Uncategorized

Report shows a nearly 40% increase in global ransomware attacks 03/07/2023 at 15:01 By A recently released report tracks trends and impacts of ransomware attacks including encryption-less extortion and growth of ransomware-as-a-service. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Report reveals new browser-based social engineering trends 03/07/2023 at 15:01 By A new report shows that three of the four new malware threats in the Q1 2023 top 10 list have originated in China and Russia. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam 03/07/2023 at 14:32 By Every website owner or webmaster grapples with the issue of spam on their website forms. The volume of spam can be so overwhelming that finding useful information within it becomes quite challenging. What exacerbates this issue is that spam can populate your

CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices 03/07/2023 at 14:32 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has placed a set of eight flaws to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. This includes six shortcomings affecting Samsung smartphones and two vulnerabilities impacting D-Link devices. All

Evasive Meduza Stealer Targets 19 Password Managers and 76 Crypto Wallets 03/07/2023 at 12:47 By In yet another sign of a lucrative crimeware-as-a-service (CaaS) ecosystem, cybersecurity researchers have discovered a new Windows-based information stealer called Meduza Stealer that’s actively being developed by its author to evade detection by software solutions. “The Meduza Stealer has a singular objective:

BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising 03/07/2023 at 08:19 By Threat actors associated with the BlackCat ransomware have been observed employing malvertising tricks to distribute rogue installers of the WinSCP file transfer application. “Malicious actors used malvertising to distribute a piece of malware via cloned webpages of legitimate organizations,” Trend Micro researchers said in an analysis

Unpatched WordPress Plugin Flaw Could Let Hackers Create Secret Admin on 200,000 Sites 01/07/2023 at 10:34 By As many as 200,000 WordPress websites are at risk of ongoing attacks exploiting a critical unpatched security vulnerability in the Ultimate Member plugin. The flaw, tracked as CVE-2023-3460 (CVSS score: 9.8), impacts all versions of the Ultimate Member

Beware: New ‘Rustbucket’ Malware Variant Targeting macOS Users 01/07/2023 at 09:33 By Researchers have pulled back the curtain on an updated version of an Apple macOS malware called Rustbucket that comes with improved capabilities to establish persistence and avoid detection by security software. “This variant of Rustbucket, a malware family that targets macOS systems, adds persistence capabilities

TSA prepares for Fourth of July travel increase 30/06/2023 at 20:51 By As people plan to travel for Independence Day, TSA highlighted some of its screening technology to inform the high-volume of travelers. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

75% of businesses report security as an increasing priority 30/06/2023 at 20:20 By A report found that 75% of businesses report that security is a growing priority and they are spending more in security related areas than in 2022. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Port of Valparaiso updates video surveillance system 30/06/2023 at 18:33 By The Port of Valparaiso in Chile is updating its video surveillance systems. The port receives the highest number of passenger arrivals in Chile. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Iranian Hackers Charming Kitten Utilize POWERSTAR Backdoor in Targeted Espionage Attacks 30/06/2023 at 17:46 By Charming Kitten, the nation-state actor affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC), has been attributed to a bespoke spear-phishing campaign that delivers an updated version of a fully-featured PowerShell backdoor called POWERSTAR. “There have been improved operational security measures

Port of Valapraiso updates video survaillance system 30/06/2023 at 17:31 By The Port of Valapraiso in Chile is updating its video surveillance systems. The port receives the highest number of passenger arrivals in Chile. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

FBI cyber veteran Don Good named Everest CISO 30/06/2023 at 16:18 By Everest Re Group, Ltd. has appointed FBI cyber veteran Don Good as Chief Information Security Officer (CISO), effective immediately.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Muscogee Nation Gaming Enterprises expands AI gun detection 30/06/2023 at 15:16 By In an effort to improve emergency response, Muscogee Nation Gaming Enterprises have implemented AI-based gun detection video analytics at all its properties. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

3 Reasons SaaS Security is the Imperative First Step to Ensuring Secure AI Usage 30/06/2023 at 15:03 By In today’s fast-paced digital landscape, the widespread adoption of AI (Artificial Intelligence) tools is transforming the way organizations operate. From chatbots to generative AI models, these SaaS-based applications offer numerous benefits, from enhanced productivity to improved decision-making.

Cybercriminals Hijacking Vulnerable SSH Servers in New Proxyjacking Campaign 30/06/2023 at 12:34 By An active financially motivated campaign is targeting vulnerable SSH servers to covertly ensnare them into a proxy network. “This is an active campaign in which the attacker leverages SSH for remote access, running malicious scripts that stealthily enlist victim servers into a

WhatsApp Upgrades Proxy Feature Against Internet Shutdowns 30/06/2023 at 12:34 By Meta’s WhatsApp has rolled out updates to its proxy feature, allowing more flexibility in the kind of content that can be shared in conversations. This includes the ability to send and receive images, voice notes, files, stickers and GIFs, WhatsApp told The Hacker News.

MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk? 30/06/2023 at 09:02 By MITRE has released its annual list of the Top 25 “most dangerous software weaknesses” for the year 2023. “These weaknesses lead to serious vulnerabilities in software,” the U.S. Cybersecurity and Infrastructure Security Agency (CISA) said. “An attacker can

Toronto Woodbine Entertainment Group updates security measures 29/06/2023 at 23:04 By The Woodbine Entertainment Group (WEG) in Toronto is updating its security measures for access control, video surveillance and management. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source