2019 and 2021 data breaches. The post Apria Healthcare Notifying 2 Million People of Years-Old Data Breaches appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Loading spinner

Apria Healthcare Notifying 2 Million People of Years-Old Data Breaches Read More »

European Cybersecurity Firm Sekoia.io Raises $37.5 Million

European Cybersecurity Firm Sekoia.io Raises $37.5 Million 25/05/2023 at 16:03 By Ionut Arghire European XDR and threat intelligence provider Sekoia.io has raised €35 million ($37.5 million) in Series A funding. The post European Cybersecurity Firm Sekoia.io Raises $37.5 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Loading spinner

European Cybersecurity Firm Sekoia.io Raises $37.5 Million Read More »

Today’s Cyber Defense Challenges: Complexity and a False Sense of Security

Today’s Cyber Defense Challenges: Complexity and a False Sense of Security 25/05/2023 at 16:03 By Torsten George Industry standard frameworks and guidelines often lead organizations to believe that deploying more security solutions will result in greater protection against threats. The post Today’s Cyber Defense Challenges: Complexity and a False Sense of Security appeared first on

React to this headline:

Loading spinner

Today’s Cyber Defense Challenges: Complexity and a False Sense of Security Read More »

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks 25/05/2023 at 14:48 By A Brazilian threat actor is targeting Portuguese financial institutions with information-stealing malware as part of a long-running campaign that commenced in 2021. “The attackers can steal credentials and exfiltrate users’ data and personal information, which can be leveraged for malicious activities

React to this headline:

Loading spinner

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks Read More »

Webinar with Guest Forrester: Browser Security New Approaches

Webinar with Guest Forrester: Browser Security New Approaches 25/05/2023 at 14:48 By In today’s digital landscape, browser security has become an increasingly pressing issue, making it essential for organizations to be aware of the latest threats to browser security. That’s why the Browser Security platform LayerX is hosting a webinar featuring guest speaker Paddy Harrington, a senior

React to this headline:

Loading spinner

Webinar with Guest Forrester: Browser Security New Approaches Read More »

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code 25/05/2023 at 14:48 By The threat actors behind the nascent Buhti ransomware have eschewed their custom payload in favor of leaked LockBit and Babuk ransomware families to strike Windows and Linux systems. “While the group doesn’t develop its own ransomware, it does utilize what appears to

React to this headline:

Loading spinner

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code Read More »

Five Eyes agencies detail how Chinese hackers breached US infrastructure

Five Eyes agencies detail how Chinese hackers breached US infrastructure 25/05/2023 at 14:16 By Help Net Security The National Security Agency (NSA) and Five Eyes partner agencies have identified indicators of compromise associated with a People’s Republic of China (PRC) state-sponsored cyber actor dubbed Volt Typhoon, which is using living off the land techniques to

React to this headline:

Loading spinner

Five Eyes agencies detail how Chinese hackers breached US infrastructure Read More »

Phishing campaign targets ChatGPT users

Phishing campaign targets ChatGPT users 25/05/2023 at 14:05 By Helga Labus A clever phishing campaign aimed at stealing users’ business email account credentials by impersonating OpenAI, the company behind the ChatGPT chatbot, has been spotted by Inky researchers. The attack ChatGPT has quickly gained popularity and is used widely by individuals and organizations. That’s enough

React to this headline:

Loading spinner

Phishing campaign targets ChatGPT users Read More »

Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations

Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations 25/05/2023 at 14:05 By Eduard Kovacs Fortinet’s 2023 State of Operational Technology and Cybersecurity Report shows a drop in the number of breaches and CISOs being increasingly responsible for OT cybersecurity. The post Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations

React to this headline:

Loading spinner

Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations Read More »

GitLab Security Update Patches Critical Vulnerability

GitLab Security Update Patches Critical Vulnerability 25/05/2023 at 14:05 By Ionut Arghire GitLab CE/EE version 16.0.1 patches a critical arbitrary file read vulnerability tracked as CVE-2023-2825. The post GitLab Security Update Patches Critical Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

GitLab Security Update Patches Critical Vulnerability Read More »

Zero-Day Vulnerability Exploited to Hack Barracuda Email Security Gateway Appliances

Zero-Day Vulnerability Exploited to Hack Barracuda Email Security Gateway Appliances 25/05/2023 at 14:05 By Eduard Kovacs Barracuda Networks is warning customers about CVE-2023-2868, a zero-day exploited to hack some Email Security Gateway (ESG) appliances. The post Zero-Day Vulnerability Exploited to Hack Barracuda Email Security Gateway Appliances appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Loading spinner

Zero-Day Vulnerability Exploited to Hack Barracuda Email Security Gateway Appliances Read More »

Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868)

Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) 25/05/2023 at 13:07 By Zeljka Zorz A vulnerability (CVE-2023-2868) in Barracuda Networks’ Email Security Gateway (ESG) appliances has been exploited by attackers, the company has warned. About CVE-2023-2868 CVE-2023-2868 is a critical remote command injection vulnerability affecting only physical Barracuda Email Security Gateway appliances, versions 5.1.3.001

React to this headline:

Loading spinner

Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868) Read More »

China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected 25/05/2023 at 12:19 By A stealthy China-based group managed to establish a persistent foothold into critical infrastructure organizations in the U.S. and Guam without being detected, Microsoft and the “Five Eyes” nations said on Wednesday. The tech giant’s threat intelligence team is tracking the activity, which includes post-compromise credential

React to this headline:

Loading spinner

China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected Read More »

Abusing Web Services Using Automated CAPTCHA-Breaking Services and Residential Proxies

Abusing Web Services Using Automated CAPTCHA-Breaking Services and Residential Proxies 25/05/2023 at 11:52 By This blog entry features three case studies that show how malicious actors evade the antispam, antibot, and antiabuse measures of online web services via residential proxies and CAPTCHA-breaking services. This article is an excerpt from Trend Micro Research, News and Perspectives

React to this headline:

Loading spinner

Abusing Web Services Using Automated CAPTCHA-Breaking Services and Residential Proxies Read More »

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware 25/05/2023 at 09:59 By The Iranian threat actor known as Agrius is leveraging a new ransomware strain called Moneybird in its attacks targeting Israeli organizations. Agrius, also known as Pink Sandstorm (formerly Americium), has a track record of staging destructive data-wiping attacks aimed at Israel under the guise of ransomware

React to this headline:

Loading spinner

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware Read More »

Scroll to Top