Category Security

Ukrainian cyber police thwarted a prolific phishing gang that claimed to have earned 160 million hryvnia ($4.3 million) from victims across Europe. Ukrainian cyber police said in a notice yesterday that more than 30 locations were searched as part of…

March 31, 2023Rabbi LakshmananCyber ​​Crime/Hacking News Ukrainian cyber police, working with Czech law enforcement, have arrested several members of a cybercrime gang that set up phishing sites targeting European users. Two of the arrested affiliates are believed to be organizers,…

The UK’s Information Commissioner’s Office (ICO) has called for “substantially improved” data protection processes for organizations handling information on people living with HIV after reprimanding the NHS agency. NHS Hyland said it sent emails to 37 people who were likely…

March 31, 2023Rabbi LakshmananCyber ​​Threats / Supply Chain Attacks Enterprise communications software maker 3CX confirmed Thursday that multiple versions of its desktop apps for Windows and macOS were affected by a supply chain attack. Version numbers include 18.12.407 and 18.12.416…

The UK’s leading cybersecurity agency has urged the country’s business leaders to ‘get on top’ of cyber risks after releasing an updated toolkit to help them do so. GCHQ’s National Cyber ​​Security Center (NCSC) says the updated Cyber ​​Security Board…

U.S. Food and Drug Administration (FDA) staff have released new guidelines to strengthen the cybersecurity level of Internet-connected products used by hospitals and healthcare providers. According to a guidance document released today, applicants seeking approval for new medical devices have…

March 30, 2023Rabbi LakshmananEndpoint Security/Malware Chinese government-backed threat group tracked as red golf It is allegedly caused by the use of a custom Windows and Linux backdoor called KEYPLUG. Recorded Future told HackerNews, “RedGolf is a particularly prolific Chinese government-backed…

Nearly four in five employees (71%) store sensitive work passwords on their personal phones, and 66% use a personal texting app for work. The data comes from SlashNext’s latest Bring Your Own Device (BYOD) Security Report, which also suggests that…

March 30, 2023Rabbi LakshmananCloud security/vulnerability Details have emerged about a currently patched vulnerability in Azure Service Fabric Explorer (SFX) that could lead to unauthenticated remote code execution. This issue, tracked as CVE-2023-23383 (CVSS score: 8.2), was dubbed “Super FabriXss” by…

Let’s say you live in Russia and want to use the Tor browser to anonymize your web browsing. There is a problem. Many people in Russia find their access to the official Tor website blocked by their ISP. So what…