Security News

Chinese APT40 group swifly leverages public PoC exploits
2024-07-09 11:33

Chinese state-sponsored cyber group APT40 is amazingly fast at adapting public proof-of-concept exploits for vulnerabilities in widely used software, an advisory released by intelligence and cybersecurity agencies from eight countries warns. APT 40 "Appears to prefer exploiting vulnerable, public-facing infrastructure over techniques that require user interaction, such as phishing campaigns," and has been known to exploit vulnerabilities in software such as Log4J, Atlassian Confluence and Microsoft Exchange.

Develop Valuable Security and Risk Management Skills for Just $30 Through 7/21
2024-07-09 11:15

For either case, you can now develop information security skills with the help of The CISSP Security & Risk Management Training Bundle for just $29.97 through July 21. CISSP: Security & Risk Management covers the security concepts that provide the foundation for all of the other domains.

Nearly 10 Billion Passwords Leaked in Biggest Compilation of All Time
2024-07-09 11:08

Nearly 10 billion passwords have been leaked on a popular hacking forum, according to Cybernews.

HUMINT: Diving Deep into the Dark Web
2024-07-09 11:00

Clear Web - Web assets that can be viewed through public search engines, including media, blogs, and other pages and sites. Deep Web - Websites and forums that are unindexed by search engines.

Houthi rebels are operating their own GuardZoo spyware
2024-07-09 10:56

Fairly 'low budget', unsophisticated malware, say researchers, but it can collect the same data as Pegasus Interview When it comes to surveillance malware, sophisticated spyware with complex...

The 6 Best Governance, Risk & Compliance (GRC) Tools for 2024
2024-07-09 10:22

If you're ready to learn how GRC software can enhance your business's risk and compliance operations, you've come to the right place. This article compares the top GRC tools available in 2024.

GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel
2024-07-09 10:05

Military personnel from Middle East countries are the target of an ongoing surveillanceware operation that delivers an Android data-gathering tool called GuardZoo. GuardZoo is a modified version of an Android remote access trojan named Dendroid RAT that was first discovered by Broadcom-owned Symantec in March 2014.

Microsoft China staff can't log on with an Android, so Redmond buys them iThings
2024-07-09 06:32

Theregister.com needs to review the security of your connection before proceeding. Theregister.com to respond.....

Scammers double-scam victims by offering to help recover from scams
2024-07-09 05:58

Australia's Competition and Consumer Commission has warned that scammers are targeting scam victims with fake offers to help them recover from scams. The Commission today warned that scammers are targeting victims of scams with schemes that solicit an up-front fee to recover money lost in past scams.

Cybersecurity Agencies Warn of China-linked APT40's Rapid Exploit Adaptation
2024-07-09 05:56

Cybersecurity agencies from Australia, Canada, Germany, Japan, New Zealand, South Korea, the U.K., and the U.S. have released a joint advisory about a China-linked cyber espionage group called APT40, warning about its ability to co-opt exploits for newly disclosed security flaws within hours or days of public release. "APT 40 has previously targeted organizations in various countries, including Australia and the United States," the agencies said.