Security Serious Unsung Heroes Awards 2023 have launched
Eskenzi PR has today opened nominations for its eighth annual Security Serious Unsung Heroes Awards. The awards are all about celebrating the UK’s cybersecurity professionals,…
Month: July 2023
Chinese Hackers Deploy Microsoft-Signed Rootkit to Target Gaming Sector
Jul 12, 2023THNCyber Threat / Gaming Cybersecurity researchers have unearthed a novel rootkit signed by Microsoft that’s engineered to communicate with an actor-controlled attack infrastructure.…
FutureDotNow debuts roadmap to guide UK through closing digital skills gap
Tech industry coalition FutureDotNow is calling on government and businesses to work together to help close the IT skills gap, marking the publication of a…
Ransom Negotiation Fails, Ameritrade Data Breach Imminent
What happens when ransom negotiations fail? Leading financial services firm Ameritrade has been targeted and victimized by the notorious Cl0p ransomware group following a failed…
Chinese hackers forged authentication tokens to breach government emails
Sophisticated hackers have accessed email accounts of organizations and government agencies via authentication tokens they forged by using an acquired Microsoft account (MSA) consumer signing…
Teen Uber Hacker Arion Kurtaj Assessed Unfit For Trial
A teenage boy from the Lapsus$ hacking group arrested on charges of breaching Uber and other companies was assessed as not fit for trial. The…
Bug Bytes #207 -IIS, LLMs and iOS
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps…
Python-Based PyLoose Fileless Attack Targets Cloud Workloads for Cryptocurrency Mining
Jul 12, 2023The Hacker NewsCloud Security / Cryptocurrency A new fileless attack dubbed PyLoose has been observed striking cloud workloads with the goal of delivering…
MOVEit Vulnerability Compromises US Educational Institution
In the wake of recent global cybersecurity incidents involving the popular file-sharing application MOVEit Transfer, Washington State University (WSU) has become the ninth major educational…
SAP Patches Critical Vulnerability in ECC and S/4HANA Products
German enterprise software maker SAP on Tuesday announced the release of 16 new security notes as part of its July 2023 Security Patch Day. In…
Unpatched Office zero-day CVE-2023-36884 actively exploited in targeted attacksSecurity Affairs
Microsoft warned today that an unpatched zero-day in multiple Windows and Office products was actively exploited in the wild. Microsoft disclosed an unpatched zero-day vulnerability…
Ransomware attack on Hayward City of California
Networked servers of the City of Hayward, California were hacked by a notorious ransomware gang demanding a double-digit figure in millions, only to be paid…