Security News

Top 7 Trends Shaping SaaS Security in 2024
2023-12-18 14:40

Over the past few years, SaaS has developed into the backbone of corporate IT. Service businesses, such as medical practices, law firms, and financial services firms, are almost entirely SaaS...

Rhadamanthys Malware: Swiss Army Knife of Information Stealers Emerges
2023-12-18 14:31

The developers of the information stealer malware known as Rhadamanthys are actively iterating on its features, broadening its information-gathering capabilities and also incorporating a plugin...

Microsoft is working on a more secure print system for Windows
2023-12-18 13:53

After announcing a gradual elimination of third-party printer drivers on Windows earlier this year, Microsoft has now unveiled its plan for enhancing security by introducting Windows Protected Print Mode. For years, the Windows print system has been a key target for attackers because the Windows Print Spooler service/process has high privileges that can be exploited to execute malicious files.

Mortgage giant Mr. Cooper data breach affects 14.7 million people
2023-12-18 13:40

Mr. Cooper is sending data breach notifications warning that a recent cyberattack has exposed the data of 14.7 million customers who have, or previously had, mortgages with the company.Mr. Cooper is a Dallas-based mortgage lending firm that employs approximately 9,000 people and has millions of customers.

Qakbot returns in fresh assault on hospitality sector
2023-12-18 12:45

The Qakbot botnet has been disrupted this summer, but cybercriminals are not ready to give up on the malware: Microsoft's threat analysts have spotted a new phishing campaign attempting to deliver it to targets in the hospitality industry. In August, the US Department of Justice has successfully disrupted the Qakbot botnet by seizing 52 servers and removing the malware loader from over 700,000 victim computers worldwide.

National Grid latest UK org to zap Chinese kit from critical infrastructure
2023-12-18 12:36

The National Grid is reportedly the latest organization in the UK to begin pulling China-manufactured equipment from its network over cybersecurity fears. The contract with the UK subsidiary of China's state-owned Nari Technology, NR Electric UK, was terminated after seeking advice from the National Cyber Security Centre, according to sources who spoke to the Financial Times.

Four U.S. Nationals Charged in $80 Million Pig Butchering Crypto Scam
2023-12-18 12:13

Four U.S. nationals have been charged for participating in an illicit scheme that earned them more than $80 million via cryptocurrency investment scams. The defendants – Lu Zhang, 36, of Alhambra,...

Unmasking the Dark Side of Low-Code/No-Code Applications
2023-12-18 10:31

Low-code/no-code (LCNC) and robotic process automation (RPA) have gained immense popularity, but how secure are they? Is your security team paying enough attention in an era of rapid digital...

MongoDB corporate systems breached, customer data exposed
2023-12-18 10:17

Database management company MongoDB has suffered a breach: attackers have gained access to some of its corporate systems and customer data and metadata. On Sunday, MongoDB noted that, at this time, they "Have found no evidence of unauthorized access to MongoDB Atlas clusters", not that the Atlas cluster authentication system - which is separate from MongoDB corporate systems - has been compromised.

QakBot Malware Resurfaces with New Tactics, Targeting the Hospitality Industry
2023-12-18 09:29

A new wave of phishing messages distributing the QakBot malware has been observed, more than three months after a law enforcement effort saw its infrastructure dismantled by infiltrating its...