Category Security

June 3, 2023Ravi LakshmananPrivacy / Technology The US Federal Trade Commission (FTC) has fined Amazon a total of $30.8 million over a series of privacy violations involving the Alexa Assistant and Ring security cameras. This includes a $25 million fine…

A survey of global cybersecurity leaders by the 2023 Certified CISO Hall of Fame Report commissioned by the EC-Council identified four critical areas of concern: cloud security, data security, security governance, and a shortage of cybersecurity talent. EC-Council, a global…

June 3, 2023Ravi LakshmananEndpoint Security/Linux An analysis of a Linux variant of a new ransomware strain called BlackSuit reveals important similarities to another ransomware family called Royal. Trend Micro, which investigated x64 VMware ESXi versions targeted for Linux machines, said…

Security researchers at ReversingLabs have discovered a new attack that uses compiled Python code to evade detection. According to Carlo Zanchi, reverse engineer at ReversingLabs, this may be the first example of a supply chain attack leveraging the ability to…

US and South Korean security officials have jointly issued a warning about North Korea’s use of social engineering tactics in cyberattacks. The document was released Thursday by the Federal Bureau of Investigation (FBI), the US State Department, the National Security…

Enzo Biochem, a biotechnology company famous for creating and distributing DNA-based tests designed to identify viral and bacterial diseases, recently announced in filings with the Securities and Exchange Commission (SEC) has admitted to being the victim of a ransomware attack.…

June 2, 2023Ravi LakshmananMalware/Cyberthreat China’s national stage group known as camaro dragon is linked to yet another backdoor designed for information gathering purposes. Israeli cybersecurity firm Check Point, dubbing the Go-based malware TinyNote, said it acts as a first-stage payload…

June 2, 2023Ravi Lakshmananbotnet/malware A Spanish-speaking user in Latin America says, Horabot Since at least November 2020. “Horabot allows attackers to take control of a victim’s Outlook mailbox, steal contact email addresses, and deliver phishing emails containing malicious HTML attachments,”…

According to Group-IB, a recently discovered Chinese phishing group has expanded to the Middle East with a new scam aimed at harvesting personal and payment data from victims. A Singapore-based threat intelligence firm reported the discovery of the ‘PostalFurious’ group…

Data security itself is being reinvented. As new data security posture management solutions enter the market, organizations increasingly recognize the opportunity to provide evidence-based security that proves how data is protected. But what exactly is a data security posture and…