Stealthy APT Gelsemium Seen Targeting Southeast Asian Government
A stealthy advanced persistent threat (APT) actor known as Gelsemium has been observed targeting a government entity in Southeast Asia to establish persistence and collect…
Category: SecurityWeek
Nigerian Pleads Guilty in US to Million-Dollar BEC Scheme Role
A Nigerian national residing in South Africa last week pleaded guilty in court in the United States to his role in a million-dollar business email…
900 US Schools Impacted by MOVEit Hack at National Student Clearinghouse
The National Student Clearinghouse, an educational nonprofit that provides reporting, verification, and research services to colleges and universities in North America, has revealed that nearly…
City of Dallas Details Ransomware Attack Impact, Costs
The City of Dallas has announced that an $8.5 million budget has been approved to support the restoration of its systems following a May 2023…
Predator Spyware Delivered to iOS, Android Devices via Zero-Days, MitM Attacks
The Predator spyware has been delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and man-in-the-middle (MitM) attacks, according to Google’s Threat…
In-the-Wild Exploitation Expected for Critical TeamCity Flaw Allowing Server Takeover
A critical vulnerability in the TeamCity CI/CD server could be exploited remotely, without authentication, to execute arbitrary code and gain administrative control over a vulnerable…
Researchers Discover Attempt to Infect Leading Egyptian Opposition Politician With Predator Spyware
A leading Egyptian opposition politician was targeted with spyware after announcing a presidential bid, security researchers reported Friday. They said Egyptian authorities were likely behind…
In Other News: New Analysis of Snowden Files, Yubico Goes Public, Election Hacking
SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a…
Faster Patching Pace Validates CISA’s KEV Catalog Initiative
The Known Exploited Vulnerabilities (KEV) Catalog maintained by the US cybersecurity agency CISA has led to significant improvements in federal agencies’ patching efforts, with more…
China’s Offensive Cyber Operations in Africa Support Soft Power Efforts
Chinese state-sponsored threat groups have targeted telecommunications, financial and government organizations in Africa in support of Beijing’s soft power agenda in the region, according to…
Air Canada Says Employee Information Accessed in Cyberattack
Air Canada, the largest airline in the country, this week announced that the personal information of some employees was accessed in a recent cyberattack. In…
BIND Updates Patch Two High-Severity DoS Vulnerabilities
The Internet Systems Consortium (ISC) has released security updates to address two remotely exploitable denial-of-service (DoS) vulnerabilities in the DNS software suite BIND. Both bugs,…