Japanese school uniform retailer Kanko Online Shop has disclosed a significant data breach affecting its “Kanko Online Shop Harajuku Select Square” e-commerce site. Up to 3,827 customers who made purchases between April 2021 and August 2023 may have had their credit card information compromised.What…
Cybersecurity giant CrowdStrike (NASDAQ: CRWD) on Tuesday announced plans to acquire of Flow Security, a cloud data runtime security solution, to enhance its cloud security capabilities and offer protection for data in motion and at rest for both endpoint and cloud environments. Flow’s Data Security…
AhnLab ASEC observed the z0Miner threat actor exploiting unpatched WebLogic and other vulnerable Korean web servers to deploy JSP web shells, tunneling tools, remote-access software, and XMRig miners. The actor uses OS-specific download methods (PowerShell/cer…
Ransomware actors are increasingly abusing legitimate, dual-use tools to exfiltrate data, rather than relying solely on bespoke malware. The RagnarLocker case study demonstrates how Rclone was used to copy data to Put.io, highlighting the trend toward stealthy…
Intel-Ops tracks Phobos ransomware infrastructure attributed to the 8Base group, detailing a RaaS model and affiliates using Smokeloader and SystemBC in intrusions. The report identifies 45 domains, 22 IPs, and 50 samples (33 Smokeloader, 16 SystemBC, 1 Meterp…
Mandiant examined a Nexus banking trojan Android sample and found widespread string obfuscation implemented via XOR and buried in methods full of dead code, which complicated static analysis. The authors describe DEX internals and release dexmod, a Python tool…
PRESS RELEASECHICAGO — (BUSINESS WIRE) — Network Perception, innovators of operational technology (OT) solutions that protect mission-critical assets, today introduced new platform features and capabilities as part of its roll-out of NP-View version 5.0, including next-generation network access mode…
PRESS RELEASESAN FRANCISCO, March 5, 2024 /PRNewswire/ — Delinea, a leading provider of solutions that seamlessly extend Privileged Access Management (PAM), today announced the introduction of Privilege Control for Servers on the Delinea Platform, enforcing least privilege…
PRESS RELEASEReston, VA – March 5, 2024 — Centripetal, the global leader in intelligence powered cybersecurity, today announced that it has been selected as the Official Cyber Network Security Partner for the Boston Red Sox and Fenway Park. Under the multi-year partnership, Centripeta…
PRESS RELEASESAN FRANCISCO, March 5, 2024 – Horizon3.ai, a pioneer in autonomous security solutions, today announced the availability of the Horizon3.ai Pentesting Services for Compliance. Horizon3.airecognizes that demand for pentesting expertise is at an all-time high, and…
Security for AI is the Next Big Thing! Too bad no one knows what any of that really means.
The National Security Agency is sharing new guidance to help organizations limit an adversary’s movement on the internal network by adopting zero-trust framework principles. […]
The wide availability of generative AI will make synthetic identity fraud even easier. Organizations need a multilayered defense to protect themselves.
Analysis of an Android Malware-as-a-Service Operation Coper, a descendant of the Exobot malware family, was first observed in the wild in…
Source code fire sale, stiffing affiliates — are BlackCat admins intentionally burning their RaaS business to the ground? Experts say something’s up.