In a major cyber incident that unfolded at four major Australian ports, hackers not only incapacitated the operations but also managed to steal employee data, according to the port operator. The incident came to light on November 10 and involved the Down Under subsidiary of stevedore DP World. Employee Data Breach by Hackers The ramifications of the cyber incident became
In a concerning turn of events, Big Brothers Big Sisters of America (BBBSA), a renowned nonprofit organization providing mentorship programs for children and adolescents in the United States, has become the latest target of cybercriminals. The organization recently confirmed that its network suffered a security incident, resulting in the theft of sensitive user data. Security Incident Notification On November 22nd,
In a concerning development, a notorious hacker identified as IntelBroker recently claimed to have successfully infiltrated General Electric, a renowned conglomerate with significant collaborations with the Defense Advanced Research Projects Agency (DARPA). The breach has sparked national security concerns, as sensitive information related to General Electric’s collaborative projects with DARPA may have been compromised. Confirmation of the hack General Electric
Over the years, the SysJoker malware has emerged as a potent weapon in the arsenal of threat actors targeting specific entities during periods of conflict. This article delves deep into the recent developments surrounding SysJoker, shedding light on its association with targeted attacks during the Israel-Hamas conflict and its remarkable transformation through a complete code rewrite. Background on the SysJoker
As the world becomes increasingly interconnected, cyber threats continue to pose a significant challenge for nations across the globe. In recent times, a surge in cyberattacks targeting Russia has captured international attention. It has been determined that Asian hackers, specifically state-sponsored threat actors from China and North Korea, are responsible for this unsettling wave of cyber assaults. Admission of COO
In yet another alarming incident of cyber warfare, a North Korean threat group known as Diamond Sleet (Zinc) breached a prominent Taiwanese software company. Microsoft, after extensive analysis and investigation, discovered the breach and revealed critical details about the tactics employed by these malicious actors. This article delves into the incident, providing an in-depth look at the threat actor, the
Apache ActiveMQ, a Java-based open-source protocol, has long been relied upon by distributed applications for secure message exchange. However, recent developments have uncovered a critical vulnerability that allows threat actors to exploit the protocol, leading to Remote Code Execution (RCE). This article examines the impact of this vulnerability, particularly in relation to the widespread infiltration of Linux systems by the
In an increasingly digital world, organizations face significant threats from identity-based attacks. To combat this growing problem, Silverfort has developed patented technology that aims to protect organizations from such attacks. By integrating with existing identity and access management solutions, Silverfort offers innovative capabilities that are becoming increasingly necessary each day. Statistics on data breaches A recent report by Silverfort and
With the growing popularity of Mac computers, hackers have begun targeting these users with a malicious fake browser update chain called ClearFake. Originally confined to Windows systems, this social engineering initiative has now expanded its scope to encompass geolocation and various operating systems. Expansion of Social Engineering Initiative Malwarebytes, a leading cybersecurity company, reports that threat actors are now targeting
Mobile banking Trojans have emerged as a persistent issue for Indian smartphone users, with cybercriminals employing deceptive tactics on social media and messaging platforms to spread malware. As India increasingly relies on digital payments, the threat of mobile malware infections poses a significant risk to users’ financial assets and personal data. The growing reliance on digital payments in India India
In a shocking turn of events, one of the world’s largest libraries fell victim to a crippling ransomware attack on October 28th. The attack left crucial services disrupted and raised concerns about potential data theft. The library’s recovery efforts are well underway, but it may take weeks, if not months, before full restoration is achieved. Description of the Attack The
The cybersecurity firm TAG recently discovered a critical Cross-Site Scripting (XSS) flaw in Zimbra’s email server (CVE-2023-37580), which was actively exploited in June. This vulnerability posed a significant threat to users’ information and system security. Prompt action is required to effectively address this issue. Zimbra’s Response Recognizing the severity of the issue, Zimbra promptly responded with a hotfix released on
