Security News

Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms
2023-10-18 12:27

Citrix is warning of exploitation of a recently disclosed critical security flaw in NetScaler ADC and Gateway appliances that could result in exposure of sensitive information. Tracked as...

Is Collaboration The Key To Aussie Tech Challenges?
2023-10-17 15:22

As Australian organisations and government departments continue to struggle with IT resourcing, a new wave of collaboration potentially represents the solution. Collaboration allows departments to address challenges together.

Another security update, Apple? You're really keeping up with your tech rivals
2023-10-05 18:16

Apple has demonstrated that it can more than hold its own among the tech giants, at least in terms of finding itself on the wrong end of zero-day vulnerabilities. iOS and iPadOS have again come under attack, and Apple has rushed out a fix to ward off miscreants.

CISO’s compass: Mastering tech, inspiring teams, and confronting risk
2023-10-03 04:30

In this Help Net Security interview, Okey Obudulu, CISO at Skillsoft, talks about the increasing complexity of the CISO role and challenges they face. With the increasing complexity of the CISO role, what are the top three challenges you believe they face, and how can they best address these?

Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagged by NLX
2023-09-26 10:32

How To Use This Report Enhance situational awareness of techniques used by threat actors Identify potential attacks targeting your industry Gain insights to help improve and accelerate your...

India's biggest tech centers named as cyber crime hotspots
2023-09-21 06:57

India is grappling with a three-and-a-half year surge in cyber crime, with analysis suggesting cities like Bengaluru and Gurgaon - centers of India's tech development - are also hubs of evil activity. The report - A Deep Dive into Cybercrime Trends Impacting India from the non-profit Future Crime Research Foundation - identified cyber crime hot spots, as well as the most popular types of infosec assaults, from January 2020 until June 2023.

Cybersecurity risks dampen corporate enthusiasm for tech investments
2023-09-15 04:00

64% of IT leaders believe that cybersecurity concerns are negatively impacting their organization's willingness to invest in innovative tech, according to a report by HPE Aruba Networking. There is also a growing gulf between tech demands and the IT team's capability to manage it all - 66% of IT leaders have concerns about their organization's ability to keep up with the latest tech and digital demands, and 55% say their IT teams are already stretched to capacity.

Big Tech has failed to police Russian disinformation, EC study concludes
2023-09-05 17:45

The power of the EU's Digital Services Act to actually police the world's very large online platforms has been tested in a new study focused on Russian social media disinformation. The independent study of the DSA's risk management framework published by the EU's executive arm, the European Commission, concluded that commitments by social media platforms to mitigate the reach and influence of global online disinformation campaigns have been generally unsuccessful.

Earth Estries' Espionage Campaign Targets Governments and Tech Titans Across Continents
2023-08-31 09:22

A hacking outfit nicknamed Earth Estries has been attributed to a new, ongoing cyber espionage campaign targeting government and technology industries based in the Philippines, Taiwan, Malaysia, South Africa, Germany, and the U.S. "The threat actors behind Earth Estries are working with high-level resources and functioning with sophisticated skills and experience in cyber espionage and illicit activities," Trend Micro researchers Ted Lee, Lenart Bermejo, Hara Hiroaki, Leon M Chang, and Gilbert Sison said. Active since at least 2020, Earth Estries is said to share tactical overlaps with another nation-state group tracked as FamousSparrow, which was first exposed by ESET in 2021 as exploiting ProxyLogon flaws in Microsoft Exchange Server to penetrate hospitality, government, engineering, and legal sectors.

Two LAPSUS$ Hackers Convicted in London Court for High-Profile Tech Firm Hacks
2023-08-25 13:52

Two U.K. teenagers have been convicted by a jury in London for being part of the notorious LAPSUS$ transnational gang and for orchestrating a series of brazen, high-profile hacks against major tech firms and demanding a ransom in exchange for not leaking the stolen information. Central to pulling off the extortion schemes was their ability to conduct SIM swapping and prompt bombing attacks to gain unauthorized access to corporate networks after an extensive social engineering phase.