For individuals

Here’s why organizations really need to do a better job managing the identities of their contractors.

TechRadar reports that vulnerable versions of the Apache Log4j software have been observed across 38% of apps between Aug. 15 and Nov. 15, indicating the enduring security risk of the software.

Exploitation of privilege escalation vulnerabilities accounted for 55% of insider threats from January 2021 to April 2023, while the remainder of threats involved offensive tool misuse, reports BleepingComputer.

More than 700 smartphones from Apple, Google, Samsung, and 21 other brands have been impacted by a collection of 14 vulnerabilities dubbed 5Ghoul that concern the implementation of Qualcomm and MediaTek 5G mobile network modem firmware, according to The Hacker News.

Central Virginia-based Greater Richmond Transit Company has confirmed having its network impacted by a cyberattack around Thanksgiving, which disrupted parts of its network and some of its apps, reports The Record, a news site by cybersecurity firm Recorded Future.

Data from patients, employees, and dependents at Kentucky-based health network Norton Healthcare has been compromised following a May ransomware attack that was previously claimed by the ALPHV/BlackCat ransomware operation, according to BleepingComputer.

Updated GuLoader, DarkGate malware strains emerge Continuous improvements have been introduced to the GuLoader and DarkGate malware strains, The Hacker News reports.

U.S. critical infrastructure organizations have been urged by Deputy National Security Adviser Anne Neuberger to strengthen cybersecurity following attacks by Iranian hacking group Cyber Av3ngers against water utilities through the exploitation of Unitronics programmable logic controllers, The Associated Press reports.