SecurityWeek-Cybersecurity Update

"Google disrupts more China-linked Dragonbridge Influence Operations."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 26 June 2024, 1632 UTC.

Content and Source: https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek/SecurityWeek.

Please scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

76K followers43 articles per week#security #tech
31

TODAY

Google Disrupts More China-Linked Dragonbridge Influence Operations
Google disrupts China-linked influence operations
•
by Ionut Arghire / 1h
Google has disrupted over 175,000 YouTube and Blogger instances related to the Chinese influence operation Dragonbridge. The post appeared first on SecurityWeek .
Gaining and Retaining Security Talent: A Cheat Sheet for CISOs
by Kevin Townsend / 3h
Freed from the shackles of always demanding a technical background, the CISO can concentrate on building a diverse team comprising multiple skills. The post appeared first on SecurityWeek .
The EU Targets Russia’s LNG Ghost Fleet With Sanctions as Concern Mounts About Hybrid Attacks
EU adopts 14th sanctions against Russia
•
by Associated Press / 3h
Some expressed concern about a rise in hybrid attacks by Russia – including allegations of election interference, cyberattacks and sabotage. The post appeared first on SecurityWeek .
P2Pinfect Worm Now Dropping Ransomware on Redis Servers
P2PInfect botnet deploys ransomware
•
by Ionut Arghire / 4h
The P2Pinfect worm targeting Redis servers has been updated with ransomware and cryptocurrency mining payloads. The post appeared first on SecurityWeek .
Polyfill Supply Chain Attack Hits Over 100k Websites
Polyfill.io supply chain attack impacts 100K+
•
by Ionut Arghire / 5h
More than 100,000 websites are affected by a supply chain attack injecting malware via a Polyfill domain. The post appeared first on SecurityWeek .
Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector
5 TTPs
•
by Eduard Kovacs / 6h
Several vulnerabilities patched recently in Siemens Sicam products could be exploited in attacks aimed at the energy sector. The post appeared first on SecurityWeek .
Exploitation Attempts Target New MOVEit Transfer Vulnerability
4 TTPs
•
by Eduard Kovacs / 6h
•
CVE-2024-5806
Exploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started. The post appeared first on SecurityWeek .

YESTERDAY

EU Sanctions Six Russian Hackers
EU sanctions Russian hackers cyberattacks
•
by Eduard Kovacs / 1d
The European Council has added six Russian hackers to the EU’s sanctions list for their cyberattacks against member states and Ukraine. The post appeared first on SecurityWeek .
Recent Zyxel NAS Vulnerability Exploited by Botnet
2 TTPs
•
by Ionut Arghire / 1d
•
CVE-2024-29973
A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products. The post appeared first on SecurityWeek .
Indonesia Says a Cyberattack Has Compromised Its Data Center but It Won’t Pay the $8 Million Ransom
Indonesia refuses $8 million ransom
•
by Associated Press / 1d
Indonesia’s national data center has been compromised by a hacking group asking for a $8 million ransom that the government won’t pay. The post appeared first on SecurityWeek .
Hackers Steal Over $2 Million in Cryptocurrency From CoinStats Wallets
CoinStats reports security breach
•
by Ionut Arghire / 1d
CoinStats says North Korean hackers drained $2 million in virtual assets from 1,590 cryptocurrency wallets. The post appeared first on SecurityWeek .
Several Plugins Compromised in WordPress Supply Chain Attack
8 TTPs
•
by Ionut Arghire / 1d
•
Supply-chain attack on WordPress plugins affects
Five WordPress plugins were injected with malicious code that creates a new administrative account. The post appeared first on SecurityWeek .
Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher
by Kevin Townsend / 1d
Researcher shows how hackers could use social engineering to deliver ransomware and other malware to Meta’s Quest 3 VR headset. The post appeared first on SecurityWeek .
Car Dealerships in North America Revert to Pens and Paper After Cyberattacks on Software Provider
CDK Global hit by cyberattacks
•
by Associated Press / 1d
Car dealerships in North America are still wrestling with major disruptions that started last week with cyberattacks on a company whose software is used widely in the auto retail sales sector. The post appeared first on SecurityWeek .
Malware Sandbox Any.Run Targeted in Phishing Attack
CISA CSAT breach exposes data
•
by Eduard Kovacs / 1d
Employees of the Any.Run malware analysis service were recently targeted in a phishing attack that was part of a BEC campaign. The post appeared first on SecurityWeek .

JUN 24, 2024

Neiman Marcus Data Breach Disclosed as Hacker Offers to Sell Stolen Information
by Eduard Kovacs / 1d
Neiman Marcus has disclosed a data breach impacting 64,000 people just as a hacker announced the sale of customer data. The post appeared first on SecurityWeek .
Chrome 126 Update Patches Memory Safety Bugs
4 TTPs
•
by Ionut Arghire / 1d
•
CVE-2024-6290 & 3 others
Google has released a Chrome security update to resolve four high-severity use-after-free vulnerabilities. The post appeared first on SecurityWeek .
WikiLeaks Founder Julian Assange Will Plead Guilty in Deal With US and Return to Australia
Julian Assange to plead guilty
•
by Associated Press / 1d
Assange will plead guilty to an Espionage Act charge of conspiring to unlawfully obtain and disseminate classified national defense information, the Justice Department said. The post appeared first on SecurityWeek .
Chinese Hackers Have Stepped Up Attacks on Taiwanese Organizations, Cybersecurity Firm Says
Chinese hackers target Taiwanese organizations
•
by Associated Press / 1d
A suspected Chinese state-sponsored hacking group has stepped up its targeting of Taiwanese organizations, particularly those in sectors such as government, education, technology and diplomacy. The post appeared first on SecurityWeek .
Tech Leaders Gather This Week for AI Risk Summit + CISO Forum at the Ritz-Carlton, Half Moon Bay
by Mike Lennon / 1d
SecurityWeek’s AI Risk Summit + CISO Forum brings together business and government stakeholders to provide meaningful guidance on risk management and cybersecurity in the age of artificial intelligence. The post appeared first on SecurityWeek .
New SnailLoad Attack Relies on Network Latency Variations to Infer User Activity
by Eduard Kovacs / 2d
New attack named SnailLoad allows a remote attacker to infer websites and videos viewed by a user without direct access to network traffic. The post appeared first on SecurityWeek .
EFF Issues New Warning After Discovery of Automated License Plate Reader Vulnerabilities
EFF warns of ALPR vulnerabilities
•
by Eduard Kovacs / 2d
The EFF has issued a warning over the use of automated license plate readers following the discovery of serious vulnerabilities. The post appeared first on SecurityWeek .
LivaNova USA Discloses Data Breach Impacting 130,000 Individuals
by Ionut Arghire / 2d
LivaNova USA says the personal and medical information of 130,000 individuals was compromised in an October 2023 data breach. The post appeared first on SecurityWeek .
Vietnamese Members of FIN9 Hacking Group Charged in US
Vietnamese FIN9 hackers indicted $71M
•
by Ionut Arghire / 2d
The US has announced charges against four Vietnamese nationals for hacking businesses and causing $71 million in losses. The post appeared first on SecurityWeek .
Push Notification Fatigue Leads to LA County Health Department Data Breach
by Ionut Arghire / 2d
The Los Angeles County Department of Health Services discloses a data breach caused by push notification spamming attack. The post appeared first on SecurityWeek .
US Sanctions 12 Kaspersky Executives
US sanctions Kaspersky Lab executives
•
by Eduard Kovacs / 2d
The US has imposed sanctions on 12 individuals who have leadership roles at Kaspersky in Russia and the UK. The post appeared first on SecurityWeek .

Comments