Sicurezza· · 2 minMalware Attacks on the Rise.
Today's cybersecurity news highlights the escalating threats from malware and ransomware, along with significant vulnerabilities flagged by CISA. Meanwhile, tech giants are investing heavily in open source security and new deceptive technologies. It's a wild landscape out there — and staying informed is more crucial than ever.
Malware Attacks on the Rise
Konni's latest phishing campaign is deploying EndRAT via KakaoTalk, showcasing how attackers use social engineering to infiltrate systems. Meanwhile, the LeakNet ransomware gang is employing stealthy techniques like Deno in-memory loaders to evade detection. These developments underline the need for robust security measures across organizations.
Critical Vulnerabilities Exposed
CISA has flagged a year-old Wing FTP vulnerability as actively exploited, urging immediate action from federal agencies. This serves as a stark reminder that many organizations are still vulnerable to known flaws that could be exploited at any moment. Companies must prioritize patch management to stay ahead of potential breaches.
Big Investments in Security
Tech giants have pooled $12.5 million to enhance open source security through the Linux Foundation. This funding aims to address the growing vulnerabilities in the open source ecosystem, especially as AI accelerates the speed of vulnerability discovery. It’s a significant move to ensure that the backbone of modern software remains secure.
South Korean Police Accidentally Post Cryptocurrency Wallet Password
A blunder by South Korean authorities led to the exposure of a cryptocurrency wallet password, enabling swift theft of $4.4 million in assets. This incident highlights the critical importance of operational security.
AI, APIs and DDoS Collide in New Era of Coordinated Cyberattacks
Akamai's report unveils a concerning trend: DDoS attacks are evolving and converging with API attacks, amplifying the threat landscape. As cybercriminals become more sophisticated, organizations must adapt their defenses accordingly.
- Free parking in Russia after DDoS attack knocks city's system offlineA DDoS attack in Perm, Russia, led to a temporary free parking for residents as the city's payment system was overwhelmed. — Bitdefender
- Robotic Surgery Giant Intuitive Discloses CyberattackIntuitive, a major player in robotic surgery, reported a cyberattack resulting in a data breach but maintained operational integrity. — SecurityWeek
- UK Companies House Exposed Details of Millions of FirmsA vulnerability at UK Companies House exposed sensitive information of millions of firms. — SecurityWeek
- Android OS-Level Attack Bypasses Mobile Payment SecurityA new Android attack technique allows attackers to hijack payment apps without altering their code. — Infosecurity Magazine
- Google, Meta, Microsoft Among Signatories of Pact to Combat ScamsTech giants signed an accord to combat online scams and improve user safety. — SecurityWeek
Questa edizione ti è stata utile?
Basta un clic: orienta la prossima.