ID Theft Service Resold Access to USInfoSearch Data

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

One of the cybercrime underground’s more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked accounts at the U.S. consumer data broker USinfoSearch, KrebsOnSecurity has learned. Since at least February 2023, a service …

APT Hackers Behind SysJoker Attacking Critical Industrial Sectors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SysJoker malware was initially discovered to be used by the APT group dubbed “WildCard” and targeted Israel’s educational sector. However, the operations of this APT threat actor have expanded to include additional malware variants, with one of them found to …

Ardent Health Ransomware Attack: Multiple Hospitals Affected

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The information technology systems of Ardent Health Services were targeted in a recent ransomware attack which has resulted in a major cybersecurity incident. As a result of this attack, the company has experienced significant disruption to its services and operations, …

OwnCloud Critical Vulnerability Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Owncloud was discovered with a new vulnerability associated with exposing sensitive information to an unauthorized third party that was assigned with CVE-2023-49103 and a severity rating of 10.0 (Critical). ownCloud is a file server and collaboration platform that allows users …

CISA & NCSC Discloses Guidelines for Secure AI System Development

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The US Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (NCSC) released the Guidelines for Secure AI System Development to address the integration of artificial intelligence (AI), cybersecurity, and critical infrastructure. The Guidelines underline the …

Kansas Court Hack: Attackers Stole Sensitive Data From Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kanas Supreme Court released the statement for the cyber incident that stole sensitive data from systems. The Kansas Supreme Court released the Statement (Chief Justice Marla Luckert and Justices Eric Rosen, Dan Biles, Caleb Stegall, Evelyn Wilson, K.J. Wall, and …

Broadcom Acquires VMware in a $61 Billion Deal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Embarking on a transformative journey, Broadcom has announced the triumphant acquisition of VMware, heralding a watershed moment in the sphere of infrastructure technology.  The amalgamation of Broadcom and VMware signifies a formidable coalition, merging Broadcom’s engineering mastery with VMware’s cloud-centric …

Researcher Discloses OpenCart Vulnerability; Company Reacts Aggressively

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher who goes under the name “0xbro” discovered a Static code injection vulnerability in OpenCart, which allows the writing of arbitrary untrusted data on config.php and admin/config.php files that could result in remote code execution. This vulnerability was …

New GPS Attacks Targeting Commercial Flights Navigation Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the vast expanse of the aviation realm, the Global Positioning System (GPS) has transcended its role as a navigational boon to reveal an insidious vulnerability, setting the stage for a potential aviation crisis. Since September 2023, a disquieting wave …

SysJoker Malware Attacking Windows, Linux and Mac Users Abusing OneDrive

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SysJoker malware, a multi-platform backdoor with several variants for Windows, Linux, and Mac, has been observed being used by a Hamas-affiliated APT to target Israel. This malware was first identified by Intezer in 2021 and was recently used in targeted attacks. …