Security News > 2024 > May

Cyber Espionage Alert: LilacSquid Targets IT, Energy, and Pharma Sectors
2024-05-30 15:26

A previously undocumented cyber espionage-focused threat actor named LilacSquid has been linked to targeted attacks spanning various sectors in the United States (U.S.), Europe, and Asia as part...

Cooler Master confirms customer info stolen in data breach
2024-05-30 15:01

Computer hardware manufacturer Cooler Master has confirmed that it suffered a data breach on May 19, allowing a threat actor to steal customer data. The threat actor also shared data samples, allowing BleepingComputer to confirm with numerous customers listed in the breach that their data was accurate and that they recently requested support or an RMA from Cooler Master.

Cooler Master confirms customer data stolen in data breach
2024-05-30 15:01

Computer hardware manufacturer Cooler Master has confirmed that it suffered a data breach on May 19, allowing a threat actor to steal customer data. The threat actor also shared data samples, allowing BleepingComputer to confirm with numerous customers listed in the breach that their data was accurate and that they recently requested support or an RMA from Cooler Master.

RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability
2024-05-30 14:24

The threat actors behind the RedTail cryptocurrency mining malware have added a recently disclosed security flaw impacting Palo Alto Networks firewalls to its exploit arsenal. The addition of the...

What Is ShrinkLocker? New Ransomware Targets Microsoft BitLocker Encryption Feature
2024-05-30 14:21

It exploits the Microsoft BitLocker encryption feature to encrypt the entire local drive and remove the recovery options before shutting down the PC. ShrinkLocker was discovered by cybersecurity firm Kaspersky, and analysts have observed variants in Mexico, Indonesia and Jordan. BitLocker has been used to stage ransomware attacks in the past, but this strain has "Previously unreported features to maximise the damage of the attack," Kaspersky said in a press release.

BBC suffers data breach impacting current, former employees
2024-05-30 14:02

The BBC has disclosed a data security incident that occurred on May 21, involving unauthorized access to files hosted on a cloud-based service, compromising the personal information of BBC Pension Scheme members. As per the reports, the incident impacted roughly 25,000 people, including current and former employees of Britain's national public service broadcaster.

Cybercriminals raid BBC pension database, steal records of over 25,000 people
2024-05-30 14:02

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities
2024-05-30 13:49

Cybersecurity researchers have warned that multiple high-severity security vulnerabilities in WordPress plugins are being actively exploited by threat actors to create rogue administrator accounts...

IT worker sued over ‘vengeful’ cyber harassment of policeman who issued a jaywalking ticket
2024-05-30 13:00

Over the following two weeks, the officer - identified only as John Doe - said he believed Spatafore was trying to break into his personal email and Xfinity accounts. The original complaint [PDF], filed on October 19 2021 alleges that Spatafore contacted "Thousands" of companies and that contact attempts persisted up until the complaint was filed.

How to Build Your Autonomous SOC Strategy
2024-05-30 11:44

Security leaders are in a tricky position trying to discern how much new AI-driven cybersecurity tools could actually benefit a security operations center (SOC). The hype about generative AI is...