Category Security

Good news for organisations who have fallen victim to the notorious Rhysida ransomware. A group of South Korean security researchers have uncovered a vulnerability in the infamous ransomware. This vulnerability provides a way for encrypted files to be unscrambled. Researchers…

APIs now comprise nearly three-quarters (71%) of web traffic, posing a significant threat to corporate cybersecurity by expanding the cyber-attack surface, according to Imperva. The security company revealed the findings in its Imperva State of API Security Report, which was…

Feb 27, 2024NewsroomWebsite Security / Cryptojacking A critical security flaw has been disclosed in a popular WordPress plugin called Ultimate Member that has more than 200,000 active installations. The vulnerability, tracked as CVE-2024-1071, carries a CVSS score of 9.8 out…

Graham Cluley Security News is sponsored this week by the folks at Cynet. Thanks to the team there for their support. Netanel Amar, Co-founder & COO, Cynet As Cynet’s COO, my team and I get to work closely with risk…

Half of all IT leaders believe that the Internet of Things (IoT) is the weakest part of their security efforts, according to findings from security experts. Released today, the study commissioned by Viakoo uncovers critical insights into the state of…

Feb 27, 2024NewsroomSupply Chain Attack / Data Security Cybersecurity researchers have found that it’s possible to compromise the Hugging Face Safetensors conversion service to ultimately hijack the models submitted by users and result in supply chain attacks. “It’s possible to…

Heaven’s above! Scammers are exploiting online funerals, and LockBit – the “Walmart of Ransomware” – is dismantled in style by cyber cops. All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans…

The US National Institute of Standards and Technology (NIST) has released the final version of version 2.0 of its popular Cybersecurity Framework (CSF). The new framework is now available to be used by all organizations to help them manage and…

Feb 27, 2024NewsroomCloud Security / Threat Intelligence Cybersecurity and intelligence agencies from the Five Eyes nations have released a joint advisory detailing the evolving tactics of the Russian state-sponsored threat actor known as APT29. The hacking outfit, also known as…

A huge reward is being offered for information leading to the identification or location of any of the leaders of the LockBit ransomware gang. The bounty offer comes from the US State Department, following this week’s disruption of the criminal…