September 2024 – Page 40

Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches

Shadow apps, a segment of Shadow IT, are SaaS applications purchased without the knowledge of the security team. While these applications may be legitimate, they operate within the blind spots of the corporate security team and expose the company to attackers.
Shadow apps may include instances of software that the company is already using. For example, a dev team may onboard their own

Wisconsin Insurer Discloses Data Breach Impacting 950,000 Individuals

Wisconsin Physicians Service Insurance Corporation says the personal information of 950,000 people was stolen in the MOVEit hack last year.

The post Wisconsin Insurer Discloses Data Breach Impacting 950,000 Individuals appeared first on SecurityWeek.

China-Linked Hackers Target Drone Makers in Taiwan

A Chinese-speaking threat actor tracked as Tidrone has been observed targeting military and satellite industries in Taiwan.

The post China-Linked Hackers Target Drone Makers in Taiwan appeared first on SecurityWeek.

NoName ransomware gang deploying RansomHub malware in recent attacks

The NoName ransomware gang has been trying to build a reputation for more than three years targeting small and medium-sized businesses worldwide with its encryptors and may now be working as a RansomHub affiliate. […]

New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers

A new side-channel attack dubbed PIXHELL could be abused to target air-gapped computers by breaching the “audio gap” and exfiltrating sensitive information by taking advantage of the noise generated by the pixels on the screen.
“Malware in the air-gap and audio-gap computers generates crafted pixel patterns that produce noise in the frequency range of 0 – 22 kHz,” Dr. Mordechai Guri, the head of

Mustang Panda Deploys Advanced Malware to Spy on Asia-Pacific Governments

The threat actor tracked as Mustang Panda has refined its malware arsenal to include new tools in order to facilitate data exfiltration and the deployment of next-stage payloads, according to new findings from Trend Micro.
The cybersecurity firm, which is monitoring the activity cluster under the name Earth Preta, said it observed “the propagation of PUBLOAD via a variant of the worm HIUPAN.”

Slim CD Data Breach Impacts 1.7 Million Individuals

Slim CD says the personal and credit card information of 1.7 million was compromised in a ten-month-long data breach.

The post Slim CD Data Breach Impacts 1.7 Million Individuals appeared first on SecurityWeek.

Poland’s Cybersecurity Experts Foil Russian and Belarussian Attacks

Poland’s security officials said they have foiled cyberattacks and online blackmail attempts by groups acting for Russian and Belarusian services.

The post Poland’s Cybersecurity Experts Foil Russian and Belarussian Attacks appeared first on SecurityWeek.

Critical SonicWall SSLVPN bug exploited in ransomware attacks

Ransomware affiliates exploit a critical security vulnerability in SonicWall SonicOS firewall devices to breach victims’ networks. […]

Quad7 botnet targets more SOHO and VPN routers, media servers

The Quad7 botnet is expanding its targeting scope with the addition of new clusters and custom implants that now also target Zyxel VPN appliances and Ruckus wireless routers. […]

Month: September 2024