Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks

The newly discovered Chinese nation-state actor known as Volt Typhoon has been observed to be active in the wild since at least mid-2020, with the hacking crew linked to never-before-seen tradecraft to retain remote access to targets of interest. The findings come from CrowdStrike, which is tracking the adversary under the name Vanguard Panda. "The adversary consistently employed ManageEngine
https://thehackernews.com/2023/06/chinese-hackers-using-never-before-seen.html?utm_source=dlvr.it&utm_medium=blogger

Twitter Hacker Sentenced to 5 Years in Prison for $120,000 Crypto Scam

A U.K. citizen who took part in the massive July 2020 hack of Twitter has been sentenced to five years in prison in the U.S. Joseph James O'Connor (aka PlugwalkJoe), 24, was awarded the sentence on Friday in the Southern District of New York, a little over a month after he pleaded guilty to the criminal schemes. He was arrested in Spain in July 2021. The infamous Twitter breach allowed the
https://thehackernews.com/2023/06/twitter-hacker-sentenced-to-5-years-in.html?utm_source=dlvr.it&utm_medium=blogger

New Cryptocurrency Mining Campaign Targets Linux Systems and IoT Devices

Internet-facing Linux systems and Internet of Things (IoT) devices are being targeted as part of a new campaign designed to illicitly mine cryptocurrency. "The threat actors behind the attack use a backdoor that deploys a wide array of tools and components such as rootkits and an IRC bot to steal device resources for mining operations," Microsoft threat intelligence researcher Rotem Sde-Or said.
https://thehackernews.com/2023/06/new-cryptocurrency-mining-campaign.html?utm_source=dlvr.it&utm_medium=blogger

Startup Security Tactics: Friction Surveys

When we do quarterly planning, my team categorizes our goals within four evergreen outcomes: Reduce the risk of information security incidents Increase trust in Vanta's information security program Reduce the friction caused by information security controls Use security expertise to support the business In this article, I'm going to focus on number three: reducing friction. Declaring your
https://thehackernews.com/2023/06/startup-security-tactics-friction.html?utm_source=dlvr.it&utm_medium=blogger

Hackers Use Weaponized PDF Files to Attack Manufacturing, and Healthcare Organizations

Recently, eSentire TRU (Threat Response Unit) reported that since November 2022, it had observed the resurrection of a malicious campaign that Hackers Attack on targets explicitly the following organizations:- While cybersecurity researchers acknowledge that the campaign is being carried out by threat actors who are native Russian speakers. In this analysis, experts mainly focus on […] The post Hackers Use Weaponized PDF Files to Attack Manufacturing, and Healthcare Organizations appeared first on Cyber Security News.
https://cybersecuritynews.com/hackers-use-weaponized-pdf-files-to-attack-organizations/?utm_source=dlvr.it&utm_medium=blogger

ASUS Releases Patches to Fix Critical Security Bugs Impacting Multiple Router Models

Taiwanese company ASUS on Monday released firmware updates to address, among other issues, nine security bugs impacting a wide range of router models. Of the nine security flaws, two are rated Critical and six are rated High in severity. One vulnerability is currently awaiting analysis. The list of impacted products are GT6, GT-AXE16000, GT-AX11000 PRO, GT-AXE11000, GT-AX6000, GT-AX11000,
https://thehackernews.com/2023/06/asus-releases-patches-to-fix-critical.html?utm_source=dlvr.it&utm_medium=blogger

Over 100,000 Stolen ChatGPT Account Credentials Sold on Dark Web Marketplaces

Over 101,100 compromised OpenAI ChatGPT account credentials have found their way on illicit dark web marketplaces between June 2022 and May 2023, with India alone accounting for 12,632 stolen credentials. The credentials were discovered within information stealer logs made available for sale on the cybercrime underground, Group-IB said in a report shared with The Hacker News. "The number of
https://thehackernews.com/2023/06/over-100000-stolen-chatgpt-account.html?utm_source=dlvr.it&utm_medium=blogger

Reddit Hackers Threaten to Leak 80GB of Stolen Data

The February 5th intrusion on Reddit was allegedly carried out by the ALPHV ransomware operation, also known as BlackCat. Threat actors gained Reddit’s systems through this phishing attempt to obtain internal documents, source code, employee data, and some information about the company’s advertisers. Reddit revealed that its systems had been hacked on February 9. Threat […] The post Reddit Hackers Threaten to Leak 80GB of Stolen Data appeared first on Cyber Security News.
https://cybersecuritynews.com/reddit-hackers-threaten/?utm_source=dlvr.it&utm_medium=blogger

How to simplify the process of compliance with U.S. Executive Order 14028

In this Help Net Security video, Nick Mistry, SVP and CISO at Lineaje, offers tips to simplify the process of compliance with U.S. Executive Order 14028. A key part of U.S. Executive Order 14028 is for organizations that work with… Read more → The post How to simplify the process of compliance with U.S. Executive Order 14028 first appeared on IT Security News.
https://www.itsecuritynews.info/how-to-simplify-the-process-of-compliance-with-u-s-executive-order-14028/?utm_source=dlvr.it&utm_medium=blogger

Goodbyes are difficult, IT offboarding processes make them harder

When employees, contractors and service providers leave an organization, they take with them knowledge, capabilities, and professional achievements. They should leave behind any proprietary or confidential data belonging to the organization, but Osterman Research found that 69% of organizations polled… Read more → The post Goodbyes are difficult, IT offboarding processes make them harder first appeared on IT Security News.
https://www.itsecuritynews.info/goodbyes-are-difficult-it-offboarding-processes-make-them-harder/?utm_source=dlvr.it&utm_medium=blogger