Infostealers Drive Surge in Ransomware Threats, SpyCloud Report Reveals
SpyCloud's latest research highlights the growing threat of infostealers—malware designed to steal digital identity data, login credentials, and session cookies. According to the report, infostealers were involved in 61% of all data breaches in the past year, resulting in the theft of 343.78 million credentials. This data often ends up on the dark web, fueling further attacks. Alarmingly, one in five individuals has been affected by an infostealer infection, each exposing 10-25 third-party business application credentials, creating opportunities for ransomware operators to exploit.
Mastercard Strengthens Cybersecurity with $2.65 Billion Acquisition of Recorded Future
Mastercard has announced a significant expansion of its cybersecurity services by acquiring global threat intelligence company Recorded Future for $2.65 billion from Insight Partners. This move aims to enhance the tools and insights necessary to secure the digital economy, not just within the payments ecosystem but across various industries.
FBI, CISA, and DoD Warn of Continued Iranian Cyber Threats Targeting U.S. and Global Organizations
The FBI, Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense Cyber Crime Center (DC3) have issued a joint Cybersecurity Advisory (CSA) to alert network defenders that Iran-based cyber actors continue to target organizations in the U.S. and abroad as of August 2024. These attacks have impacted a wide range of sectors, including education, finance, healthcare, defense, and local governments in the U.S., as well as organizations in Israel, Azerbaijan, and the United Arab Emirates.
White House Urges Network Operators to Strengthen BGP Security
The White House’s cybersecurity office is urging network operators to bolster the security of the Border Gateway Protocol (BGP), a crucial yet vulnerable technology that routes internet traffic.
Sophisticated Malware Campaign “Voldemort” Targets Over 70 Global Organizations
In a startling development in the cybersecurity landscape, researchers have uncovered a highly sophisticated malware campaign, aptly named "Voldemort," that has already compromised over 70 organizations worldwide. This campaign, distinguished by its advanced techniques and stealthy execution, is believed to be primarily focused on espionage and intelligence gathering rather than financial theft.
How Python's Windows Apps Open Doors for Credential Thieves
Researchers at Horizon3.ai have uncovered a significant security flaw in Python applications running on Windows that could enable hackers to pilfer NTLM credentials. NTLM, short for NT Lan Manager, is an old-school authentication protocol still prevalent in many Windows setups.
FAA Proposes New Cybersecurity Rules to Safeguard Aircraft Systems Against Digital Threats
The Federal Aviation Administration (FAA) has proposed new rules to enhance the cybersecurity of airplanes, engines, and propellers, addressing the growing interconnectivity of aircraft systems.
Cybercriminals Exploit Fake Banking Apps: How PWAs Are Tricking iOS and Android Users
Progressive Web Apps (PWAs) are websites designed to look and feel like native apps, which can be installed on devices without users realizing they are third-party applications.
