Category Security

A cyber threat actor has been leveraging an old LockBit builder to experiment with ransomware targeting Apple’s macOS devices, according to two threat intelligence providers. In an October 22 report, SentinelLabs, the research branch of cybersecurity provider SentinelOne, shared observations…

Oct 25, 2024Ravie LakshmananDigital Advertising / Privacy The Irish data protection watchdog on Thursday fined LinkedIn €310 million ($335 million) for violating the privacy of its users by conducting behavioral analyses of personal data for targeted advertising. “The inquiry examined…

The UK government has urged more organizations to become Cyber Essentials Certified, highlighting the significant impact the scheme has had on preventing damaging attacks. On the 10th anniversary since Cyber Essentials was introduced, the government published the results of an…

The UK government has introduced new legislation to govern personal data use and sharing through digital technologies. The Data (Use and Access) Bill provides a framework for digital verification services, enabling companies who provide tools for verifying identities to gain…

Oct 24, 2024Ravie LakshmananVulnerability / Network Security Cisco on Wednesday said it has released updates to address an actively exploited security flaw in its Adaptive Security Appliance (ASA) that could lead to a denial-of-service (DoS) condition. The vulnerability, tracked as…

A recently discovered cyber-attack by the notorious Lazarus Group, including its BlueNoroff subgroup, has exposed a new vulnerability in Google Chrome. The group used a zero-day exploit to take complete control of infected systems, marking the latest in a long…

Oct 24, 2024Ravie LakshmananRansomware / Cybercrime Cybersecurity researchers have discovered an advanced version of the Qilin ransomware sporting increased sophistication and tactics to evade detection. The new variant is being tracked by cybersecurity firm Halcyon under the moniker Qilin.B. “Notably,…

Historically, Mac users haven’t had to worry about malware as much as their Windows-using cousins.  Although malware targeting Apple devices actually predates viruses written for PCs, and there have been some families of malware that have presented a significant threat…

Pennsylvania State University (Penn State) has agreed to pay $1.25m to resolve allegations of failing to meet federal cybersecurity requirements tied to contracts with the Department of Defense (DoD) and NASA. The settlement follows claims that the university did not…

Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services (AWS) Cloud Development Kit (CDK) that could have resulted in an account takeover under specific circumstances. “The impact of this issue could, in certain scenarios, allow an attacker to…