BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers
Three malicious packages published to the npm registry in September 2024 have been found to contain a known malware called...
News
Sailing the Seven Seas Securely from Port to Port – OT Access Security for Ships and Cranes
Operational Technology (OT) security has affected marine vessel and port operators, since both ships and industrial cranes are being digitalized...
THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 – Oct 27)
Cybersecurity news can sometimes feel like a never-ending horror movie, can't it? Just when you think the villains are locked...
Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel
A new attack technique could be used to bypass Microsoft's Driver Signature Enforcement (DSE) on fully patched Windows systems, leading...
Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining
The infamous cryptojacking group known as TeamTNT appears to be readying for a new large-scale campaign targeting cloud-native environments for...
Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions
Four members of the now-defunct REvil ransomware operation have been sentenced to several years in prison in Russia, marking one...
SEC Charges 4 Companies Over Misleading SolarWinds Cyber Attack Disclosures
The U.S. Securities and Exchange Commission (SEC) has charged four current and former public companies for making "materially misleading disclosures"...
CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities
The Computer Emergency Response Team of Ukraine (CERT-UA) has detailed a new malicious email campaign targeting government agencies, enterprises, and...
UK Government Promotes Cyber Essentials Certification for Enhanced Cybersecurity
The UK government is actively encouraging organizations to achieve Cyber Essentials Certification, emphasizing the significant benefits it offers in safeguarding...
AI Policy Development Ignoring Cybersecurity Teams: A Critical Concern
Cybersecurity teams are facing exclusion from AI policy development in enterprises, as revealed by recent research from ISACA at its...
AI National Security Memo: Key Actions by the White House for US Safety
The White House has unveiled a crucial National Security Memorandum (NSM) focused on AI, emphasizing its commitment to ensuring safe...
Lazarus Group Exploits Google Chrome Zero-Day Vulnerability in New Campaign
The Lazarus Group has recently exploited a zero-day vulnerability in Google Chrome, exposing systems to significant risks. A newly uncovered...
$1.25M Settlement for Penn State Over Cybersecurity Violations with DoD and NASA
Penn State has agreed to a $1.25 million settlement following allegations of inadequate cybersecurity measures related to its federal contracts....
New Data Governance Legislation Introduced by UK Government
The UK government is set to strengthen personal data governance with the New Data Governance Legislation, known as the Data...
Fortinet Confirms Exploit of Critical CVE-2024-47575 in FortiManager
Fortinet has confirmed the serious exploitation of a critical zero-day vulnerability, CVE-2024-47575, affecting its FortiManager network management solution. Fortinet has...
Change Healthcare Breach Impacts 100 Million Americans’ Personal Information
The Change Healthcare ransomware attack has drastically affected the personal information of 100 million Americans, marking a significant incident in...
Ukraine Issues Alert on Mass Phishing Campaign Targeting Citizens’ Data
Ukrainian authorities are on high alert regarding a mass phishing campaign designed to lure citizens into compromising their personal data....
Women in Digital Trust: Overcoming Inequity and Achieving Career Satisfaction
Women in the digital trust sector face significant pay inequity challenges, yet progress in career satisfaction and advancement is evident....
LinkedIn Fined $336 Million by Irish Data Protection Authority for GDPR Violations
The Irish Data Protection Commission has imposed a substantial $336 million fine on LinkedIn for violations of GDPR regarding its...
MacOS Ransomware Attempts Use Old LockBit Brand for Attacks
Recent developments highlight how cybercriminals are leveraging old LockBit technology to target macOS devices with new ransomware attempts. A recent...
Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security
Apple has publicly made available its Private Cloud Compute (PCC) Virtual Research Environment (VRE), allowing the research community to inspect...
Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite
A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges....
SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures
The U.S. Securities and Exchange Commission (SEC) has charged four current and former public companies for making "materially misleading disclosures"...
Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?
Artificial Intelligence (AI) has rapidly evolved from a futuristic concept to a potent weapon in the hands of bad actors....
