Cyber News 65

Sextortion Scams Now Include Photos of Your Home

An old but persistent email scam known as “sextortion” has a new personalized touch: The missives, which claim that malware…

Cyber Insight

List of Old NSA Training Videos

The NSA’s “National Cryptographic School Television Catalogue” from 1991 lists about 600 COMSEC and SIGINT training videos. There are a…

Cyber Insight

Evolving NPM Package Campaign Targets Roblox Devs, For Years

Attackers have added aggressive social engineering to their arsenal, along with a novel Windows-manipulating persistence mechanism that demands developer vigilance.…

Cyber Insight

Halliburton Data Stolen in Oil-Sector Attack

The energy Kahuna said that operations were disrupted after an attack on its supporting business applications. The energy Kahuna said…

Cyber Insight

New Rust-Based Ransomware Cicada3301 Targets Windows and Linux Systems

Cybersecurity researchers have unpacked the inner workings of a new ransomware variant called Cicada3301 that shares similarities with the now-defunct…

Cyber Insight

Hacktivists Exploits WinRAR Vulnerability in Attacks Against Russia and Belarus

A hacktivist group known as Head Mare has been linked to cyber attacks that exclusively target organizations located in Russia…

Cyber Insight

Improved Software Supply Chain Resilience Equals Increased Security

Understanding through visibility, managing through governance, and anticipating through continuous deployment will better prepare organizations for the next supply chain…

Cyber Insight

BlackCat Spinoff ‘Cicada3301’ Uses Stolen Creds on the Fly, Skirts EDR

Malware authors have iterated on one of the premier encryptors on the market, building something even bigger and better. Malware…

Cyber Insights

Breaking

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

2 Zero-Day Bugs in Microsoft’s Nov. Update Under Active Exploit

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

Be Mindful of Social Media Privacy

Twitter CEO’s account hacked via SIM-card swap attack

No one is immune to phishing attack

Password – the Gate of Hell of the Digital Age

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

Sextortion Scams Now Include Photos of Your Home

List of Old NSA Training Videos

Evolving NPM Package Campaign Targets Roblox Devs, For Years

Halliburton Data Stolen in Oil-Sector Attack

New Rust-Based Ransomware Cicada3301 Targets Windows and Linux Systems

Hacktivists Exploits WinRAR Vulnerability in Attacks Against Russia and Belarus

Improved Software Supply Chain Resilience Equals Increased Security

BlackCat Spinoff ‘Cicada3301’ Uses Stolen Creds on the Fly, Skirts EDR

You Missed

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records