Tag: cybersecurity
-
The Technology Blueprint for CIOs: Expectations and Concerns
Protiviti-CII CIO Insights Reveal AI and Cybersecurity as Top Priorities for CIOs. AI, security and sustainable technology are set to be the defining trends for the digital future. This technological evolution is fueled by rapid advancements in AI-powered automation, the adoption of zero trust security frameworks and a growing focus on ESG integration in digital…
-
Widespread Chrome Malware: 16 Extensions Infect Over 3.2 Million Users
A recent cybersecurity investigation has uncovered a cluster of 16 malicious Chrome extensions that have compromised at least 3.2 million users. These extensions, which include functionalities like screen capture, ad blocking, and emoji keyboards, were found to inject code into browsers, facilitating advertising and search engine optimization fraud. The threat actor behind this campaign is…
-
New Malware Campaign Uses Cracked Software to Spread Lumma and ACR Stealer
Cybersecurity researchers are warning of a new campaign that leverages cracked versions of software as a lure to distribute information stealers like Lumma and ACR Stealer.The AhnLab Security Intelligence Center (ASEC) said it has observed a spike in the distribution volume of ACR Stealer since January 2025.A notable aspect of the stealer malware is the…
-
Australia bans government use of Kaspersky software due to ‘unacceptable security risk’
The Australian government followed the U.S., Canada, and the United Kingdom in taking action against the Russian cybersecurity giant First seen on techcrunch.com Jump to article: techcrunch.com/2025/02/24/australia-bans-government-use-of-kaspersky-software-due-to-unacceptable-security-risk/
-
Australia bans government use of Kaspersky software over Russian espionage concerns
Kaspersky software “poses an unacceptable security risk to the Australian government, networks, and data,” Home Affairs Secretary Stephanie Foster said in announcing a ban on the cybersecurity company’s products. First seen on therecord.media Jump to article: therecord.media/kaspersky-australia-government-ban
-
Australia bans Kaspersky over national security concerns
Australia bans Kaspersky software over national security concerns, citing risks of foreign interference, espionage, and sabotage of government networks. Australian Government banned products and services provided by Russian cybersecurity firm Kaspersky over national security concerns. The Secretary of the Department of Home Affairs has issued a mandatory directive under the Protective Security Policy Framework (PSPF)…
-
A data leak exposes the operations of the Chinese private firm TopSec, which provides Censorship-as-a-Service
A leak suggests that Chinese cybersecurity firm TopSec offers censorship-as-a-service services, it provided bespoke monitoring services to a state-owned enterprise facing a corruption scandal. SentinelLABS researchers analyzed a data leak that suggests that the Chinese cybersecurity firm TopSec offers censorship-as-a-service services. The origin of the data leak is unclear, the leak is large and inconsistently…
-
Kaspersky Banned on Australian Government Systems
Australian government entities have been banned from using products and services of Russian cybersecurity company Kaspersky. The post Kaspersky Banned on Australian Government Systems appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/kaspersky-banned-on-australian-government-systems/
-
Cybersecurity Weekly Update 24 February 2025
Tags: access, ai, apple, attack, cyber, cyberattack, cybersecurity, data, email, encryption, finance, government, office, privacy, regulation, risk, service, theft, updateWelcome to this week’s edition of our cybersecurity news roundup, bringing you the latest developments and insights from the UK and beyond. Home Office Contractor’s Data Collection Sparks Privacy Concerns The Home Office faces scrutiny after revelations that its contractor, Equifax, collected data on British citizens while conducting financial checks on migrants applying for fee…
-
Palo Alto Networks vulnerabilities exploited in chained attack
The cybersecurity vendor urges customers to take immediate action to mitigate recently disclosed vulnerabilities that are being actively exploited in the wild. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366619503/Palo-Alto-Networks-vulnerabilities-exploited-in-chained-attack
-
AI can kill banks: Cybersecurity’s disinformation gap
Almost 61% of study participants who consumed the fake news were fundamentally willing to withdraw their money from the respective bank.Just over 33% of respondents rated this as “very likely,” and another 27% as “probable.”Translated into financial expenditure, according to the study, a £10 investment in AI content generation (around US$13) can be enough to…
-
Fake ChatGPT Premium Phishing Scam Spreads to Steal User Credentials
A sophisticated phishing campaign impersonating OpenAI’s ChatGPT Premium subscription service has surged globally, targeting users with fraudulent payment requests to steal credentials. Cybersecurity firm Symantec recently identified emails spoofing ChatGPT’s branding, urging recipients to renew a fictional $24 monthly subscription. The emails, marked with subject lines like”Action Required: Secure Continued Access to ChatGPT with a…
-
Strategic? Functional? Tactical? Which type of CISO are you?
Tags: breach, business, ceo, cisco, ciso, cloud, compliance, cybersecurity, finance, governance, group, guide, healthcare, infrastructure, jobs, risk, service, skills, startup, strategy, technology, trainingTransformational, as in program-builders or turnaround agents.Operational, often early-career CISOs who are closer to the technology and work at small-to-midsize companies where they still perform some technical duties.Compliance, that is, risk experts typically found in highly regulated industries.Steady-state CISOs, who, in opposition to the transformational type, keep everything on an even keel.Customer-facing CISOs, usually found…
-
Exim Mail Transfer Vulnerability Allows Attackers to Inject Malicious SQL
A newly disclosed vulnerability in the Exim mail transfer agent (CVE-2025-26794) has sent shockwaves through the cybersecurity community, revealing a critical SQL injection flaw that enables attackers to compromise email systems and manipulate underlying databases. The vulnerability, confirmed in Exim Version 4.98 installations using SQLite for hints databases, represents one of the most severe email…
-
Das Potenzial von NIS2 erkennen
Wie Unternehmen NIS2-Compliance gezielt umsetzen und Cybersecurity als strategischen Vorteil nutzen können. Während die Umsetzung der EU-Richtlinie NIS2 in Deutschland voraussichtlich bis Mai 2025 auf sich warten lässt, steigt das Risiko durch Cyberangriffe weiter mit potenziellen Folgen wie Produktionsausfällen und hohen Wiederherstellungskosten. Dennoch wird Cybersicherheit in vielen Unternehmen oft als Kostenfaktor betrachtet und… First seen…
-
Google Introduces Quantum-Safe Digital Signatures in Cloud KMS
Tags: cloud, cryptography, cyber, cybersecurity, encryption, google, service, technology, tool, updateGoogle Cloud has unveiled a critical cybersecurity upgrade:quantum-safe digital signaturesvia its Key Management Service (Cloud KMS), now available in preview. This move aligns with the National Institute of Standards and Technology’s (NIST) 2024 post-quantum cryptography (PQC) standards, offering developers tools to safeguard encryption against future quantum threats. Quantum-Resistant Signatures Enter the Mainstream Google’s latest update…
-
ScreamedJungle Campaign Steals Browser Fingerprints from 115+ Sites
A new report from Group-IB exposes a growing cybersecurity threat: browser fingerprint theft. Cybercriminals are using sophisticated techniques First seen on securityonline.info Jump to article: securityonline.info/screamedjungle-campaign-steals-browser-fingerprints-from-115-sites/
-
Health Net pays $11.2M to settle claims over false cybersecurity certs
Tags: cybersecurityFirst seen on scworld.com Jump to article: www.scworld.com/news/health-net-pays-11m-to-settle-claims-over-false-cybersecurity-certs
-
Cybersecurity Pros Don’t Think Much Of Their Current Job Situations
First seen on scworld.com Jump to article: www.scworld.com/brief/cybersecurity-pros-dont-think-much-of-their-current-job-situations
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 34
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. You’ve Got Malware: FINALDRAFT Hides in Your Drafts Telegram Abused as C2 Channel for New Golang Backdoor Infostealing Malware Infections in the U.S. Military & Defense Sector: A Cybersecurity Disaster in the Making Analyzing ELF/Sshdinjector.A!tr with…
-
Hackers steal $1.5bn from crypto exchange in ‘biggest digital heist ever’
Bybit platform appeals to ‘brightest minds’ in cybersecurity for help after attacker transfers Ethereum currency The cryptocurrency exchange Bybit has called on the “brightest minds” in cybersecurity to help it recover $1.5bn (£1.2bn) stolen by hackers in what is thought to be the biggest single digital theft in history.The Dubai-based crypto platform said an attacker…
-
Crypto exchange seeks help in finding $1.5bn stolen from digital wallet
Bybit said attacker moved Ethereum currency to unknown address in what is thought to be biggest digital theftThe cryptocurrency exchange Bybit has called on the “brightest minds” in cybersecurity to help it recover $1.5bn (£1.2bn) stolen by hackers in what is thought to be the biggest single digital theft in history.The Dubai-based crypto platform said…
-
New Guidelines: Cybersecurity Resilience in the Healthcare Industry
Lou Morentin, VP of Compliance & Privacy There are a number of significant changes coming to Healthcare Cybersecurity requirements. While not all are finalized, they point the way towards Health and Human Services tightening the controls and requirements. Healthcare Cybersecurity: A Shift Towards Resilience The healthcare industry is facing an evolving threat landscape, with cyberattacks……
-
Bybit Hack: $1.4B Stolen from World’s 2nd Largest Crypto Exchange
In a major cybersecurity incident, Bybit, the world’s 2nd-largest crypto exchange suffered a $1.4 billion ETH hack from… First seen on hackread.com Jump to article: hackread.com/bybit-hack-billion-stolen-largest-crypto-exchange/
-
Zero Trust World: Australian cybersecurity trends and predictions
First seen on scworld.com Jump to article: www.scworld.com/resource/zero-trust-world-australian-cybersecurity-trends-and-predictions
-
1 in 4 cybersecurity pros would not recommend their employer
Tags: cybersecurityFirst seen on scworld.com Jump to article: www.scworld.com/news/1-in-4-cybersecurity-pros-would-not-recommend-their-employer
-
Leaked Files Tie Chinese Cybersecurity Firm to Government Censorship
TopSec data leak: 7000+ documents expose potential Chinese government surveillance and censorship practices. Learn about the key findings… First seen on hackread.com Jump to article: hackread.com/leaked-files-chinese-cybersecurity-firm-govt-censorship/
-
Talos: No Cisco Zero Days Used in Salt Typhon Telecom Hacks
Tags: breach, china, cisco, credentials, cyberespionage, cybersecurity, hacker, login, vulnerability, zero-dayChinese Nation-State Hackers Used a Custom Utility to Capture Packets. Chinese hackers who infiltrated U.S. telecoms likely only used one, known Cisco vulnerability, says Cisco’s cybersecurity unit. Otherwise, the Chinese nation-state cyberespionage operation known as Salt Typhoon used stolen login credentials living-off-the-land techniques, says Cisco Talos. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/talos-no-cisco-zero-days-used-in-salt-typhon-telecom-hacks-a-27576
-
DOGE’s USDS Purge Included the Guy Who Keeps Veterans’ Data Safe Online
The cybersecurity lead for VA.gov was fired last week. He tells WIRED that the Veterans Affairs digital hub will be more vulnerable without someone in his role. First seen on wired.com Jump to article: www.wired.com/story/doge-usds-purge-veterans-affairs-site-cybersecurity/