Whoopsies in Ireland and Scotland speak to a tenuousness of cyber protections for sensitive private healthcare data….
The International Monetary Fund (IMF) disclosed a cyber incident on Friday after unknown attackers breached 11 IMF email accounts earlier this year. […]…
The U.S. Department of Justice (DoJ) is recovering $2.3 million worth of cryptocurrency linked to a “pig butchering” fraud scheme that victimized at least 37 people across the United States. […]…
A group of researchers has discovered a new data leakage attack impacting modern CPU architectures supporting speculative execution.
Dubbed GhostRace (CVE-2024-2193), it is a variation of the transient execution CPU vulnerability known as Spectre v1 (CVE-2017-5753). The approach combines speculative execution and race conditions.
“All the common synchronization primitives implemented…
PornHub has now added Texas to its blocklist, preventing users in the state from accessing its site in protest of age verification laws. […]…
Microsoft announced that Office LTSC 2024, the next Office LTSC release, will enter a commercial preview phase starting next month and will be generally available later this year. […]…
Taking a cue from ransomware operators, the illicit online drug marketplace known as Incognito Market has initiated a campaign of extortion targeting both its vendors and buyers. Users are being threatened with the exposure of their cryptocurrency transaction histories and chat records unless they p…
Moldovan national Sandu Boris Diaconu has been sentenced to 42 months in prison for operating E-Root, a major online marketplace that sold access to hacked computers worldwide. […]…
A former manager at a telecommunications company in New Jersey pleaded guilty to conspiracy charges for accepting money to perform unauthorized SIM swaps that enabled an accomplice to hack customer accounts. […]…
Following a cyberattack on the largest health insurer in the United States last month, health care providers are still scrambling as insurance payments and prescription orders continue to be disrupted, costing physicians an estimated $100 million each day. According to the American Medical Asso…
A threat actor has purportedly disclosed the database of the Faculty of Exact, Physical, and Natural Sciences of the National University of Cordoba, Argentina (UNC). According to the claims made by the threat actor, over 8,840 assorted personal records belonging to both teachers and students have be…
Fortinet’s FortiGuard Labs analyzed the RA World ransomware family, noting it exfiltrates data before encrypting files, stops backup/security services, deletes Volume Shadow Copies, and publishes stolen data via TOR and non‑TOR leak sites. Fortinet detections …
SEC disclosure mandateThe Securities and Exchange Commission’s recently implemented cybersecurity regulations have prompted some breach disclosures from publicly traded firms, such as Microsoft and Hewlett Packard Enterprise.Among other things, the guidelines mandate that a “material” cybersecurity…
Netskope Threat Labs dissected an evasive Azorult campaign that uses Google Sites as a decoy and employs HTML smuggling, CAPTCHA gating, AMSI bypass, and reflective code loading to deliver and execute a fileless infostealer. The attack chain includes an LNK-tr…
Compare how well OpenAI’s and Google’s generative AI products handle infosec professionals’ top 10 tasks….