Security News

BreachForums Returns Just Weeks After FBI Seizure - Honeypot or Blunder?
2024-05-29 07:11

The online criminal bazaar BreachForums has been resurrected merely two weeks after a U.S.-led coordinated law enforcement action dismantled and seized control of its infrastructure. Cybersecurity...

Avoiding the cybersecurity blame game
2024-05-29 04:30

To me, if someone follows procedures exactly but the procedure itself has been poorly designed, apportioning any blame to the individual is both unfair and counterproductive. It's all very well saying, "Don't blame the individual, blame the company".

RansomLord: Open-source anti-ransomware exploit tool
2024-05-29 04:00

RansomLord is an open-source tool that automates the creation of PE files, which are used to exploit ransomware pre-encryption. "I created RansomLord to demonstrate ransomware is not invincible, has vulnerabilities and its developers make mistakes and can write bad code just like everyone else," hyp3rlinx, developer of RansomLord, told Help Net Security.

Cybersecurity jobs available right now: May 29, 2024
2024-05-29 03:30

As a Cybersecurity Architect, you will lead the design and implementation of security architecture for Isar Aerospace's systems, networks, and applications. As a Cybersecurity Engineer Cloud & Industrial AI, you will combine the approaches of Product & Solution Security and IT Security to ensure a holistic cybersecurity approach for company's Software-as-a-Service focused products.

A closer look at GenAI impact on businesses
2024-05-29 03:00

This article includes excerpts from various reports that provide statistics and insights on GenAI and its impact on businesses. GenAI enables cybersecurity leaders to hire more entry-level talent.

First American December data breach impacts 44,000 people
2024-05-28 22:22

First American Financial Corporation, the second-largest title insurance company in the United States, revealed Tuesday that a December cyberattack led to a breach impacting 44,000 individuals. As the financial services company shared in a statement published on December 21 providing very few details regarding the nature of the incident, First American was forced to take some of its systems offline today to contain the impact of a cyberattack.

2.8M US folks learn their personal info was swiped months ago in Sav-Rx IT heist
2024-05-28 22:20

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Over 90 malicious Android apps with 5.5M installs found on Google Play
2024-05-28 21:48

Over 90 malicious Android apps were found installed over 5.5 million times through Google Play to deliver malware and adware, with the Anatsa banking trojan seeing a recent surge in activity. In February 2024, Threat Fabric reported that since late last year, Anatsa had achieved at least 150,000 infections via Google Play using various decoy apps in the productivity software category.

US govt sanctions cybercrime gang behind massive 911 S5 botnet
2024-05-28 19:02

The U.S. Treasury Department has sanctioned a cybercrime network comprising three Chinese nationals and three Thailand-based companies linked to a massive botnet controlling a residential proxy service known as "911 S5.". Researchers at the Canadian University of Sherbrooke revealed almost two years ago, in June 2022, that this illegitimate residential proxy service lured potential victims by offering free VPN services to install malware designed to add their IP addresses to the 911 S5 botnet.

US govt sanctions cybercrime gang behind massive 911 S5 botnet
2024-05-28 19:02

The U.S. Treasury Department has sanctioned a cybercrime network comprising three Chinese nationals and three Thailand-based companies linked to a massive botnet controlling a residential proxy service known as "911 S5.". Researchers at the Canadian University of Sherbrooke revealed almost two years ago, in June 2022, that this illegitimate residential proxy service lured potential victims by offering free VPN services to install malware designed to add their IP addresses to the 911 S5 botnet.