Best Data Security Solutions for Insurance Providers – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Data security is crucial for insurance providers due to the sensitive nature of the data they handle, such as personal information, financial details, and health records. Effective data security solutions for insurance providers usually require a blend of various technologies, …

HP Hacked by Russian ‘Cozy Bear’ Hacker Group

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On December 12, 2023, Hewlett Packard Enterprise (HPE) received chilling news: the notorious nation-state actor Midnight Blizzard, also known as Cozy Bear, had breached its cloud-based email environment.  This audacious cyber espionage campaign sent shockwaves through the tech giant, raising …

Python based WIREFIRE web shell Attacking Ivanti Connect Secure (ICS) VPN appliances

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, QuoIntelligence’s research team unearthed a previously undetected variant of the notorious WIREFIRE web shell, a Python-based implant targeting compromised Ivanti Connect Secure (ICS) VPN appliances.  This discovery unveils a cunning tactic employed by threat actors to evade detection and …

Researchers Exploited Tesla Modem, Sony & Alpine Players in Pwn2Own Automotive

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Pwn2Own 2024 Automotive is a unique event aimed at identifying and fixing flaws in connected automotive technologies. Tokyo, Japan, hosts the Pwn2Own 2024 Automotive from January 24–26, 2024. Tesla is the title sponsor, and VicOne and Trend Micro’s Zero Day …

Mass Exploitation of Ivanti VPN Exposes Corporate Networks to Hack Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It was previously reported that Ivanti Connect Secure was vulnerable to an authentication bypass (CVE-2023-46805) and a command injection vulnerability (CVE-2024-21887) actively exploited by threat actors in the wild. Moreover, these vulnerabilities were added to the CISA’s known exploited vulnerability …

Exploit Released for Critical GoAnywhere MFT Auth Bypass : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortra-owned GoAnywhere MFT (Managed File Transfer) has been discovered with a new vulnerability that could allow an unauthorized threat actor to create an admin user via the administration panel. This vulnerability has been assigned with CVE-2024-0204, and the severity has …

Transfer Learning in Computer Vision: Adapting Pre-trained Models for New Tasks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

To simplify and speed up data-backed software solutions, specially trained machine models are used. However, it is challenging and time-consuming to train these models from the very beginning. That’s why transfer learning of already existing and pre-trained models is used …

LockBit Ransomware Gang Claims Cyber Attack on Subway

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An infamous cybercriminal group known as LockBit Ransomware recently targeted Subway’s food chain, unleashing a vicious attack that could potentially lead to the exposure of sensitive data. The extent of the damage caused by the attack is yet to be …

Re-vamped Zloader Attacking Windows Users With New RSA Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zloader, also known as Terdot, DELoader, or Silent Night, is a modular trojan that reappeared after nearly two years of absence but with significant enhancements to the loader module. Zloader has returned with upgrades to RSA encryption, an updated DGA, and …

ThreeAM Ransomware Attacking Small & Medium Companies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

For financial gain, hackers exploit ransomware through which they encrypt victims’ data and then demand a ransom payment in exchange for its release. It shows the urgency and importance of the compromised data, as they compel victims to pay to …