Biztonsági szemle

North Korea's Lazarus Group has leveraged the backdoored PDF reader app SwiftLoader used in the RustBucket campaign to facilitate the deployment of the KANDYKORN macOS malware in a bid to better evade detection, according to The Hacker News.

Open-source artificial intelligence compute framework Ray has been found to be impacted by a critical vulnerability, tracked as CVE-2023-48023, which could be exploited to facilitate unauthorized node access, according to SecurityWeek.

Organizations from the Middle East and Africa have typically escaped public ransoms, but that's changing amid heightened geopolitical conflicts and digitalization initiatives.

Windows NT LAN Manager tokens could be exposed in a new attack leveraging forced authentication through a custom Microsoft Access file, The Hacker News reports.

Major logistics firm DP World Australia has disclosed that a cyberattack that disrupted its operations earlier this month resulted in the theft of limited data from its current and former employees, reports BleepingComputer.

India's premiere state-owned aerospace research organization National Aerospace Laboratories was claimed to be compromised by the LockBit ransomware operation, TechCrunch reports.

Cyberattack disrupts North Texas water utility Officials at North Texas Municipal Water District have confirmed that the water, wastewater, and solid waste management services provider had its business computer network impacted by a cyberattack...

BleepingComputer reports that major Chinese global automotive parts developer and manufacturer Yanfeng Automotive Interiors was targeted in a cyberattack earlier this month, which caused production disruptions at some of the North American plans of...

Europol and law enforcement agencies across seven countries, including the U.S., have dismantled a Ukraine-based ransomware operation following the arrests of its alleged leader and four accomplices, CyberScoop reports.

In a rare instance of an overseas arrest of ransomware perpetrators, four other high-profile gang members were also seized.

Without building security into our software products from the start, cyberattacks will continue unabated.

Dropping the ball on chemical security has precipitated "a national security gap too great to ignore," CISA warns.