North Korean nationals posing as IT workers have been extorting their employers after gaining insider access.
The post North Korean Fake IT Workers Extort Employers After Stealing Data appeared first on SecurityWeek.
Organizations Faster at Detecting OT Incidents, but Response Still Lacking: Report
SANS has published its 2024 State of ICS/OT Cybersecurity report, based on a survey of over 530 critical infrastructure sector professionals.
The post Organizations Faster at Detecting OT Incidents, but Response Still Lacking: Report appeared first on SecurityWeek.
Alabama Man Arrested in SEC Social Media Account Hack That Led the Price of Bitcoin to Spike
An Alabama man has been arrested over his role in the hacking of the SEC’s X account, which led to a Bitcoin price spike.
The post Alabama Man Arrested in SEC Social Media Account Hack That Led the Price of Bitcoin to Spike appeared first on SecurityWeek.
Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign
Threat actors are leveraging fake Google Meet web pages as part of an ongoing malware campaign dubbed ClickFix to deliver infostealers targeting Windows and macOS systems.
“This tactic involves displaying fake error messages in web browsers to deceive users into copying and executing a given malicious PowerShell code, finally infecting their systems,” French cybersecurity company Sekoia said in
“This tactic involves displaying fake error messages in web browsers to deceive users into copying and executing a given malicious PowerShell code, finally infecting their systems,” French cybersecurity company Sekoia said in
Omni Family Health Data Breach Impacts 470,000 Individuals
Omni Family Health has disclosed a data breach impacting nearly 470,000 current and former patients and employees.
The post Omni Family Health Data Breach Impacts 470,000 Individuals appeared first on SecurityWeek.
Cyera Acquires Data Loss Prevention Firm Trail Security for $162 Million
Data security company Cyera has acquired stealth mode startup Trail Security for its data loss prevention (DLP) technology.
The post Cyera Acquires Data Loss Prevention Firm Trail Security for $162 Million appeared first on SecurityWeek.
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple’s Transparency, Consent, and Control (TCC) framework in macOS that has likely come under exploitation to get around a user’s privacy preferences and access data.
The shortcoming, codenamed HM Surf by the tech giant, is tracked as CVE-2024-44133. It was addressed by Apple as part of macOS Sequoia 15 by removing the
The shortcoming, codenamed HM Surf by the tech giant, is tracked as CVE-2024-44133. It was addressed by Apple as part of macOS Sequoia 15 by removing the
Microsoft warns it lost some customer’s security logs for a month
Microsoft is warning enterprise customers that, for almost a month, a bug caused critical logs to be lost, putting at risk companies that rely on this data to detect unauthorized activity. […]
Fake Google Meet conference errors push infostealing malware
A new ClickFix campaign is luring users to fraudulent Google Meet conference pages showing fake connectivity errors that deliver info-stealing malware for Windows and macOS operating systems. […]
Be Aware of These Eight Underrated Phishing Techniques
There are a number of lesser-known phishing techniques that are often overlooked or underestimated yet increasingly being employed by attackers.
The post Be Aware of These Eight Underrated Phishing Techniques appeared first on SecurityWeek.