Category Security

The UK government this week touted the success of a new initiative aimed at encouraging workers to embark on new careers in cyber, but experts say much more is needed to fill the skills gap. warns that you must do…

Undersea communications cables are becoming an increasing target for cyber threat actors whose incidents could cause massive disruption to the global Internet, a new report finds. Recorded Future notes that recent geopolitical developments, such as the Russia-Ukraine conflict, China’s heavy-handed…

June 27, 2023Ravi LakshmananMobile Security/Malware Since early March 2023, we have observed a new Android malware campaign pushing the Anatsa banking Trojan targeting banking customers in the US, UK, Germany, Austria, and Switzerland. “The attackers behind Anatsa aim to steal…

Enterprise security information and event management (SIEM) solutions fall short when it comes to detecting and combating cyber threats. This claim comes from CardinalOps 2023 State of SIEM Detection Risk ReportWe explored over 4,000 detection rules, 1 million log sources,…

June 27, 2023Ravi Lakshmanan Europol on Tuesday, encro chat In July 2020, 6,558 people were arrested worldwide and €900 million of illegal criminal proceeds were seized. Law enforcement agencies later discovered that a joint investigation launched by French and Dutch…

Attackers using the notorious banking Trojan Anatsa have launched a new campaign targeting banks in the US, UK and DACH regions (Germany, Austria and Switzerland). According to a new ThreatFabric blog post, the ongoing campaign will begin around March 2023…

June 27, 2023Ravi LakshmananSupply Chain / Software Security Cybersecurity researchers have discovered a new ongoing campaign targeting the npm ecosystem that utilizes a unique execution chain to deliver unknown payloads to targeted systems. “The packages in question appear to be…

A third-party vendor hack called Pilot Credentials led to a data breach affecting pilot information for American Airlines and Southwest Airlines. The breach, which was discovered on May 3, was reportedly limited to the vendor’s systems and did not compromise…

June 27, 2023Ravi LakshmananMalware/Cyberthreat A new process injection technique called Mockingjay can be exploited by threat actors to bypass security solutions and execute malicious code on compromised systems. “The injection is performed without allocating space, setting permissions, or even starting…

This week’s Graham Cluley Security News sponsors are: infoblocks. Thanks for the support of an amazing team! Infoblox recognizes that understanding DNS and having the right tools and techniques to defend your DNS infrastructure is paramount to preventing potential attacks…