2023 Cybersecurity Maturity Report Reveals Organizational Unpreparedness for Cyberattacks

2023 Cybersecurity Maturity Report Reveals Organizational Unpreparedness for Cyberattacks,

In 2022 alone, global cyberattacks increased by 38%, resulting in substantial business loss, including financial and reputational damage. Meanwhile, corporate security budgets have risen significantly because of the growing sophistication of attacks and the number of cybersecurity solutions introduced into the market. With this rise in threats, budgets, and solutions, how prepared are industries

,

In 2022 alone, global cyberattacks increased by 38%, resulting in substantial business loss, including financial and reputational damage. Meanwhile, corporate security budgets have risen significantly because of the growing sophistication of attacks and the number of cybersecurity solutions introduced into the market. With this rise in threats, budgets, and solutions, how prepared are industries

, ,
https://thehackernews.com/2023/03/2023-cybersecurity-maturity-report.html

Bitcoin : des pirates ont dépouillé des distributeurs automatiques de cryptos

Bitcoin : des pirates ont dépouillé des distributeurs automatiques de cryptos,

hack bitcoin atm

Des hackers ont découvert une faille de sécurité dans certains distributeurs automatiques de Bitcoin. En exploitant la brèche, ils ont volé 1,5 million de dollars en cryptomonnaies à l’insu du fabricant, General Bytes.

,

hack bitcoin atm

Des hackers ont découvert une faille de sécurité dans certains distributeurs automatiques de Bitcoin. En exploitant la brèche, ils ont volé 1,5 million de dollars en cryptomonnaies à l’insu du fabricant, General Bytes.

, ,
https://www.01net.com/actualites/bitcoin-pirates-depouille-distributeurs-automatiques-cryptos.html

Operation Soft Cell: Chinese Hackers Breach Middle East Telecom Providers

Operation Soft Cell: Chinese Hackers Breach Middle East Telecom Providers,

Telecommunication providers in the Middle East are the subject of new cyber attacks that commenced in the first quarter of 2023.
The intrusion set has been attributed to a Chinese cyber espionage actor associated with a long-running campaign dubbed Operation Soft Cell based on tooling overlaps.
« The initial attack phase involves infiltrating Internet-facing Microsoft Exchange servers to deploy

,

Telecommunication providers in the Middle East are the subject of new cyber attacks that commenced in the first quarter of 2023.
The intrusion set has been attributed to a Chinese cyber espionage actor associated with a long-running campaign dubbed Operation Soft Cell based on tooling overlaps.
« The initial attack phase involves infiltrating Internet-facing Microsoft Exchange servers to deploy

, ,
https://thehackernews.com/2023/03/operation-soft-cell-chinese-hackers.html

German and South Korean Agencies Warn of Kimsuky’s Expanding Cyber Attack Tactics

German and South Korean Agencies Warn of Kimsuky’s Expanding Cyber Attack Tactics

,

German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue browser extensions to steal users’ Gmail inboxes.
The joint advisory comes from Germany’s domestic intelligence apparatus, the Federal Office for the Protection of the Constitution (BfV), and South Korea’s National Intelligence Service of the Republic of Korea (NIS

,

German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue browser extensions to steal users’ Gmail inboxes.
The joint advisory comes from Germany’s domestic intelligence apparatus, the Federal Office for the Protection of the Constitution (BfV), and South Korea’s National Intelligence Service of the Republic of Korea (NIS

, ,
https://thehackernews.com/2023/03/german-and-south-korean-agencies-warn.html

ChatGPT : OpenAI confirme avoir rencontré un « important problème »

ChatGPT : OpenAI confirme avoir rencontré un « important problème »,

chatgptplus

ChatGPT a rencontré un gros bug. L’historique de conversations de certains utilisateurs a été transmis à d’autres internautes. OpenAI est rapidement monté au créneau pour corriger le tir, mais l’incident ravive nos préoccupations en matière de données personnelles…

,

chatgptplus

ChatGPT a rencontré un gros bug. L’historique de conversations de certains utilisateurs a été transmis à d’autres internautes. OpenAI est rapidement monté au créneau pour corriger le tir, mais l’incident ravive nos préoccupations en matière de données personnelles…

, ,
https://www.01net.com/actualites/chatgpt-openai-confirme-rencontre-important-probleme.html

CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems

CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS) advisories on Tuesday, warning of critical flaws affecting equipment from Delta Electronics and Rockwell Automation.
This includes 13 security vulnerabilities in Delta Electronics’ InfraSuite Device Master, a real-time device monitoring software. All versions prior to 1.0.5 are

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS) advisories on Tuesday, warning of critical flaws affecting equipment from Delta Electronics and Rockwell Automation.
This includes 13 security vulnerabilities in Delta Electronics’ InfraSuite Device Master, a real-time device monitoring software. All versions prior to 1.0.5 are

, ,
https://thehackernews.com/2023/03/cisa-alerts-on-critical-security.html

ScarCruft’s Evolving Arsenal: Researchers Reveal New Malware Distribution Techniques

ScarCruft’s Evolving Arsenal: Researchers Reveal New Malware Distribution Techniques

,

The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to download additional malware.
According to multiple reports from AhnLab Security Emergency response Center (ASEC), SEKOIA.IO, and Zscaler, the development is illustrative of the group’s continuous efforts to refine and retool its tactics to sidestep detection.
« 

,

The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to download additional malware.
According to multiple reports from AhnLab Security Emergency response Center (ASEC), SEKOIA.IO, and Zscaler, the development is illustrative of the group’s continuous efforts to refine and retool its tactics to sidestep detection.
« 

, ,
https://thehackernews.com/2023/03/scarcrufts-evolving-arsenal-researchers.html

Preventing Insider Threats in Your Active Directory

Preventing Insider Threats in Your Active Directory,

Active Directory (AD) is a powerful authentication and directory service used by organizations worldwide. With this ubiquity and power comes the potential for abuse. Insider threats offer some of the most potentials for destruction. Many internal users have over-provisioned access and visibility into the internal network.
Insiders’ level of access and trust in a network leads to unique

,

Active Directory (AD) is a powerful authentication and directory service used by organizations worldwide. With this ubiquity and power comes the potential for abuse. Insider threats offer some of the most potentials for destruction. Many internal users have over-provisioned access and visibility into the internal network.
Insiders’ level of access and trust in a network leads to unique

, ,
https://thehackernews.com/2023/03/preventing-insider-threats-in-your.html

WhatsApp, Telegram : comment des copies pirates peuvent voler vos cryptos

WhatsApp, Telegram : comment des copies pirates peuvent voler vos cryptos,

WhatsApp

Des versions pirates de WhatsApp et Telegram circulent sur la toile. Ces déclinaisons factices cachent de dangereux virus destinés à s’emparer de vos cryptomonnaies à votre insu…

,

WhatsApp

Des versions pirates de WhatsApp et Telegram circulent sur la toile. Ces déclinaisons factices cachent de dangereux virus destinés à s’emparer de vos cryptomonnaies à votre insu…

, ,
https://www.01net.com/actualites/whatsapp-telegram-hackers-siphonner-cryptos.html

Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware

Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware,

The NuGet repository is the target of a new « sophisticated and highly-malicious attack » aiming to infect .NET developer systems with cryptocurrency stealer malware.
The 13 rogue packages, which were downloaded more than 160,000 times over the past month, have since been taken down.
« The packages contained a PowerShell script that would execute upon installation and trigger a download of a ‘

,

The NuGet repository is the target of a new « sophisticated and highly-malicious attack » aiming to infect .NET developer systems with cryptocurrency stealer malware.
The 13 rogue packages, which were downloaded more than 160,000 times over the past month, have since been taken down.
« The packages contained a PowerShell script that would execute upon installation and trigger a download of a ‘

, ,
https://thehackernews.com/2023/03/rogue-nuget-packages-infect-net.html