Information Security
Cloud Atlas Deploys New Malware VBCloud in Targeted Cyber Attacks
The cyber threat group known as Cloud Atlas, also referred to as Clean Ursa, Inception, Oxygen, and Red October, has been observed using a newly identified malware called VBCloud in its recent attack campaigns.
Security Leaders Call for Overhaul in Application Security Amid AI-Driven Challenges
The rapid adoption of generative AI (GenAI) has prompted a seismic shift in how organizations approach application security. A report by Cycode reveals that 72% of security leaders agree a complete reset of strategies is essential to address the challenges posed by AI.
Massive Data Breach Exposes Sensitive Patient Records from Canadian Optometry Platform
Cybersecurity researcher Jeremiah Fowler uncovered an unprotected database belonging to Care1, a Canadian provider of AI-driven software solutions for optometrists.
FBI-Wanted Ransomware Hacker Mikhail Matveev Arrested in Russia
Russian authorities have reportedly detained Mikhail Pavlovich Matveev, known by aliases such as Wazawaka, Uhodiransomwar, and Boriselcin. Matveev, wanted by the FBI since 2023, is linked to major ransomware groups including Hive, LockBit, and Babuk, which have been responsible for devastating cyberattacks on critical infrastructure, government agencies, and businesses worldwide.
North Korea Doubles Down on Cybercrime Amid Geopolitical Shifts
The total value of cryptocurrency theft rose by 21% in 2024 compared to the previous year, though it remains significantly lower than the staggering $3.7 billion stolen in 2022.
AIB Highlights Top Fraud Threats and Offers Guidance for Staying Safe
Allied Irish Bank (AIB) is advising customers to stay alert against rising fraud risks, especially during the holiday season when many relax their vigilance. The bank has identified the top five fraudulent tactics prevalent in 2024, urging consumers to take proactive steps to protect themselves.
Hackers Breach Central Bank of Uganda, Stealing $17 Million from Treasury Accounts
In a significant blow to national financial security, hackers have infiltrated the Central Bank of Uganda's systems, breaching its firewalls and siphoning off $17 million from Treasury accounts.The attack, discovered earlier this week, has raised alarms about the robustness of cybersecurity infrastructure within critical financial institutions, not only in Uganda but across the African continent.
FBI Alerts on Malware Campaign Targeting Vulnerable Webcams and DVRs
The FBI has issued a Private Industry Notification (PIN) regarding new malware campaigns targeting Chinese-branded webcams and DVRs, using a remote access trojan (RAT) called HiatusRAT.
Experian Predicts AI-Driven Cyber Threats to Dominate 2025
Experian's 12th annual Data Breach Industry Forecast warns that data breaches will continue unabated in 2025, with AI emerging as a dominant force in both cyberattacks and defenses.
Treasury Leaders Confront the Realities of Cyber-Resilience
According to an IBM study, the average cost of a data breach in 2024 has climbed to nearly $5 million, marking a 10% increase from the previous year. At the AFP national conference, this stark reality set the stage for an immersive session aimed at equipping finance teams with the skills needed to respond swiftly and effectively to cyber threats.
CISA Requires Federal Agencies to Secure their Microsoft Cloud Environments
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a binding operational directive (BOD 25-01) requiring federal civilian agencies to secure their Microsoft cloud environments.
Global Cybercrime Bust: $400 Million Siezed
A massive international law enforcement operation, involving agencies from 40 countries, has led to the arrest of over 5,500 individuals connected to financial crimes and the seizure of more than $400 million in virtual assets and government-backed currencies.
Finastra Investigates Data Breach Impacting Banking Clients
Finastra, a leading provider of solutions to over 8,000 financial institutions, is investigating a breach of its internal file transfer platform, where hackers stole more than 400 gigabytes of data.
