MOVEit customers on high alert as Clop's deadline expires
Cybersecurity experts are on high alert as the deadline set by Clop, the prolific ransomware actor responsible for widespread exploitation of zero-day vulnerabilities in Progress Software's MOVEit file-transfer service, expires Wednesday. Clop, which is responsible for two of three high-profile file transfer service supply chain attacks this year, claims it stole data from hundreds of organizations, including British Airways and the BBC, and set a deadline for victims to make contact. READ MORE...
Microsoft Outs New Russian APT Linked to Wiper Attacks in Ukraine
Security researchers at Microsoft are publicly outing a new APT group linked to Russia's General Staff Main Intelligence Directorate (GRU), warning that the threat actor has worked on destructive wiper malware attacks that hit organizations in Ukraine. A new report from Redmond's threat intelligence team tagged the group as 'Cadet Blizzard' and documented signs and evidence that adds clarity to the scope and usage of malware in a wartime environment. READ MORE...
Minnesota Department of Education exposed in MOVEit data breach
The Minnesota Department of Education is among a growing list of organizations affected by a global data breach from the cyberattack against MOVEit software, which is often used by government agencies and companies to transfer sensitive data files. The department announced Friday it had discovered a potential vulnerability with the file share service on May 31 when a third-party vendor informed state officials of the concern. READ MORE...
Cryptocurrency Attacks Quadrupled as Cybercriminals Cash In
Cryptocurrency continues to be a favorite target of attackers, with attacks targeting Bitcoin and other currencies growing at a robust pace. In the recently released 2023 Data Breach Investigations Report (DBIR), Verizon noted that attacks in its dataset that specifically target cryptocurrency data grew 300% over 2022 to 48 incidents reported, up from 12 the year before. Whether the trend continues this year remains to be seen, says David Hylender, senior manager of threat intelligence for Verizon. READ MORE...
North Korea created very phishy evil twin of Naver, South Korea's top portal
North Korea has created a fake version of South Korea's largest internet portal, Naver, in a large scale phishing attempt, Seoul's National Intelligence Service (NIS) said on Wednesday. The fake portal, Naverportal, mimics Naver by providing a complete replica of real-time news, advertisement banners and even detailed menus from the real website in an effort to steal personal data from users, according to the spy agency. READ MORE...
WannaCry ransomware impersonator targets Russian "Enlisted" FPS players
A ransomware operation targets Russian players of the Enlisted multiplayer first-person shooter, using a fake website to spread trojanized versions of the game. Enlisted is a legitimate game published by Gaijin Entertainment in 2021, having between 500,000 and a million active monthly players. The game is free, so threat actors could easily download the installer from the publisher and modify it to distribute malicious payloads to unsuspecting users. READ MORE...
How Europe is Leading the World in the Push to Regulate AI
Lawmakers in Europe signed off Wednesday on the world's first set of comprehensive rules for artificial intelligence, clearing a key hurdle as authorities across the globe race to rein in AI. The European Parliament vote is one of the last steps before the rules become law, which could act as a model for other places working on similar regulations. READ MORE...
- ...in 1836, Arkansas is admitted as the 25th U.S. state.
- ...in 1922, President Warren G. Harding becomes the first president to speak on the radio.
- ...in 1934, the Great Smoky Mountains National Park is founded along the border of Tennessee and North Carolina.
- ...in 1941, singer-songwriter Harry Nilsson ("Everybody's Talkin'", "Coconut") is born in Brooklyn, NY.
