Security News > 2023 > August

MSI: Recent wave of Windows blue screens linked to MSI motherboards
2023-08-25 16:36

MSI has officially confirmed the recent surge of blue screens of death encountered by Windows users after installing this week's optional preview updates is linked to some of its motherboard models. "MSI has received several reports of users encountering a Blue Screen of Death that has an error message that reads 'UNSUPPORTED PROCESSOR' with MSI's 600/700 series motherboards after installing the Windows 11 update, KB5029351 Preview," the company said.

ICO calls on social media firms to protect user's data from scraping
2023-08-25 16:28

UK's Information Commissioner's Office, together with eleven data protection and privacy authorities from around the world, have published a statement calling social media platforms to up their protections against data scrapers. Data scraping is the process of extracting large amounts of publicly available data from websites using automated tools such as bots, collecting information that users have published on that platform.

ICO calls social media firms to protect people's data from scraping
2023-08-25 16:28

UK's Information Commissioner's Office, together with eleven data protection and privacy authorities from around the world, have published a statement calling social media platforms to up their protections against data scrapers. Data scraping is the process of extracting large amounts of publicly available data from websites using automated tools such as bots, collecting information that users have published on that platform.

Microsoft: Stealthy Flax Typhoon hackers use LOLBins to evade detection
2023-08-25 15:56

Microsoft has identified a new hacking group it now tracks as Flax Typhoon that argets government agencies and education, critical manufacturing, and information technology organizations likely for espionage purposes. Operating since at least mid-2021, Flax Typhoon mainly targeted organizations in Taiwan, although Microsoft discovered some victims in Southeast Asia, North America, and Africa.

Leaseweb is restoring ‘critical’ systems after security breach
2023-08-25 14:59

Leaseweb, one of the world's largest cloud and hosting providers, notified people that it's working on restoring "Critical" systems disabled following a recent security breach.Leaseweb took down some of the impacted systems to mitigate security risks and says that its teams are now working to restore critical systems affected in this incident.

Kroll data breach exposes info of FTX, BlockFi, Genesis creditors
2023-08-25 14:10

Multiple reports on social media warn of a data breach at financial and risk advisory company Kroll that resulted in exposing to an unauthorized third-party the personal data of some credit claimants. Kroll is facilitating claims for insolvent companies FTX, BlockFi, and Genesis Global Holdco.

Two LAPSUS$ Hackers Convicted in London Court for High-Profile Tech Firm Hacks
2023-08-25 13:52

Two U.K. teenagers have been convicted by a jury in London for being part of the notorious LAPSUS$ transnational gang and for orchestrating a series of brazen, high-profile hacks against major tech firms and demanding a ransom in exchange for not leaking the stolen information. Central to pulling off the extortion schemes was their ability to conduct SIM swapping and prompt bombing attacks to gain unauthorized access to corporate networks after an extensive social engineering phase.

Lazarus Group exploited ManageEngine vulnerability to target critical infrastructure
2023-08-25 12:18

North Korean state-sponsored hackers Lazarus Group have been exploiting a ManageEngine ServiceDesk vulnerability to target internet backbone infrastructure and healthcare institutions in Europe and the US. The group leveraged the vulnerability to deploy QuiteRAT, downloaded from an IP address previously associated with the Lazarus hacking group. The malware Cisco Talos researchers dubbed QuiteRAT is a simple remote access trojan that's similar to Lazarus Group's MagicRAT malware, only smaller in size.

Learn How Your Business Data Can Amplify Your AI/ML Threat Detection Capabilities
2023-08-25 11:49

Imagine leveraging this data not only for profit but also for enhanced AI and Machine Learning threat detection. Join our groundbreaking webinar, "Clean Data, Better Detections: Using Your Business Data for AI/ML Detections," to unearth how your distinct business data can be the linchpin to amplifying your AI/ML threat detection prowess.

Hacking Food Labeling Laws
2023-08-25 11:03

This article talks about new Mexican laws about food labeling, and the lengths to which food manufacturers are going to ensure that they are not effective. There are the typical high-pressure lobbying tactics and lawsuits.