Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3810 articles
A May roundup highlights reports on MageCart checkout skimmers, ViperSoftX targeting password managers, the Merdoor backdoor, alleged Iranian-linked BouldSpy spyware, Bad Magic activity and malicious drivers used in BlackCat attacks.
DarkOwl reports seeing Netflix stealer logs and accounts for sale on darknet platforms and Telegram. Its analysts predict Netflix’s password-sharing policy may curb some account fraud, while warning fraudsters may adapt.
Wiz announced built-in Wiz DSPM controls that monitor suspicious cloud events involving unprotected sensitive data. Examples include traffic from an unrecommended IP and SSH brute-force activity; suggested responses include blocking access, encryption, and stronger data
A monthly roundup highlights reporting on SNAP benefit trafficking, QuaDream spyware attacks, a Kodi forum database breach, Blind Eagle and APT35 campaigns, and JavaScript malware served by eFile.com.
A 2022 roundup covers arrests, charges and outcomes involving cybercrime figures tied to RaidForums, Bitfinex, NetWalker, Raccoon Stealer, Silk Road and the Capital One breach.
Wiz says it is listed as “in process” on the FedRAMP Marketplace and is working toward moderate authorization for its cloud security platform; authorization has not yet been granted.
DarkOwl highlights 2023 listings offering tax-fraud products, personal information and tutorials across Telegram and dark-web forums. One tutorial download link could also be intended to deliver malware, the article says.
DarkOwl says its Q1 2023 updates added CVE and chat-identity search features, new templates and filters, and expanded collections. The company also describes several newly indexed data-leak postings, whose claims are not independently verified here.
After the FBI seized Genesis Market’s surface-web domains on April 4, analysts found its Tor site remained online. Listings briefly increased, but the site had no new listings or activity by April 10.
A March roundup covers MacStealer targeting macOS credentials, exploitation of a Telerik flaw at a U.S. federal agency, a stolen-card data release, scam risks, malware targeting law firms, and cryptojacking of exposed Kubernetes systems.
DarkOwl reviews ransomware activity in 2022, describing established and emerging groups, shifts toward extortion, and developments including Hive’s takedown and BianLian’s move toward extortion after a free decryptor was released.
Wiz researchers found a Microsoft app misconfiguration that let them alter Bing search results and demonstrate potential Office 365 token theft. Microsoft fixed the issues; testing was limited to the researchers’ own account.
Wiz says its Montreal data center is operational, enabling Canadian data locality for its cloud security service. The company also announced support for Canada's ITSG 33 security framework.
Wiz announced rules to identify application misconfigurations that could enable remote code execution or information disclosure, with security-graph context to help prioritize risks and remediation.
Connor FitzPatrick, identified as BreachForums administrator Pompompurin, appeared in court on charges related to stolen credentials and unauthorized access. The forum’s co-admin later shut it down amid concerns about FBI access.
Wiz announced Admission Controller capabilities for Kubernetes, including fine-grained deployment-time policy enforcement, centralized views of admission events and failures, and custom alerts for suspicious cluster activity.
Wiz describes cloud and host compliance assessments, customizable frameworks, compliance reports, remediation guidance, integrations, and playbooks for automating fixes.
A February roundup covers malware and phishing campaigns, GuLoader and MortalKombat activity, the Hive ransomware disruption, and a researcher-reported flaw in Toyota’s supplier portal. It also mentions a non-security AI chatbot story.
Wiz says its Terraform provider can now manage the full lifecycle of cloud configuration rules as code and integrate them into GitOps workflows, supporting collaboration, review, and approval of policy changes.
DarkOwl found listings for stolen or allegedly compromised accounts, credentials, and stealer logs tied to betting, banking, and ticketing vendors associated with the Super Bowl.
Wiz and Snowflake announced an integration that lets joint customers store and analyze Wiz findings and cloud inventory data in Snowflake for security metrics, investigations, and long-term retention. It is available to customers today.
Wiz says its scans found that 47% of companies had at least one internet-exposed database or storage bucket; a bucket with a guessable name could be discovered and accessed in under 13 hours.
A January roundup highlights reports on malware campaigns, the FBI's attribution of the $100 million Horizon Bridge theft to North Korean hackers, industrial control system advisories, and weaknesses reported in Threema's cryptographic protocols.
Wiz and AWS CloudTrail Lake now let mutual customers store Wiz audit events for up to seven years by default and query them for compliance reviews or security investigations.
