SecurityTicks - Security Ticks

Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations

cybercrime, Featured, MOVEit, Ransomware / SecurityTicks

Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations 05/06/2023 at 13:39 By Eduard Kovacs The recent MOVEit zero-day attack has been linked to a known ransomware group, which reportedly stole data from dozens of organizations. The post Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations appeared first […]

React to this headline:

Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations Read More »

Cybersecurity M&A Roundup: 36 Deals Announced in May 2023

Funding/M&A, M&A, M&A Tracker / SecurityTicks

Cybersecurity M&A Roundup: 36 Deals Announced in May 2023 05/06/2023 at 13:39 By Eduard Kovacs Thirty-six cybersecurity-related merger and acquisition (M&A) deals were announced in May 2023. The post Cybersecurity M&A Roundup: 36 Deals Announced in May 2023 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Cybersecurity M&A Roundup: 36 Deals Announced in May 2023 Read More »

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

Uncategorized / SecurityTicks

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack 05/06/2023 at 09:46 By Cybersecurity researchers have unearthed a new ongoing Magecart-style web skimmer campaign that’s designed to steal personally identifiable information (PII) and credit card data from e-commerce websites. A noteworthy aspect that sets it apart from other Magecart campaigns is that the hijacked sites

React to this headline:

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack Read More »

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

Uncategorized / SecurityTicks

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts 05/06/2023 at 08:28 By An unknown cybercrime threat actor has been observed targeting Spanish- and Portuguese-speaking victims to compromise online banking accounts in Mexico, Peru, and Portugal. “This threat actor employs tactics such as LOLBaS (living-off-the-land binaries and scripts), along with CMD-based scripts to

React to this headline:

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts Read More »

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors

Uncategorized / SecurityTicks

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors 05/06/2023 at 08:28 By A surge in TrueBot activity was observed in May 2023, cybersecurity researchers disclosed. “TrueBot is a downloader trojan botnet that uses command and control servers to collect information on compromised systems and uses that compromised system as a launching point for

React to this headline:

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors Read More »

Surveilling your employees? You could be putting your company at risk of attack

1E, dark web, data breach, Don't miss, Employees, Expert analysis, Expert corner, Hot stuff, monitoring, opinion, surveillance / SecurityTicks

Surveilling your employees? You could be putting your company at risk of attack 05/06/2023 at 08:13 By Help Net Security Are you watching your employees? Though the question may incite thoughts of “Big Brother” and an all-seeing or all-knowing entity, it isn’t quite as ominous as you might think. Employee productivity surveillance technology, or EPST,

React to this headline:

Surveilling your employees? You could be putting your company at risk of attack Read More »

9 free cybersecurity whitepapers you should read

APT, Bitdefender, Center for Internet Security, Cloudflare, Code42, cybersecurity, Cyberstash, Don't miss, Hot stuff, N-able, News, NIST, OffSec, SANS, Team8, whitepaper / SecurityTicks

9 free cybersecurity whitepapers you should read 05/06/2023 at 07:30 By Helga Labus In today’s rapidly evolving digital landscape, organizations face constant cyber threats that can compromise their sensitive data, disrupt operations, and damage their reputation. Staying informed about the latest cyberattacks and understanding effective protection methods is crucial. This list of free cybersecurity whitepapers

React to this headline:

9 free cybersecurity whitepapers you should read Read More »

How fraudsters undermine text passcodes

CISO, cybercrime, cybersecurity, Don't miss, fraud, Hot stuff, passwords, Sinch, Video / SecurityTicks

How fraudsters undermine text passcodes 05/06/2023 at 07:17 By Help Net Security Malicious bots are taking new forms – a burst of spam and scam text messages led to 18,000+ consumer complaints at the FCC last year. One of the newest scams – artificial inflation of traffic (AIT) – targets the SMS authentication codes sent

React to this headline:

How fraudsters undermine text passcodes Read More »

A new wave of sophisticated digital fraud hits Europe

deepfake, fraud, identity verification, News, report, Sumsub / SecurityTicks

A new wave of sophisticated digital fraud hits Europe 05/06/2023 at 06:32 By Help Net Security Forced verification and deepfake cases multiply at alarming rates in the UK and continental Europe, according to Sumsub. In Germany alone, forced verification grew by 1500% as a proportion of all fraud cases, from 0.3% in the full year

React to this headline:

A new wave of sophisticated digital fraud hits Europe Read More »

Virtual claims raise alarms among insurance carriers and customers

fraud, identity, identity protection, LexisNexis Risk Solutions, News / SecurityTicks

Virtual claims raise alarms among insurance carriers and customers 05/06/2023 at 06:08 By Help Net Security As the digital revolution changes the claims process, both carriers and customers are increasingly concerned about data privacy, according to LexisNexis Risk Solutions. More than 60% of consumers have concerns over the security of their personally identifiable information when

React to this headline:

Virtual claims raise alarms among insurance carriers and customers Read More »

Katie Boswell on AI security and women’s rise in cybersecurity

Artificial Intelligence, CISO, Cybellum, cybersecurity, KPMG, News, NIST, podcast, strategy, tips / SecurityTicks

Katie Boswell on AI security and women’s rise in cybersecurity 05/06/2023 at 05:45 By Help Net Security Katie Boswell spent years on the front lines securing the most critical national infrastructure in energy and life sciences. Yet, earlier in her career, she was told that senior leadership was not for her if she planned on

React to this headline:

Katie Boswell on AI security and women’s rise in cybersecurity Read More »

Evasive NoEscape Ransomware Uses Reflective DLL Injection

8Base Ransomware, ChaCha20, CryptoAPI, cybercrime, ESXi servers, Linux, Linux Variant, Malware, Microsoft Visual C/C++, NoEscape Ransomware, RaaS, Ransomware, SQL, Threat Actors, Twitter, Vmware Converter, Windows 7, Windows XP / SecurityTicks

Evasive NoEscape Ransomware Uses Reflective DLL Injection 04/06/2023 at 21:21 By cybleinc Cyble Research and Intelligence Labs analyzes the NoEscape Ransomware-as-a-Service platform and explains how it targets VMware ESXi servers. The post Evasive NoEscape Ransomware Uses Reflective DLL Injection appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to

React to this headline:

Evasive NoEscape Ransomware Uses Reflective DLL Injection Read More »

Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 released

News, Week in review / SecurityTicks

Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 released 04/06/2023 at 11:03 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: MOVEit Transfer zero-day attacks: The latest info Progress Software has updated the security advisory and confirmed that the vulnerability (still without

React to this headline:

Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 released Read More »

Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech

Artificial Intelligence / SecurityTicks

Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech 03/06/2023 at 23:37 By Associated Press Shift5 founder Josh Lospinoso discusses AI and how software vulnerabilities in weapons systems are a major threat to the U.S. military. The post Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech appeared first on SecurityWeek. This article is an

React to this headline:

Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech Read More »

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack

Malware & Threats, news roundup, Tracking & Law Enforcement, Vulnerabilities / SecurityTicks

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack 03/06/2023 at 14:33 By Eduard Kovacs Cybersecurity news that you may have missed this week: the spyware used by various governments, new vulnerabilities, industrial security products, and Linux router attacks. The post In Other News: Government Use of Spyware, New Industrial

React to this headline:

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack Read More »

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

Uncategorized / SecurityTicks

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal 03/06/2023 at 11:36 By An analysis of the Linux variant of a new ransomware strain called BlackSuit has covered significant similarities with another ransomware family called Royal. Trend Micro, which examined an x64 VMware ESXi version targeting Linux machines, said it identified an “extremely high degree

React to this headline:

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal Read More »

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council’s Certified CISO Hall of Fame Report 2023

Uncategorized / SecurityTicks

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council’s Certified CISO Hall of Fame Report 2023 03/06/2023 at 11:36 By A survey of global cybersecurity leaders through the 2023 Certified CISO Hall of Fame Report commissioned by the EC-Council identified 4 primary areas of grave concern: cloud security, data security, security governance, and lack of cybersecurity

React to this headline:

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council’s Certified CISO Hall of Fame Report 2023 Read More »

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring

Uncategorized / SecurityTicks

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring 03/06/2023 at 11:36 By The U.S. Federal Trade Commission (FTC) has fined Amazon a cumulative $30.8 million over a series of privacy lapses regarding its Alexa assistant and Ring security cameras. This comprises a $25 million penalty for breaching children’s privacy laws

React to this headline:

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring Read More »

OpenAI Unveils Million-Dollar Cybersecurity Grant Program

Artificial Intelligence, ChatGPT, Data Protection, OpenAI / SecurityTicks

OpenAI Unveils Million-Dollar Cybersecurity Grant Program 03/06/2023 at 01:17 By Ryan Naraine OpenAI plans to shell out $1 million in grants for projects that empower defensive use-cases for generative AI technology. The post OpenAI Unveils Million-Dollar Cybersecurity Grant Program appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

OpenAI Unveils Million-Dollar Cybersecurity Grant Program Read More »

Galvanick Banks $10 Million for Industrial XDR Technology

Funding/M&A, ICS/OT / SecurityTicks

Galvanick Banks $10 Million for Industrial XDR Technology 03/06/2023 at 01:17 By Ryan Naraine Los Angeles startup Galvanick scores $10 million seed capital to build a modern industrial detection and response platform. The post Galvanick Banks $10 Million for Industrial XDR Technology appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Galvanick Banks $10 Million for Industrial XDR Technology Read More »