Posted inNews
From Dark Reading – Indian Government, Oil Companies Breached by ‘HackBrowserData’
The malicious actor used Slack channels as an exfiltration point to upload the stolen data. Read More
Posted inNews
From The Hacker News – Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries
A Linux version of a multi-platform backdoor called DinodasRAT has been detected in the wild targeting China, Taiwan, Turkey, and Uzbekistan, new findings from Kaspersky reveal.
DinodasRAT, also known as XDealer, is a C++-based malware that offers the ability to harvest a wide range of sensitive data from compromised hosts.
In October 2023, Slovak cybersecurity firm ESET 
Posted inNews
From The Hacker News – Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack
The Police of Finland (aka Poliisi) has formally accused a Chinese nation-state actor tracked as APT31 for orchestrating a cyber attack targeting the country's Parliament in 2020.
The intrusion, per the authorities, is said to have occurred between fall 2020 and early 2021. The agency described the ongoing criminal probe as both demanding and time-consuming, involving extensive analysis of a "
Posted inNews
From Cyber Security News – C2A Security’s EVSec Risk Management and Automation Platform Gains Automotive Industry Favor as Companies Pursue Regulatory Compliance
[[{"value":"In 2023, C2A Security added multiple OEMs and Tier 1s to its portfolio of customers, successful evaluations, and partnerships such as BMW Group, Daimler Truck AG, Marelli, NTT Data, Siemens,…
Posted inNews
From Security Week – Splunk Patches Vulnerabilities in Enterprise Product
[[{"value":"Splunk patches high-severity vulnerabilities in Enterprise, including an authentication token exposure issue. The post Splunk Patches Vulnerabilities in Enterprise Product appeared first on SecurityWeek."}]] Read More
Posted inNews
From Security Week – Cybersecurity Mesh: Overcoming Data Security Overload
[[{"value":"A significant cybersecurity challenge arises from managing the immense volume of data generated by numerous IT security tools, leading organizations into a reactive rather than proactive approach. The post Cybersecurity…
Posted inNews
From Dark Reading – Suspected MFA Bombing Attacks Target Apple iPhone Users
Several Apple device users have experienced recent incidents where they have received incessant password reset prompts and vishing calls from a number spoofing Apple's legitimate customer support line. Read More
Posted inNews
From Dark Reading – US Puts Up $10M Bounty on BlackCat Ransomware Gang Members
Feds are offering cash for information to help them crack down on the ransomware-as-a-service group's cyberattacks against US critical infrastructure. Read More
Posted inNews
From The Hacker News – Darcula Phishing Network Leveraging RCS and iMessage to Evade Detection
A sophisticated phishing-as-a-service (PhaaS) platform called Darcula has set its sights on organizations in over 100 countries by leveraging a massive network of more than 20,000 counterfeit domains to help cyber criminals launch attacks at scale.
"Using iMessage and RCS rather than SMS to send text messages has the side effect of bypassing SMS firewalls, which is being used to great
Posted inNews
From Cybercrime Magazine – EDR vs XDR: The Key Differences
[[{"value":"And is the newer XDR worth the price? – Aimei Wei, Chief Technical Officer, Stellar Cyber San Jose, Calif. – Mar. 27, 2024 While Endpoint Detection and Response (EDR) and…
Posted inNews
From Security Week – Cyberespionage Campaign Targets Government, Energy Entities in India
[[{"value":"Threat intelligence firm EclecticIQ documents the delivery of malware phishing lures to government and private energy organizations in India. The post Cyberespionage Campaign Targets Government, Energy Entities in India appeared…
Posted inNews
From Cyber Security News – Apple ID “push bombing” Attack Targeting Apple Users to Steal passwords
[[{"value":"Apple users are falling prey to a sophisticated phishing campaign designed to hijack their Apple IDs through what’s known as a “push bombing” or “MFA fatigue” attack. This method exploits…
Posted inNews
From Dark Reading – 3 Strategies to Future-Proof Data Privacy
To meet changing privacy regulations, regularly review data storage strategies, secure access to external networks, and deploy data plane security techniques. Read More
Posted inNews
From Cyber Security News – Hackers Using Weaponized Virtual Hard Disk Files to Deliver Remcos RAT
[[{"value":"Hackers have been found leveraging weaponized virtual hard disk (VHD) files to deploy the notorious Remote Control Software (RAT), Remcos. This method marks a significant evolution in cyberattack strategies, aiming…
Posted inNews
From Cybercrime Magazine – How To Alienate A Fortune 500 CISO. Cold-Calling Gone Wrong.
[[{"value":"This week in cybersecurity from the editors at Cybercrime Magazine –Watch the Cybercrime Magazine Video Interview Sausalito, Calif. – Mar. 28, 2024 If you’re a cybersecurity founder or CEO, or…