Article Summary : 🔍 A new phishing kit called Tycoon 2FA has been discovered by the cybersecurity community, utilizing the Adversary-in-The-Middle (AiTM) technique. 🔍 The kit has been active since at least August 2023 and has become one of the most prevalent AiTM phishing kits. 🔍 Tycoon 2FA operates…
Category: Cyber Security News
Article Summary : 🔹 A U.S. senator is raising questions about a report that $7.5 million was stolen by cyber thieves from the Department of Health and Human Services (HHS) last year. 🔹 The hackers took over email accounts of grantees and tricked HHS into sending funds to their bank accounts. 🔹 Sen….
Article Summary: 🔍 Organizations in the United Kingdom that work transparently with regulators and cybersecurity officials after a data breach will receive leniency in penalties and fines. 🔍 The Information Commissioner’s Office released new guidance detailing the legal framework for assessing penal…
Article Summary: 🔹 The American Hospital Association is advocating for Change Healthcare to be solely responsible for notifying patients in the event of a breach. 🔹 HHS OCR is investigating the cyberattack on Change Healthcare and UnitedHealth Group to determine if PHI was compromised. 🔹 AHA is seek…
Article Summary: 🔍 Academic researchers developed ZenHammer, the first variant of the Rowhammer DRAM attack that works on CPUs based on recent AMD Zen microarchitecture. 🛡️ AMD Zen chips and DDR5 RAM modules were previously considered less vulnerable to Rowhammer, but the latest findings challenge t…
Article Summary: 🔒 CISA and the FBI urge technology manufacturing companies to review software for SQL injection vulnerabilities before shipping. 🛡️ SQL injection attacks exploit security vulnerabilities to access, manipulate, or delete sensitive data. 🔑 Parameterized queries with prepared statement…
Article Summary : 🔒 Despite the critical role of APIs, the vast majority of commercial decision-makers are ignoring the burgeoning security risk for businesses, according to Fastly. 🔐 APIs have become a favorite gateway for cybercriminals, with 84% of respondents admitting to not having advanced API…
Article Summary : 🔒 Another city in Florida, St. Cloud, has been hit by a ransomware attack affecting city services. 🚨 City departments are operating as best as possible until the issue is resolved. 💳 In-person payments for Parks and Recreation events are temporarily cash-only. 🚓 Police and Fire Res…
Article Summary: 🔍 Scams targeting consumers are increasing in complexity and volume, with scammers using generative AI and other technologies to create convincing fraud opportunities. 📈 Despite a decrease in individual scam reports, the total money lost has increased, indicating scammers are using…
Article Summary: 🔹 Russian state-backed hackers likely behind recent attacks on four small Ukrainian internet providers, disrupting operations for over a week. 🔹 Group known as Solntsepek claimed responsibility for incidents, believed to be behind 2023 cyberattack on Ukraine’s largest telecommunicat…
Article Summary: 🔒 Customers of bankrupt crypto platform BlockFi have been targeted with a convincing phishing email impersonating the platform, resulting in millions being stolen in just five days. 🚨 The latest BlockFi phishing campaign is well-made, impersonating the BlockFi team with no typos and…
Article Summary: 🕵️♂️ Police in Romania and Spain busted a cyber-fraud gang involved in fake ads and BEC scams. 💰 They seized cash, gold, electronic devices, and SIM cards from the gang’s locations in Romania. 🌍 The gang operated internationally, with most victims in Spain. 💻 The gang made millions…
Article Summary: 🔍 A United Nations panel is investigating 58 cyberattacks by North Korean hackers, resulting in $3 billion in revenue over six years. 🕵️ The cyberthreat actors targeted defense companies, software supply chains, and cryptocurrency hacks. 💰 Stolen funds were used for technological ad…
Article Summary: 🔒 Another major airline company, Air Europa, has suffered a cyberattack resulting in sensitive customer data leaking to hackers. 📅 The incident was discovered in October 2023 and confirmed by International Consolidated Airlines Group (IAG). 📧 Affected individuals were notified that…
Article Summary : 🔹 APT29, a Russian hacking group linked to SVR, is targeting political parties in Germany with phishing attacks. 🔹 The group is using a backdoor malware named WineLoader to gain remote access to compromised devices. 🔹 WineLoader has been used in previous attacks by APT29 and featur…