Russian threat actors APT29 are changing their techniques and expanding their targets to access cloud environments, members of the Five Eyes intelligence alliance have warned. APT29 (aka Midnight Blizzard, aka Cozy Bear) is a cyber espionage group believed to be part of the Russian Foreign Intelligence Service (SVR), known for breaching several US government agencies after the supply chain compromise of SolarWinds software. READ MORE...
LockBit claims it's back in action just days after an international law enforcement effort seized the ransomware gang's servers and websites, and retrieved more than 1,000 decryption keys to assist victims. The crew's latest leak site, which debuted on Saturday, listed more than a dozen alleged victims including the FBI itself, hospitals, and Georgia's Fulton County, which is still struggling to recover from the intrusion that disrupted its phone, email and other IT systems in late January. READ MORE...
Steel giant ThyssenKrupp confirms that hackers breached systems in its Automotive division last week, forcing them to shut down IT systems as part of its response and containment effort. ThyssenKrupp AG is one of the world's largest steel producers, employing over 100,000 personnel and having an annual revenue of over $44.4 billion (2022). The firm is a crucial component of the global supply chain of products that use steel as a material across various sectors. READ MORE...
MGM Resorts said federal and state regulators are investigating the company in connection with the September cyberattack that disrupted operations at the hotel and casino firm for days, the company said in a 10-K filing with the Securities and Exchange Commission last week. MGM Resorts warned it could face monetary fines and other actions as a result of the investigations. The company said it is "reasonably possible" it could incur losses in connection with legal proceedings. READ MORE...
Microsoft is already testing Windows 11 24H2, this fall's big new Windows release. The company has already demonstrated a few new features, like 80Gbps USB4 support and Sudo for Windows, and the new version could also give a significant refresh to the Windows installer for the first time since the Windows Vista days. But there's one big update you might not notice at all. Late last week, Microsoft released "servicing updates" with no new features to Windows Insiders. READ MORE...
Taiwanese networking device maker Zyxel has rolled out patches for multiple defects in its firewall and access point products alongside warnings that unpatched systems are at risk of remote code execution attacks. Zyxel, a company that has struggled with software security problems, documented at least four vulnerabilities that expose businesses to code execution, command injection and denial-of-service exploitation. READ MORE...
A cyberattack on UnitedHealth Group subsidiary Optum that led to an ongoing outage impacting the Change Healthcare payment exchange platform was linked to the BlackCat ransomware group by sources familiar with the investigation. Change Healthcare warned customers on Wednesday that some of its services are offline because of a cybersecurity incident. One day later, UnitedHealth Group said in an SEC 8-K filing that the cyberattack was coordinated by suspected "nation-state" hackers. READ MORE...
Always be wary of opening unsolicited attachments - they might harbour malware. That's a message that is being strongly underlined once again, following the discovery of a cybercrime campaign that is using the cover of travel service providers. Security researchers at Forcepoint say that they have uncovered evidence that malicious hackers are sending out poisoned PDF files, designed to infect recipients' PCs. READ MORE...
Hundreds of millions of us log on to our favorite social media sites every day. We shop, share photos and news, like posts and comments, send private messages, and much more. In fact, Northern and Western Europe are estimated to have the highest social media penetration rates in the world, at nearly 84% of the population. But our use of these sites is also problematic. Oversharing is a growing problem. At the very least it can annoy your friends and family. At worst, it could result in identity fraud. READ MORE...
Threat actors are exploiting a CMS editor discontinued 14 years ago to compromise education and government entities worldwide to poison search results with malicious sites or scams. Open redirects are when websites, whether intentionally or through a flaw, allow arbitrary redirection requests that take users from the original site to an external URL without adequate validation or security checks. READ MORE...
If you ever wanted to play DOOM on a lawnmower, you will soon have your chance with a new software update coming to Husqvarna's robotic line of lawnmowers this spring. The lawnmower company announced last week that owners of the Automower NERA series can now sign up for the new update coming in April. "The legendary 1993 video game DOOM® will be playable on Husqvarna Automower® NERA robotic lawnmower models from April this year," reads a news release on Husqvarna's site. READ MORE...