Security News

Cyber insurance isn’t the answer for ransom payments
2024-06-07 04:30

"Our report delivers a clear message: ransomware attacks will continue, be more severe than predicted, and the overall impact will cost organizations more than they expect. Organizations must take action to ensure cyber resiliency and acknowledge that rapid, clean recovery matters most," added Russell. Despite increased focus on cyber-preparedness, organizations still face a misalignment between their backup and cyber teams.

Unpacking CISA’s AI guidelines
2024-06-07 04:00

Please turn on your JavaScript for this page to function normally. CISA's late April AI and infrastructure guidelines address 16 sectors along with their cybersecurity needs and operations concerning the growth of AI as a tool to build both federal and vendor cybersecurity infrastructure in the federal marketplace.

26% of organizations lack any form of IT security training
2024-06-07 03:30

26% of organizations don’t provide IT security training to end-users, according to Hornetsecurity. The Hornetsecurity survey, which compiled feedback from industry professionals worldwide, also...

POC exploit code published for 9.8-rated Apache HugeGraph RCE flaw
2024-06-07 01:16

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Los Angeles Unified School District investigates data theft claims
2024-06-06 22:44

Los Angeles Unified School District officials are investigating a threat actor's claims that they're selling stolen databases containing records belonging to millions of students and thousands of teachers. The threat actor selling the allegedly stolen data for $1,000 says the CSV files put up for sale on a hacking forum contain over 11GB of data, including over 26 million records with student information, more than 24,000 teacher records, and around 500 containing staff information.

Hackers exploit 2018 ThinkPHP flaws to install ‘Dama’ web shells
2024-06-06 21:26

Chinese threat actors are targeting ThinkPHP applications vulnerable to CVE-2018-20062 and CVE-2019-9082 to install a persistent web shell named Dama. The web shell enables further exploitation of the breached endpoints, such as enlisting them as part of the attackers' infrastructure to evade detection in subsequent operations.

Ukraine says hackers abuse SyncThing tool to steal data
2024-06-06 20:43

The attack utilizes the legitimate file-syncing software SyncThing in combination with malware called SPECTR. Vermin's apparent motive is to steal sensitive information from military organizations. SyncThing establishes a peer-to-peer connection for data synchronization, which is used for stealing documents and account passwords.

Ukraine says hackers abuse SyncThing data sync tool to steal data
2024-06-06 20:43

The attack utilizes the legitimate file-syncing software SyncThing in combination with malware called SPECTR. Vermin's apparent motive is to steal sensitive information from military organizations. SyncThing establishes a peer-to-peer connection for data synchronization, which is used for stealing documents and account passwords.

FBI encourages LockBit victims to step right up for free decryption keys
2024-06-06 19:45

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

FBI encourages LockBit victims to step right up for free encryption keys
2024-06-06 19:45

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.