Ransomware Group Takes Credit for LoanDepot, Prudential Financial Attacks

February 19, 2024 at 08:03AM The BlackCat and Alphv ransomware group has claimed responsibility for cyberattacks on financial firms LoanDepot and Prudential Financial. Despite the data breach impacting millions of people, Prudential stated no evidence of customer data theft. The US government offered rewards for information on the group and its affiliates. The ransomware group … Read more

New Qbot malware variant uses fake Adobe installer popup for evasion

February 15, 2024 at 08:29AM New QBot malware variants have been detected in email campaigns since mid-December, indicating ongoing development and distribution. The malware, also known as Qakbot, deploys through fake Adobe product installers and has caused significant financial damages in the past. Security researchers are closely monitoring the evolving threat and updating detection rules. … Read more

750 million Indian mobile subscribers’ info for sale on dark web

January 28, 2024 at 06:38PM CloudSEK discovered 750 million Indian mobile network subscribers’ records on the dark web, offered by two crime gangs for $3,000. The trove included names, phone numbers, addresses, and Aadhaar details. Samsung will use Baidu’s ERNIE model for its Galaxy S24 devices in China. Terraform Labs filed for Chapter 11 bankruptcy, … Read more

The Week in Ransomware – January 26th 2024 – Govts strike back

January 27, 2024 at 12:19PM Governments imposed sanctions on ransomware operators this week. Australian, US, and UK governments sanctioned Aleksandr Ermakov for the 2022 Medibank hack with REvil. US sentenced Vladimir Dunaev to prison for TrickBot malware involvement. Multiple ransomware attacks and new variants were also reported this week, impacting various industries. Security researchers uncovered … Read more

Windows 11 KB5034204 update fixes Bluetooth audio issues, 24 bugs

January 24, 2024 at 08:38AM Microsoft released the January 2024 preview update for Windows 11 versions 22H2 and 23H2, which includes Bluetooth audio bug fixes and addresses 24 known issues. The update, known as KB5034204, provides improvements for testing before the forthcoming February 2024 Patch Tuesday release. It is an optional update and can be … Read more

Identity Security Firm Silverfort Lands $116 Million Investment

January 23, 2024 at 09:12AM Israeli startup Silverfort raised $116 million led by Brighton Capital in a Series D funding round, with existing investors also expanding their equity stakes. The company aims to scale its identity security technology, having already added tens of millions in new Annual Recurring Revenue and hundreds of enterprise customers. The … Read more

ExtraHop Banks $100M in Growth Funding, Adds New Execs

January 10, 2024 at 08:03PM Seattle-based network detection and response firm ExtraHop raises $100 million in growth funding and expands its executive team. Source: SecurityWeek. Based on the meeting notes, it seems that the Seattle network detection and response firm, ExtraHop, has successfully secured $100 million in growth funding. Additionally, the firm has added new … Read more

China Says State-Backed Experts Crack Apple’s AirDrop

January 10, 2024 at 07:09AM Chinese state-backed experts claim to have devised a method for detecting individuals using Apple’s encrypted AirDrop messaging service, as reported by the Beijing municipal government. This revelation was disclosed on SecurityWeek. Based on the meeting notes, it appears that Chinese state-backed experts have claimed to have found a way to … Read more

Microsoft’s Final 2023 Patch Tuesday: 33 Flaws Fixed, Including 4 Critical

December 13, 2023 at 01:48AM Microsoft’s final 2023 Patch Tuesday update addressed 33 flaws, with 4 rated Critical and 29 rated Important. This year, they’ve patched over 900 flaws, including vulnerabilities like remote code execution and information disclosure. Akamai also discovered attacks against Active Directory domains using Microsoft DHCP servers, prompting recommendations from Microsoft. Other … Read more

Cloud engineer wreaks havoc on bank network after getting fired

December 12, 2023 at 02:48PM Ex-First Republic Bank cloud engineer, Miklos Daniel Brody, was sentenced to two years in prison for causing over $220,000 in damage to his former employer’s computer network by using his company-issued laptop to watch pornography. He pleaded guilty to violating the Computer Fraud and Abuse Act and making false statements … Read more