Security News > 2024 > May

Russian indicted for selling access to US corporate networks
2024-05-28 18:32

A 31-year-old Russian national named Evgeniy Doroshenko has been indicted for wire and computer fraud in the United States for allegedly acting as an "Initial access broker" from February 2019 to May 2024. An initial access broker is a threat actor who breaches corporate networks and then sells that access to other threat actors, who commonly use the access to conduct data theft or ransomware attacks.

Microsoft links North Korean hackers to new FakePenny ransomware
2024-05-28 17:58

Microsoft has linked a North Korean hacking group it tracks as Moonstone Sleet to FakePenny ransomware attacks, which have led to millions of dollars in ransom demands. Unlike previous ransomware attacks coordinated by North Korean state hackers, in which victims were asked to pay $100,000, the ransom demanded by the Moonstone Sleet attackers was $6.6 million in BTC. Microsoft's assessment of this attack concluded that Moonstone Sleet's primary motivation for deploying the ransomware was financial gain.

SpiderOak One customers threaten to jump ship following datacenter upgrade
2024-05-28 16:45

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Exploit released for maximum severity Fortinet RCE bug, patch now
2024-05-28 16:16

Security researchers have released a proof-of-concept exploit for a maximum-severity vulnerability in Fortinet's security information and event management solution, which was patched in February.On Tuesday, over three months after Fortinet released security updates to patch this security flaw, Horizon3's Attack Team shared a proof-of-concept exploit and published a technical deep-dive.

Christie’s confirms breach after RansomHub threatens to leak data
2024-05-28 16:10

Yesterday, the RansomHub ransomware group added Christie's on its extortion page on the dark web, claiming it had breached the company and stole sensitive client data. A Christie's spokesperson confirmed to BleepingComputer that the company had suffered a data breach that impacted some clients.

Ad blocker users say YouTube videos are now skipping to the end
2024-05-28 14:21

The issue began yesterday, and although it does not appear to impact everyone, it is far from isolated, with affected users reporting that it affects all YouTube videos. The reports come from users of ad blockers on both Chrome and Firefox, like Adblock Plus, as well as web browsers that have integrated ad-blocking systems, such as OperaGX. A first reported by 9to5Google, many users are accusing YouTube of intentionally causing this problem, as Google has begun cracking down on the use of ad blockers on YouTube over the past year.

Auction house Christie’s confirms criminals stole some client data
2024-05-28 13:30

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Will Australia Ever Dig Itself Out of the Cybersecurity Skills Shortage?
2024-05-28 13:29

Australia continues to grapple with the ramifications of a massive cyber security skills shortage, underscored by another recent large-scale data breach. A multi-faceted cyber security strategy, supported by investments into scaling cyber capabilities, will help Australia address the root causes that explain why so many data breaches are being reported with such frequency.

Top 5 Cloud Trends U.K. Businesses Should Watch in 2024
2024-05-28 13:21

TechRepublic identified the top five emerging cloud technology trends that businesses in the U.K. should be aware of this year.

Get 3 Years of Rock-Solid Protection With Surfshark VPN for $67.20 by 5/31
2024-05-28 13:01

Find out more about why Surfshark VPN is a great choice for your digital privacy. Get advantage of this limited time offer by using code ENJOY20 at checkout.