Category Security

Addressing cyber threats before they have a chance to strike or inflict serious damage is by far the best security approach any company can embrace. Achieving this takes a lot of research and proactive threat hunting. The problem here is…

A sophisticated phishing attack targeting a Turkish defense sector organization was recently uncovered by security researchers, shedding light on the evolving tactics of threat actor TA397, also known as “Bitter.”  This campaign, observed by Proofpoint, deployed spear phishing emails containing…

Dec 17, 2024Ravie LakshmananMalware / Credential Theft A new social engineering campaign has leveraged Microsoft Teams as a way to facilitate the deployment of a known malware called DarkGate. “An attacker used social engineering via a Microsoft Teams call to…

A ransomware attack targeting the Texas Tech University Health Sciences Center (TTUHSC) has compromised the personal and medical information of 1.4 million individuals. The breach, which occurred between September 17 and September 29 2024, involved data exfiltration and significant disruptions…

Dec 17, 2024Ravie LakshmananCyber Attack / Malware A new phishing campaign has been observed employing tax-themed lures to deliver a stealthy backdoor payload as part of attacks targeting Pakistan. Cybersecurity company Securonix, which is tracking the activity under the name…

The European Union (EU) has announced sanctions against Russian cyber actors for carrying out attacks and disinformation campaigns abroad. The European Council imposed measures against 16 individuals and three entities described as undertaking “destabilizing actions abroad” on behalf of the…

Dec 17, 2024The Hacker NewsWebinar / Risk Management Even the best companies with the most advanced tools can still get hacked. It’s a frustrating reality: you’ve invested in the right solutions, trained your team, and strengthened your defenses. But breaches…

Generative AI (GenAI) integration continues to be at the top of many cybersecurity leaders’ minds, but not at all costs, according to a new CrowdStrike survey published on December 17. Of the 1022 global cybersecurity and IT professionals approached for…

Dec 17, 2024Ravie LakshmananCyber Espionage / Malware A suspected South Asian cyber espionage threat group known as Bitter targeted a Turkish defense sector organization in November 2024 to deliver two C++-malware families tracked as WmRAT and MiyaRAT. “The attack chain…

The US government has published a new draft National Cyber Incident Response Plan (NCIRP), setting out the roles and responsibilities for public and private sector organizations during cyber incidents. The Cybersecurity and Infrastructure Security Agency (CISA) is inviting feedback on…