Security News

North Korean hackers targeted tech companies through JumpCloud and GitHub
2023-07-21 12:48

North Korean state-sponsored hackers have been linked to two recent cyberattack campaigns: one involving a spear-phishing attack on JumpCloud and the other targeting tech employees on GitHub through a social engineering campaign. "Fewer than 5 JumpCloud customers were impacted and fewer than 10 devices total were impacted, out of more than 200,000 organizations who rely on the JumpCloud platform for a variety of identity, access, security, and management functions,".

Tech support scammers go analog, ask victims to mail bundles of cash
2023-07-19 21:00

Cybercriminals are taking their business offline in a new approach to familiar technical support scams recently identified by the US Federal Bureau of Investigation. In a bulletin published yesterday, the FBI's Internet Crime Complaint Center says it's noticed a recent uptick in technical support scams across the US that, rather than urging victims to wire funds, send cryptocurrency or hand over gift card codes, is asking them to mail magazine-wrapped wads of cash.

FBI: Tech support scams now use shipping companies to collect cash
2023-07-19 09:17

FBI warns of a surge in tech support scams targeting the elderly across the United States and urging victims to dispatch cash concealed within magazines or similar items through shipping firms. While tech support scams have been around for years, the FBI says this is a departure from scammers' conventional tactics of soliciting their targets to send money using bank transfers, cryptocurrencies, or gift cards.

Using AI/ML to optimize your tech stack and enhance business efficiency
2023-07-19 04:30

In this Help Net Security interview, Arthur Hu, SVP, Global CIO and Services & Solutions Group CTO at Lenovo, discusses how AI/ML is optimizing tech stacks, the hurdles anticipated in its integration, the role of AI in enterprise resilience and agility, and strategic approaches to innovation despite budget constraints. We'll touch on the evolving role of CIOs and the potential for 'as-a-service' offerings to ease tech stack management.

Criminal IP and Tines Forge Powerful Tech Alliance
2023-07-14 14:01

Criminal IP, a leading Cyber Threat Intelligence search engine, has formed a powerful alliance with Tines, a renowned provider of no-code automation solutions. Explore Stories with Criminal IP API. Users can accelerate their automation efforts and address common use cases by accessing the Tines Story Library.

CIOs prioritize innovation over tech stack optimization
2023-07-12 03:30

Despite economic obstacles and constraints on IT budgets, global CIOs maintain a positive outlook on the potential of technology to provide significant benefits for their organizations, according...

Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic Routing
2023-07-07 18:12

Once the malicious software is installed, it redirects incoming calls to a call center under the control of the criminals. To facilitate the routing of voice traffic, "Letscall" utilizes cutting-edge technologies such as voice over IP and WebRTC. It also makes use of Session Traversal Utilities for NAT and Traversal Using Relays around NAT protocols, including Google STUN servers, to ensure high-quality phone or video calls and bypass NAT and firewall restrictions.

Australia plans to mandate file scanning for all tech companies
2023-06-21 17:49

Through them, any tech company doing business with Australians will be required to actively scan their emails, online photo libraries, cloud storage accounts and dating sites for illegal content. Part of the Commissioner's role has been to create and enforce a framework whereby illegal or damaging material can be removed at the eSafety Commissioner's request.

CIOs prioritize new technologies over tech stack optimization
2023-06-08 03:00

48% of CIOs are more likely to prioritize innovation in new technologies over optimizing their current tech stack. "The job of the CIO has never been more demanding, and the findings indicate they are taking increasing risks in response. The more complex the technology landscape, the more challenging it is for the CIO to enact organization-wide digital transformation and prioritize initiatives and investments that will deliver business outcomes," said Ken Wong, President of Lenovo Solutions and Services Group.

You might have been phished by the gang that stole North Korea’s lousy rocket tech
2023-06-02 05:15

The United States and the Republic of Korea have issued a joint cyber security advisory [PDF] about North Koreas "Kimsuky" cyber crime group. In their joint advisory, US and South Korean authorities said Kimsuky targets "Think tanks, academic institutions, and news outlets for the purpose of intelligence gathering." The South says the gang is also involved in stealing info used by the DPRK's satellite program.