Russia-Backed APT28 Tried to Attack a Ukrainian Critical Power Facility
Ukraine’s Computer Emergency Response Team (CERT-UA) issued an alert on September 5, 2023, about a cyber-attack attempted by Russian threat...
Premium Members Content
MITRE and CISA Release OT Attack Emulation Tool
A new open source tool designed to emulate cyber-attacks against operational technology (OT) has been released by MITRE and the...
IBM Reports Patient Data Breach at Johnson & Johnson Subsidiary
Sensitive patient data may have been accessed following a breach of the Janssen CarePath platform, a subsidiary of pharmaceutical giant...
Chinese Hacker Steals Microsoft Signing Key, Spies on US Government
A China-based threat actor gained access to a Microsoft account (MSA) cryptographic key, as early as 2021, and used it...
UK Government Backs Down on Anti-Encryption Stance
The UK government appears to have pulled back on a controversial clause in its forthcoming Online Safety Bill that would...
Hundreds of Scam Pages Uncovered in Major Investment Fraud Campaign
Researchers are warning of a major global investment fraud campaign that uses social media advertising to lure unwitting victims into...
Zero-Day Flaw Exposes Atlas VPN User IPs
A Reddit user known as “Educational-Map-8145” has exposed a critical zero-day flaw affecting the Linux client of Atlas VPN, a popular...
UK and US Sanction 11 Russians Tied to Trickbot/Conti Ransomware
The US and the UK have sanctioned 11 individuals accused of being linked with the Trickbot malware and the Conti...
DGA Behavior Shifts Raise Cybersecurity Concerns
Researchers at Akamai have unearthed a concerning shift in the behavior of dynamically seeded Domain Generation Algorithm (DGA) families within...
API Vulnerabilities: 74% of Organizations Report Multiple Breaches
API security company Traceable has unveiled its 2023 State of API Security Report. In collaboration with the Ponemon Institute, the...
UK National Cyber Security Centre Gets a New CTO
The UK’s National Cyber Security Centre (NCSC) has announced its new chief technology officer (CTO) will be Ollie Whitehouse.Spun out...
Freecycle Breach May Have Hit Millions of Users
A non-profit organization used by millions on both sides of the Atlantic to recycle their possessions has admitted suffering a...
Mend.io SAML Vulnerability Exposed
WithSecure has unveiled a new security vulnerability in Mend.io’s application security platform today, raising concerns about data privacy and potential...
Airlines Battle Surge in Loyalty Program Fraud
Cyber fraudsters have been observed increasingly exploiting vulnerabilities in air miles and customer service systems across the EU, the UK...
More Schools Hit By Cyber-Attacks Before Term Begins
A north London school and a Berkshire schools group have become the latest victims of serious cyber-attacks ahead of the new...
UK Electoral Commission Fails Cybersecurity Test Amid Data Breach
The UK’s Electoral Commission has admitted to failing a crucial cybersecurity test at the same time that hackers breached its...
Sydney University Suffers Supply Chain Breach
The University of Sydney has revealed a supply chain-related data breach in which the personal information of international students and...
Four Convicted in $18m Investment Fraud Scheme
Four men have been found guilty of participating in a global investment fraud and money laundering conspiracy that tricked victims...
Suffolk High School Forced Offline After Cyber-Attack
A leading English secondary school has shut down its IT systems following a cyber-attack just days before the start of...
Sensitive Data about UK Military Sites Potentially Leaked by LockBit
Gigabytes of sensitive data related to British military and intelligence sites have been exposed by the infamous LockBit ransomware group.Zaun,...
Python Package Index Targeted Again By VMConnect
Cybersecurity experts at ReversingLabs have unveiled a concerning continuation of the infamous VMConnect campaign. This ongoing assault, initially discovered in early...
Medical Data Breach: Ayush Jharkhand Hacked
The threat actor known as Tanaka recently has been observed sharing a post titled “bitsphere.in” on an English-speaking hacking forum, shedding...
New Attack Technique “MalDoc in PDF” Alarms Experts
Security experts from JPCERT/CC have identified a new attack technique called “MalDoc in PDF,” which can elude detection by embedding a...
Russian APT Intensifies Cyber Espionage Activities Amid Ukrainian Counter-Offensive
Russian APT group Gamaredon has intensified its cyber espionage activities ahead of and during Ukraine’s counter-offensive operations, according to a...
