Recent Security News

  • Russian Sandworm hackers breached 11 Ukrainian telcos since May

    October 16, 2023 at 02:08PM The Russian hacking group known as ‘Sandworm’ has compromised eleven telecommunication service providers in Ukraine between May and September 2023, according to a report by Ukraine’s Computer Emergency Response Team (CERT-UA). The hackers interfered with communication systems, causing service interruptions and potential data breaches. Sandworm used various tactics, including phishing…

    Read More

  • We’re not in e-Kansas anymore: State courts reel from ‘unauthorized incursion’

    October 16, 2023 at 01:40PM Many state courts in Kansas are relying on paper filings due to an ongoing security incident, which may last for weeks. The Kansas Supreme Court turned off its eFiling system to examine the incident, and all filings must now be done on paper or by fax. The extent of the…

    Read More

  • Cisco warns of new IOS XE zero-day actively exploited in attacks

    October 16, 2023 at 11:52AM Cisco has warned administrators about a severe zero-day vulnerability in its IOS XE Software that allows attackers to gain full control of affected routers. The vulnerability, identified as CVE-2023-20198, only affects devices with the Web User Interface feature enabled and the HTTP or HTTPS Server feature toggled on. Cisco advises…

    Read More

  • BLOODALCHEMY provides backdoor to southeast Asian nations’ secrets

    October 16, 2023 at 11:23AM Security researchers have discovered a backdoor called “BLOODALCHEMY” that targets x86 systems and is being used in attacks against governments and organizations in the Association of Southeast Asian Nations (ASEAN). The backdoor is part of the REF5961 intrusion set, which is believed to be linked to a group with ties…

    Read More

  • Fake ‘RedAlert’ rocket alert app for Israel installs Android spyware

    October 16, 2023 at 11:23AM A malicious version of the ‘RedAlert – Rocket Alerts’ app is targeting Israeli Android users. The fake app, distributed from the website “redalerts[.]me,” appears legitimate but installs spyware on the device. It requests additional permissions and collects data from the user, encrypting and uploading it to a hardcoded IP address.…

    Read More