Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3804 articles
Darktrace announced general availability of Azure support for Darktrace / CLOUD, using Azure VNet flow logs for agentless cloud monitoring, threat detection, and response across multi-cloud environments.
Hunt announced Hunt SQL, a tool for querying six security data sets—including malware, certificates, HTTP scans, phishing, open directories and honeypot activity—to support threat hunting and analysis.
A roundup of September security news covers U.S. sanctions linked to Predator spyware, reported influence and malware campaigns, charges against Russian military officers, an FBI botnet disruption, and German cryptocurrency exchange seizures.
Wiz announced hybrid file integrity monitoring that combines agentless coverage with runtime visibility into file changes, custom rules for sensitive files, and configurable response actions.
Wiz’s Snowflake Connector is generally available, extending its platform to scan for sensitive data, monitor activity, assess permissions and configurations, and correlate risks in Snowflake environments.
The article outlines the UK PSR’s APP fraud reimbursement framework, including shared costs for sending and receiving payment providers and exceptions for consumer fraud or gross negligence. It discusses implications for fraud prevention and collaboration.
Group-IB assisted law enforcement in investigating Carberp, a banking Trojan operation that infected more than 1.5 million computers and stole funds. Eight members were arrested in 2012, and two organizers were sentenced in 2014.
The article explains proposed FAA rules requiring applicants to assess and mitigate intentional unauthorized electronic interactions affecting aircraft, engine, and propeller systems, and to maintain protections through continued-airworthiness procedures.
Darkowl’s August roundup covers ransomware trends, phishing and malware attacks, indictments, account takedowns, a ransomware operation disrupted by the FBI, and a joint advisory on Iran-based actors targeting U.S. organizations.
After Pavel Durov’s arrest in France, he was placed under formal investigation over alleged criminal activity involving Telegram. DarkOwl also examined Telegram-channel reactions and the debate over platform responsibility and law enforcement.
Darktrace introduced its Defend Beyond brand platform and streamlined product packaging, combining DETECT, RESPOND, and Cyber AI Analyst as the foundation of its ActiveAI Security Platform and renaming several offerings.
Hunt.io says AttackCapture indexes attacker infrastructure and tooling, including malware, exploits, and credentials, with features for searching files, mapping MITRE ATT&CK techniques, and supporting threat hunting and defense.
Huntress introduced Unwanted Access, a Microsoft 365 identity capability that analyzes login sessions and lets customers define expected or unauthorized locations and VPNs. Its SOC can send escalations when login activity needs clarification.
Wiz says its government cloud security platform received FedRAMP Moderate authorization after assessment against federal security standards, including NIST SP 800-53 controls.
Wiz says it is now authorized to assign CVE numbers. The company supports broader disclosure of cloud-service vulnerabilities, including issues that may not require customer action, and cites recent CVE Program and Microsoft policy changes.
ThreatFabric reports Chameleon campaigns targeting employees in Canada and Europe. A dropper bypasses Android 13+ restrictions, installs the Trojan, and uses fake CRM prompts to obtain employee credentials; Chameleon can also keylog.
A July roundup covers the AT&T customer-data breach, malware campaigns, cybercrime indictments and disruptions, ransomware claims, and attackers exploiting CrowdStrike-related outages to spread malware.
Huntress says it has been authorized as a CVE Numbering Authority, allowing it to assign CVE identifiers when necessary and contribute vulnerability records to the CVE Program.
Wiz says its agentless cloud scanning now uses proprietary YARA rules to detect malware variants, including webshells, Sliver, Trojan payloads and crypto miners. The announcement also describes XMRig and reverse-TCP detection examples.
Wiz says its new Custom Roles feature lets organizations tailor cloud permissions, identify missing permissions and track changes to built-in roles without automatically activating new permissions.
DarkOwl reports seeing threat actors discuss and sell AI tools in 2024, including tools associated with data poisoning and malware generation, alongside conversations about prompt injection and exposing sensitive data.
Huntress says its 2023 observations show attackers abusing legitimate tools for remote access and malware delivery or data exfiltration; 36% of malicious remote-access tools were RMM tools, and nearly 80% of cloud-storage misuse incidents involved OneDrive.
A roundup covers arrests linked to Conti and LockBit, CISA impersonation scams, phishing services targeting financial firms, campaigns against critical infrastructure, a newly identified North Korean group, and criminal-marketplace enforcement.
A 22-year-old British man identified by Brian Krebs as Tyler Buchanan was arrested in Spain and is alleged to be linked to Scattered Spider. The article also recounts an earlier arrest and reports that Buchanan had been doxed.
