Spyware Designed for Telegram Mods Also Targets WhatsApp Add-Ons

November 3, 2023 at 10:14AM Attackers have been distributing spyware through modified versions of WhatsApp and Telegram, collecting private data from Android users. Kaspersky researchers detected 340,000 attempts to distribute the spyware through WhatsApp mods, with the real number of installations likely being higher. The majority of victims were in Azerbaijan, Yemen, Saudi Arabia, Egypt, … Read more

Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks

November 1, 2023 at 10:23AM Researchers at Check Point warn that an Iranian espionage group known as Scarred Manticore has been using a new malware framework called LionTail in recent cyberattacks. The group, linked to the OilRig threat actor, has been active since 2019 and targets high-profile organizations in the Middle East. LionTail allows attackers … Read more

Meeting the challenge of OT security

November 1, 2023 at 04:44AM Industrial control systems are increasingly being targeted by cyberattacks, which can have severe consequences such as manufacturing disruptions and data breaches. To address these challenges, UK soft drinks producer Britvic will be discussing their approach to strengthening operational resilience in an upcoming webinar on November 8. Sign up to watch … Read more

UAE Bolsters Cyber Future With US Treasury Partnership, Collaborations

October 30, 2023 at 02:02PM The United Arab Emirates’ Cybersecurity Council has signed partnerships with other nations, including the US, Morocco, and Chad, to strengthen its threat intelligence sharing capabilities. These agreements aim to improve cybersecurity within the UAE, with a focus on the financial services industry and joint planning and response to cyberattacks. The … Read more

Hacktivist Activity Related to Gaza Conflict Dwindles

October 27, 2023 at 12:55PM Hacktivist cyber activities related to the Israel-Hamas conflict have slowed down, with some groups ceasing to plan attacks and others focusing on targets outside of Israel. Several hacktivist groups had previously made plans to attack or identified targets, but many have become silent or started selling attack services. The Dark … Read more

SonicWall Data Confirms That Ransomware Is Still the Enterprise’s Biggest Fear

October 27, 2023 at 12:01AM SonicWall released the findings of its 2023 SonicWall Threat Mindset Survey, revealing that 55% of its customers are more concerned about cyberattacks in 2023, with the main threats being ransomware and spear phishing. The survey also highlighted concerns about slow patching of vulnerabilities, increased fears around insider threats, and the … Read more

Hunters International leaks pre-op plastic surgery pics in negotiation no-no

October 25, 2023 at 04:37AM Hunters International, a newly emerged ransomware gang, claims to have accessed a US plastic surgeon’s clinic and leaked patients’ pre-operation pictures in an attempt to speed up a ransom payment. The group has claimed attacks on only two victims so far. Security experts have linked Hunters International to the shuttered … Read more

1Password Becomes Latest Victim of Okta Customer Service Breach

October 24, 2023 at 04:19PM Password manager 1Password is the second victim of Okta’s recent customer support breach. Okta, a cloud-based identity and access management service, suffered a cyberattack that compromised access to customer support systems, allowing the attacker to infiltrate some customers, including 1Password. Fortunately, no user or employee data was compromised. Okta has … Read more

Cisco discloses new IOS XE zero-day exploited to deploy malware implant

October 20, 2023 at 06:17PM Cisco has disclosed two high-severity zero-day vulnerabilities, CVE-2023-20198 and CVE-2023-20273, being actively exploited to compromise Cisco IOS XE devices. The company has found fixes for both vulnerabilities and plans to release them on October 22. Over 40,000 devices have already been compromised. System administrators are urged to disable the vulnerable … Read more

Cisco Finds New Zero Day Bug, Pledges Patches in Days

October 20, 2023 at 04:12PM Cisco is set to release a patch on October 22 for two zero-day vulnerabilities in its IOS XE devices. One vulnerability, discovered earlier, had already been exploited to compromise over 10,000 devices. A second flaw, identified later, is being used in the same exploit chain. Exploitation is expected to continue … Read more