NYC Couple Pleads Guilty to Money Laundering in $3.6 Billion Bitfinex Hack

NYC Couple Pleads Guilty to Money Laundering in $3.6 Billion Bitfinex Hack,

A married couple from New York City has pleaded guilty to money laundering charges in connection with the 2016 hack of cryptocurrency stock exchange Bitfinex, resulting in the theft of about 120,000 bitcoin.
The development comes more than a year after Ilya Lichtenstein, 35, and his wife, Heather Morgan, 33, were arrested in February 2022, following the seizure of roughly 95,000 of the stolen

,

A married couple from New York City has pleaded guilty to money laundering charges in connection with the 2016 hack of cryptocurrency stock exchange Bitfinex, resulting in the theft of about 120,000 bitcoin.
The development comes more than a year after Ilya Lichtenstein, 35, and his wife, Heather Morgan, 33, were arrested in February 2022, following the seizure of roughly 95,000 of the stolen

, ,
https://thehackernews.com/2023/08/nyc-couple-pleads-guilty-to-money.html

Webinar – Making PAM Great Again: Solving the Top 5 Identity Team PAM Challenges

Webinar – Making PAM Great Again: Solving the Top 5 Identity Team PAM Challenges,

Privileged Access Management (PAM) solutions are widely acknowledged as the gold standard for securing critical privileged accounts. However, many security and identity teams face inherent obstacles during the PAM journey, hindering these solutions from reaching their full potential. These challenges deprive organizations of the resilience they seek, making it essential to address them

,

Privileged Access Management (PAM) solutions are widely acknowledged as the gold standard for securing critical privileged accounts. However, many security and identity teams face inherent obstacles during the PAM journey, hindering these solutions from reaching their full potential. These challenges deprive organizations of the resilience they seek, making it essential to address them

, ,
https://thehackernews.com/2023/08/webinar-making-pam-great-again-solving.html

Malicious npm Packages Found Exfiltrating Sensitive Data from Developers

Malicious npm Packages Found Exfiltrating Sensitive Data from Developers,

Cybersecurity researchers have discovered a new bunch of malicious packages on the npm package registry that are designed to exfiltrate sensitive developer information.
Software supply chain firm Phylum, which first identified the « test » packages on July 31, 2023, said they « demonstrated increasing functionality and refinement, » hours after which they were removed and re-uploaded under different

,

Cybersecurity researchers have discovered a new bunch of malicious packages on the npm package registry that are designed to exfiltrate sensitive developer information.
Software supply chain firm Phylum, which first identified the « test » packages on July 31, 2023, said they « demonstrated increasing functionality and refinement, » hours after which they were removed and re-uploaded under different

, ,
https://thehackernews.com/2023/08/malicious-npm-packages-found.html

Major Cybersecurity Agencies Collaborate to Unveil 2022’s Most Exploited Vulnerabilities

Major Cybersecurity Agencies Collaborate to Unveil 2022’s Most Exploited Vulnerabilities

,

A four-year-old critical security flaw impacting Fortinet FortiOS SSL has emerged as one of the most routinely and frequently exploited vulnerabilities in 2022.
« In 2022, malicious cyber actors exploited older software vulnerabilities more frequently than recently disclosed vulnerabilities and targeted unpatched, internet-facing systems, » cybersecurity and intelligence agencies from the Five

,

A four-year-old critical security flaw impacting Fortinet FortiOS SSL has emerged as one of the most routinely and frequently exploited vulnerabilities in 2022.
« In 2022, malicious cyber actors exploited older software vulnerabilities more frequently than recently disclosed vulnerabilities and targeted unpatched, internet-facing systems, » cybersecurity and intelligence agencies from the Five

, ,
https://thehackernews.com/2023/08/major-cybersecurity-agencies.html

Malicious Apps Use Sneaky Versioning Technique to Bypass Google Play Store Scanners

Malicious Apps Use Sneaky Versioning Technique to Bypass Google Play Store Scanners,

Threat actors are leveraging a technique called versioning to evade Google Play Store’s malware detections and target Android users.
« Campaigns using versioning commonly target users’ credentials, data, and finances, » Google Cybersecurity Action Team (GCAT) said in its August 2023 Threat Horizons Report shared with The Hacker News.
While versioning is not a new phenomenon, it’s sneaky and hard

,

Threat actors are leveraging a technique called versioning to evade Google Play Store’s malware detections and target Android users.
« Campaigns using versioning commonly target users’ credentials, data, and finances, » Google Cybersecurity Action Team (GCAT) said in its August 2023 Threat Horizons Report shared with The Hacker News.
While versioning is not a new phenomenon, it’s sneaky and hard

, ,
https://thehackernews.com/2023/08/malicious-apps-use-sneaky-versioning.html

RFP Template for Browser Security

RFP Template for Browser Security,

Increasing cyber threats and attacks have made protecting organizational data a paramount concern for businesses of all sizes. A group of experts have recognized the pressing need for comprehensive browser security solutions and collaborated to develop « The Definitive Browser Security RFP Template. » This resource helps streamline the process of evaluating and procuring browser security platforms

,

Increasing cyber threats and attacks have made protecting organizational data a paramount concern for businesses of all sizes. A group of experts have recognized the pressing need for comprehensive browser security solutions and collaborated to develop « The Definitive Browser Security RFP Template. » This resource helps streamline the process of evaluating and procuring browser security platforms

, ,
https://thehackernews.com/2023/07/rfp-template-for-browser-security.html

New Version of Rilide Data Theft Malware Adapts to Chrome Extension Manifest V3

New Version of Rilide Data Theft Malware Adapts to Chrome Extension Manifest V3,

Cybersecurity researchers have discovered a new version of malware called Rilide that targets Chromium-based web browsers to steal sensitive data and steal cryptocurrency.
« It exhibits a higher level of sophistication through modular design, code obfuscation, adoption to the Chrome Extension Manifest V3, and additional features such as the ability to exfiltrate stolen data to a Telegram channel

,

Cybersecurity researchers have discovered a new version of malware called Rilide that targets Chromium-based web browsers to steal sensitive data and steal cryptocurrency.
« It exhibits a higher level of sophistication through modular design, code obfuscation, adoption to the Chrome Extension Manifest V3, and additional features such as the ability to exfiltrate stolen data to a Telegram channel

, ,
https://thehackernews.com/2023/08/new-version-of-rilide-data-theft.html

Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber Attack

Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber Attack,

Hundreds of Citrix NetScaler ADC and Gateway servers have been breached by malicious actors to deploy web shells, according to the Shadowserver Foundation.
The non-profit said the attacks take advantage of CVE-2023-3519, a critical code injection vulnerability that could lead to unauthenticated remote code execution.
The flaw, patched by Citrix last month, carries a CVSS score of 9.8.
The 

,

Hundreds of Citrix NetScaler ADC and Gateway servers have been breached by malicious actors to deploy web shells, according to the Shadowserver Foundation.
The non-profit said the attacks take advantage of CVE-2023-3519, a critical code injection vulnerability that could lead to unauthenticated remote code execution.
The flaw, patched by Citrix last month, carries a CVSS score of 9.8.
The 

, ,
https://thehackernews.com/2023/08/hundreds-of-citrix-netscaler-adc-and.html

A Penetration Testing Buyer’s Guide for IT Security Teams

A Penetration Testing Buyer’s Guide for IT Security Teams

,

The frequency and complexity of cyber threats are constantly evolving. At the same time, organizations are now collecting sensitive data that, if compromised, could result in severe financial and reputational damage. According to Cybersecurity Ventures, the cost of cybercrime is predicted to hit $8 trillion in 2023 and will grow to $10.5 trillion by 2025.
There is also increasing public and

,

The frequency and complexity of cyber threats are constantly evolving. At the same time, organizations are now collecting sensitive data that, if compromised, could result in severe financial and reputational damage. According to Cybersecurity Ventures, the cost of cybercrime is predicted to hit $8 trillion in 2023 and will grow to $10.5 trillion by 2025.
There is also increasing public and

, ,
https://thehackernews.com/2023/08/a-penetration-testing-buyers-guide-for.html

Microsoft Flags Growing Cybersecurity Concerns for Major Sporting Events

Microsoft Flags Growing Cybersecurity Concerns for Major Sporting Events,

Microsoft is warning of the threat malicious cyber actors pose to stadium operations, warning that the cyber risk surface of live sporting events is « rapidly expanding. »
« Information on athletic performance, competitive advantage, and personal information is a lucrative target, » the company said in a Cyber Signals report shared with The Hacker News. « Sports teams, major league and global

,

Microsoft is warning of the threat malicious cyber actors pose to stadium operations, warning that the cyber risk surface of live sporting events is « rapidly expanding. »
« Information on athletic performance, competitive advantage, and personal information is a lucrative target, » the company said in a Cyber Signals report shared with The Hacker News. « Sports teams, major league and global

, ,
https://thehackernews.com/2023/08/microsoft-flags-growing-cybersecurity.html