USA - Security Ticks

Cybersecurity jobs available right now in the USA: February 20, 2025

cybersecurity jobs, News, USA / SecurityTicks

Cybersecurity jobs available right now in the USA: February 20, 2025 2025-02-20 at 18:06 By Anamarija Pogorelec Compliance & Privacy Specialist McKesson | Remote – View job details As a Compliance & Privacy Specialist, you will identify potential gaps, establish and maintain policies and procedures to guide the business in complying with regulatory requirements, create […]

React to this headline:

Cybersecurity jobs available right now in the USA: February 20, 2025 Read More »

Man charged with stealing $65 million by exploting DeFI protocols vulnerabilities

Cryptocurrency, Don't miss, extortion, finance, fraud, Hot stuff, News, USA, vulnerability / SecurityTicks

Man charged with stealing $65 million by exploting DeFI protocols vulnerabilities 2025-02-04 at 12:16 By Help Net Security A Canadian man has been indicted in federal court in New York for exploiting vulnerabilities in two decentralized finance (DeFi) protocols to fraudulently obtain about $65 million from the protocols’ investors. The fraudulent scheme According to court

React to this headline:

Man charged with stealing $65 million by exploting DeFI protocols vulnerabilities Read More »

North Korean IT workers are extorting employers, FBI warns

data theft, Don't miss, enterprise, extortion, Hot stuff, News, North Korea, USA / SecurityTicks

North Korean IT workers are extorting employers, FBI warns 2025-01-24 at 16:48 By Zeljka Zorz The FBI is on a mission to raise awareness about the threat that North Korean IT workers present to organizations in the US and around the world. While corporate espionage comes to mind first, the threat goes beyond that: “In

React to this headline:

North Korean IT workers are extorting employers, FBI warns Read More »

48,000+ internet-facing Fortinet firewalls still open to attack

Arctic Wolf Networks, Asia, Don't miss, enterprise, firewall, Fortinet, Hot stuff, Kroll, News, Shadowserver, USA / SecurityTicks

48,000+ internet-facing Fortinet firewalls still open to attack 2025-01-22 at 14:34 By Zeljka Zorz Despite last week’s confirmation of and warnings about long-standing exploitation of CVE-2024-55591, a critical vulnerability affecting Fortinet Fortigate firewalls, too many vulnerable devices are still accessible from the Internet and open to attack: over 48,000, according to data from the Shadowserver

React to this headline:

48,000+ internet-facing Fortinet firewalls still open to attack Read More »

Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them?

CloudSEK, cybercriminals, Data leak, Don't miss, enterprise, firewall, Fortinet, Germany, healthcare, Hot stuff, News, USA / SecurityTicks

Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them? 2025-01-16 at 13:03 By Zeljka Zorz A threat actor has leaked configuration files (aka configs) for over 15,000 Fortinet Fortigate firewalls and associated admin and user credentials. The collection has been leaked on Monday and publicized on an underground forum by the threat actor

React to this headline:

Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them? Read More »

FBI removed PlugX malware from U.S. computers

FBI, Hot stuff, Malware, News, Sekoia.io, US DoJ, USA / SecurityTicks

FBI removed PlugX malware from U.S. computers 2025-01-15 at 14:24 By Help Net Security The Justice Department announced on Tuesday that, alongside international partners, the FBI deleted “PlugX” malware from thousands of infected computers worldwide. As described in court documents unsealed in the Eastern District of Pennsylvania, a group of hackers sponsored by the People’s

React to this headline:

FBI removed PlugX malware from U.S. computers Read More »

The U.S. Cyber Trust Mark set to launch

certification, cybersecurity, Don't miss, fcc, fitness tracker, Hot stuff, IoT, News, smart lock, smart toys, smart tv, USA, wearable tech / SecurityTicks

The U.S. Cyber Trust Mark set to launch 2025-01-08 at 16:03 By Zeljka Zorz The White House has announced the launch of the U.S. Cyber Trust Mark, a voluntary cybersecurity labeling program for consumer-grade internet-connected devices. “The White House launched this bipartisan effort to educate American consumers and give them an easy way to assess

React to this headline:

The U.S. Cyber Trust Mark set to launch Read More »

CISA says Treasury was the only US agency breached via BeyondTrust

BeyondTrust, CISA, Don't miss, government-backed attacks, Hot stuff, News, USA / SecurityTicks

CISA says Treasury was the only US agency breached via BeyondTrust 2025-01-07 at 14:18 By Zeljka Zorz The US Cybersecurity and Infrastructure Security Agency (CISA) has shared on Monday that the Treasury Department was the only US federal agency affected by the recent cybersecurity incident involving compromised BeyondTrust Remote Support SaaS instances. On the same

React to this headline:

CISA says Treasury was the only US agency breached via BeyondTrust Read More »

Law enforcement agencies see AI as a key tool for reducing crime

Artificial Intelligence, crime, cybersecurity, law enforcement, Mark43, News, public sector, report, USA / SecurityTicks

Law enforcement agencies see AI as a key tool for reducing crime 2024-12-27 at 06:33 By Help Net Security A U.S. national survey of first responders reveals strong support for AI adoption, cybersecurity concerns, and increasing demand for cloud-native, data-driven, and interoperable CAD and RMS systems to improve efficiency and public safety outcomes, according to

React to this headline:

Law enforcement agencies see AI as a key tool for reducing crime Read More »

US charges suspected LockBit ransomware developer

cybercrime, cybercriminals, DOJ, Hot stuff, law enforcement, News, Ransomware, USA / SecurityTicks

US charges suspected LockBit ransomware developer 2024-12-23 at 16:37 By Zeljka Zorz The US Department of Justice has unsealed charges against Rostislav Panev, 51, a dual Russian and Israeli national, suspected of being a developer for the LockBit ransomware group. Panev was arrested in August 2024 and is currently in custody in Israel pending extradition.

React to this headline:

US charges suspected LockBit ransomware developer Read More »

NFT scammers charged for stealing $22 million through “rug pulls”

arrest, Cryptocurrency, DHS, Hot stuff, Justice Department, News, nft, scams, USA / SecurityTicks

NFT scammers charged for stealing $22 million through “rug pulls” 2024-12-23 at 14:50 By Help Net Security A six-count indictment was unsealed on Friday in Los Angeles charging two California men with defrauding investors of more than $22 million in cryptocurrency through a series of digital asset project “rug pulls,” a type of fraud scheme

React to this headline:

NFT scammers charged for stealing $22 million through “rug pulls” Read More »

CISA: Use Signal or other secure communications app

Android, CISA, Don't miss, Hot stuff, iPhone, MFA, News, password manager, secure communications, Signal, telecommunications, USA / SecurityTicks

CISA: Use Signal or other secure communications app 2024-12-20 at 14:57 By Zeljka Zorz In the wake of the widespread compromise of US telecom giants’ networks by Chinese hackers and the FBI advising Americans to use end-to-end encrypted communications, CISA is advising “highly targeted individuals” – senior government officials and politicians – to lock down

React to this headline:

CISA: Use Signal or other secure communications app Read More »

Ukrainian hacker gets prison for infostealer operations

cybercrime, Don't miss, Government, law enforcement, News, USA / SecurityTicks

Ukrainian hacker gets prison for infostealer operations 2024-12-19 at 12:03 By Help Net Security Ukrainian national Mark Sokolovsky was sentenced to 60 months in federal prison for one count of conspiracy to commit computer intrusion. According to court documents, he conspired to operate the Raccoon Infostealer as a malware-as-a-service (MaaS). Individuals who deployed Raccoon Infostealer

React to this headline:

Ukrainian hacker gets prison for infostealer operations Read More »

Krispy Kreme cybersecurity incident disrupts online ordering

cyberattack, disruption, Don't miss, Hot stuff, News, Retail, USA / SecurityTicks

Krispy Kreme cybersecurity incident disrupts online ordering 2024-12-12 at 13:39 By Zeljka Zorz Popular US doughnut chain Krispy Kreme has been having trouble with its online ordering system as well as digital payments at their brick-and-mortar shops since late November, and now we finally know why: an 8-K report filed with the US Securities and

React to this headline:

Krispy Kreme cybersecurity incident disrupts online ordering Read More »

27 DDoS-for hire platforms seized by law enforcement

arrest, cybercriminals, DDoS, Don't miss, Europe, Europol, Hot stuff, Justice Department, News, USA / SecurityTicks

27 DDoS-for hire platforms seized by law enforcement 2024-12-12 at 12:39 By Zeljka Zorz As part of an ongoing international crackdown known as Operation PowerOFF, international law enforcement has seized over two dozen platforms used to carry out Distributed Denial-of-Service (DDoS) attacks. These “booter” (aka “stresser”) sites were used by both cybercriminals and hacktivists to

React to this headline:

27 DDoS-for hire platforms seized by law enforcement Read More »

8+ US telcos compromised, FBI advises Americans to use encrypted communications

China, Don't miss, Encryption, Hot stuff, News, telecommunications, tips, USA / SecurityTicks

8+ US telcos compromised, FBI advises Americans to use encrypted communications 2024-12-05 at 14:24 By Zeljka Zorz FBI and Cybersecurity and Infrastructure Security Agency (CISA) officials have advised Americans to use encrypted call and messaging apps to protect their communications from threat actors that have – and will – burrow into the networks and systems

React to this headline:

8+ US telcos compromised, FBI advises Americans to use encrypted communications Read More »

US government, energy sector contractor hit by ransomware

energy sector, Government, Hot stuff, News, Ransomware, USA / SecurityTicks

US government, energy sector contractor hit by ransomware 2024-12-03 at 12:15 By Zeljka Zorz ENGlobal, a Texas-based engineering and automation contractor for companies in the energy sector, has had its data encrypted by attackers. “On November 25, 2024, ENGlobal Corporation (the “Company”) became aware of a cybersecurity incident. The preliminary investigation has revealed that a

React to this headline:

US government, energy sector contractor hit by ransomware Read More »

Active network of North Korean IT front companies exposed

China, Don't miss, Hot stuff, Insider Threat, News, North Korea, Palo Alto Networks, SentinelOne, software development, tips, USA / SecurityTicks

Active network of North Korean IT front companies exposed 2024-11-21 at 16:18 By Zeljka Zorz An analysis of the websites belonging to companies that served as a front for getting North Korean IT workers remote jobs with businesses worldwide has revealed an active network of such companies originating in China. Unearthing North Korean IT front

React to this headline:

Active network of North Korean IT front companies exposed Read More »

2,000 Palo Alto Networks devices compromised in latest attacks

CVE, Don't miss, enterprise, firewall, Hot stuff, India, News, Palo Alto Networks, Shadowserver, USA / SecurityTicks

2,000 Palo Alto Networks devices compromised in latest attacks 2024-11-21 at 13:27 By Zeljka Zorz Attackers have compromised around 2,000 Palo Alto Networks firewalls by leveraging the two recently patched zero-days (CVE-2024-0012 and CVE-2024-9474), Shadowserver Foundation’s internet-wide scanning has revealed. Compromised devices are predominantly located in the US and India, the nonprofit says. Manual and

React to this headline:

2,000 Palo Alto Networks devices compromised in latest attacks Read More »

Phobos ransomware administrator faces US cybercrime charges

cybercrime, FBI, News, Ransomware, USA / SecurityTicks

Phobos ransomware administrator faces US cybercrime charges 2024-11-19 at 12:33 By Help Net Security The Justice Department unsealed criminal charges against Evgenii Ptitsyn, 42, a Russian national, for allegedly administering the sale, distribution, and operation of Phobos ransomware. Ptitsyn made his initial appearance in the US District Court for the District of Maryland on Nov.

React to this headline:

Phobos ransomware administrator faces US cybercrime charges Read More »