More than 200 regional and national government agencies have been impacted by the ransomware attack, and few of them are once again operational.

In an incident with direct parallels to the recent Ticketmaster compromise, an Aussie live events giant says it was breached via a third-party cloud provider, as ShinyHunters takes credit.

The notorious cyber espionage group has been harrying French interests for years, and isn't flagging now as the Paris Olympics approach.

Cops decimate cybercrime infrastructure used to steal data from nearly 2,000 people in Singapore last year.

Threat actors were able to breach Blackbaud's systems and compromise sensitive data, largely because of the company's poor cybersecurity practices and lack of encrypted data, the AG said.

The company has emerged from stealth with an AI-powered platform designed to give organizations visibility into unmanaged data.

Threat actors were able to breach the department using the credentials accessed through phishing emails.

The Arid Viper APT group is deploying AridSpy malware with Trojanized messaging applications and second-stage data exfiltration.

Though the company is informing affected individuals of a breach, it's keeping the nature and scope of the cybersecurity incident that led to it under wraps.

More claims are being made across the US and Canada compared with previous years, with healthcare organizations leading the way.

As city officials continue to investigate, it's unclear which systems were affected and whether it was a ransomware attack.

Accused cybercriminal has special skills that helped Conti and LockBit ransomware evade detection, according to law enforcement.

Lacework has been looking for a buyer for some time. The deal gives Fortinet a boost in the cloud security space.

London cops make arrests in connection with scam SMS messages, purportedly from official organizations, being sent out from bespoke phone mast.

The latest platform update from SolarWinds includes patches for three vulnerabilities, including two high-severity bugs.

Four suspects were taken into custody, accused of paying intermediaries in Moldova to inform criminals of their Red Notice status and wipe law-enforcement flags from the system.

Hijacking malware gets spread through TikTok's direct messaging and doesn't require the victim to click links or download anything.

Because of the role the Confluence Server plays in managing documentation and knowledge data bases, the researchers recommend users upgrade to patch CVE-2024-21683 as soon as possible.

International law enforcement Operation Endgame shifts its crackdown to focus on individual adversaries.

The previously unknown threat actor uses tools similar to those used by North Korean APT groups, according to Cisco Talos.

Though information such as dates of birth, email addresses, and home addresses were compromised, "the Beeb" assures individuals that financial information is still protected.

The political consultant who wrote the script and paid for the deepfake audio used in robocalls was fined $6 million by the FCC.

Corporate admins should patch the max-severity CVE-2024-23108 immediately, which allows unauthenticated command injection.

The committee is being set up as the ChatGPT creator begins to train its latest large language model, GPT-5, which will reach "a new level of capabilities."

Source: www.darkreading.com – Author: Dark Reading Staff 2 Min Read Source: Andrea Danti via Alamy Stock Photo YouTube has turned into a new front for malicious actors to deploy phishing, other malware, and bogus investment schemes, according to a report from researchers at security vendor Avast. The researchers specifically homed in on Lumma and RedLine […]

La entrada YouTube Becomes Latest Battlefront for Phishing, Deepfakes – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

Users get duped into downloading malicious files disguised to look like an application that uses artificial intelligence to alter voices.

The tech company has rolled out fixes for a type confusion vulnerability that has already been exploited by malicious actors.

The spyware is able to capture screenshots of a user's device every few seconds from any location globally.

Upgrade, an ARPA-H program, will focus on automating cybersecurity for healthcare institutions so that providers can focus on patient care.

The max-severity bug affects versions using the SAML single sign-on mechanism.

The startup's new platform addresses AI privacy, governance, and security so that enterprises can use AI safely and effectively.

As a newly independent company, SAGE Cyber will offer a platform that helps CISOs make data-driven decisions and optimize their security defenses.

Personalized phishing emails with fake collaboration opportunities and compromised video descriptions linking to malware are just some of the new tricks.

The Siren email mailing list will focus on operational impact and response, acting as a central location to provide information about threats and necessary post-disclosure activities.

The acquisition gives CyberArk new IoT identity and certificate life-cycle management, cryptographic code-signing, and other services to secure the enterprise cloud.

Financial firms covered under new regulations will be required to establish a clear response and communications plan for customer data breaches.

Google has rolled an emergency patch for CVE-2024-4947, the third Chrome zero-day it's addressed in the past week.

Instead of online contraband, the website now asks anyone with information that could help with the investigation to contact authorities.

At least 15 television channels were interrupted in Ukraine alone, which, reportedly, is not out of the norm in this "information war."

Episode 1 of Dark Reading Confidential brings Frederick “Flee” Lee, CISO of Reddit, Beth Burgin Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddit, to the table.

The city is still investigating the attack, and neither the group nor city officials have offered details about the ransomware demands.

Instead of building a list of users and identifying which systems each user can access, Token Security starts with a list of machines and determines who can access each system.

The research shows a significant drop in the number of tech CISOs that got a base salary increase in the past year — roughly 18% year-over-year.

Much of the funding will be used for product development and talent acquisition to cover more ground as the cybersecurity industry continues to evolve.

The startup's new identity and access management platform uncovers poorly monitored service accounts and secures them from abuse.

The growing amount of surveillance technology being deployed in the country is concerning due to Indonesia's increasing blows to citizens' civil rights.

Charges against the ransomware gang member included damage to computers, conspiracy to commit fraud, and conspiracy to commit money laundering.

The AI security startup's platform will allow organizations to define appropriate AI usage and enforce security policies.

The startup says its SaaS platform helps organizations detect and recover from ransomware attacks faster than "traditional" methods.