Security News > 2023

Develop Valuable Security and Risk Management Skills for Just $30 Through 1/1
2023-12-29 10:00

With cyberthreats and cyberattacks always on the rise, developing security and risk management skills could be one of the best moves for your business or career. For either case, you can now develop information security skills with the help of The 2023 CISSP Security & Risk Management Training Bundle for just $29.97 through January 1.

Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks
2023-12-29 09:09

Nation-state actors affiliated to North Korea have been observed using spear-phishing attacks to deliver an assortment of backdoors and tools such as AppleSeed, Meterpreter, and TinyNuke to seize...

CEO arranged his own cybersecurity, with predictable results
2023-12-29 08:01

"We provided a lot of services after they were penetrated by a state actor", Jack told On Call, adding that this incident sparked a "Panic purchase" of defensive tools and the know-how to run 'em. Jack rated the client's CEO as " possibly happy with our service but not happy with the amount of money.

Why you need to extend enterprise IT security to the mainframe
2023-12-29 05:30

Organizations with mainframes face a unique challenge: extending consistency across the entire enterprise, including mainframe environments. A common discrepancy arises as the IAM system used in the enterprise often differs from the one employed for mainframe authentication.

Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks
2023-12-29 05:16

Microsoft on Thursday said it’s once again disabling the ms-appinstaller protocol handler by default following its abuse by multiple threat actors to distribute malware. “The observed threat actor...

API security in 2024: Predictions and trends
2023-12-29 05:00

In 2024, we anticipate several key trends and predictions that will shape the landscape of API security. The API security market is currently in its early days, but as API security climbs the business agenda, we expect to see significant innovation in this space.

Tech upgrades for first responders are a necessity, not a luxury
2023-12-29 04:30

Public safety professionals want technology upgrades and adoption of federal standards for first responder IT security, reporting and efficiency, according to Mark43. "We heard a resounding response from first responders across the country: They are concerned about their public safety agency's ability to withstand cyberattacks and natural disasters, given the ever-increasing number and severity of bad actors attacking public infrastructure as well as the uptick in extreme weather incidents," said Matthew Polega, President, Mark43.

AI software market to hit $307 billion by 2027
2023-12-29 04:00

The worldwide revenue for AI software will reach $307 billion in 2027, according to IDC. The forecast for AI-centric software includes Artificial Intelligence Platforms, AI Applications, AI System Infrastructure Software, and AI Application Development and Deployment software. A recent IDC survey found that, in the next 12 months, roughly a third of respondents believe that organizations will prefer to buy AI software from a vendor or use in-house support alongside vendor-supplied AI software for specific use cases or application areas.

#AI
Steam game mod breached to push password-stealing malware
2023-12-28 21:19

Downfall, a fan expansion for the popular Slay the Spire indie strategy game, was breached on Christmas Day to push Epsilon information stealer malware using the Steam update system. As developer Michael Mayhem told BleepingComputer, the compromised package is the prepackaged standalone modified version of the original game and not a mod installed via Steam Workshop.

Game mod on Steam breached to push password-stealing malware
2023-12-28 21:19

Downfall, a fan expansion for the popular Slay the Spire indie strategy game, was breached on Christmas Day to push Epsilon information stealer malware using the Steam update system. As developer Michael Mayhem told BleepingComputer, the compromised package is the prepackaged standalone modified version of the original game and not a mod installed via Steam Workshop.