Cybersecurity Industry News Review: February 15, 2023

CySecBot
3 minutes

By Joe Fay NHS still recovering from ransomware incidents. Network firm employee confesses to data extortion, as U.S. cyber ambassador admits their Twitter account was hacked as the President turns to industry leaders to advise him. NHS Still Reconnecting After 2022 Lockbit Attack on Supplier Just how disruptive ransomware can be was illustrated this past week, six months after an attack on UK health software supplier Advanced. The attack on Advanced first emerged in August 2022, causing disruption across a range of NHS services. Health and secondary care minister Will Quince said that while most affected NHS organizations were up…

breaking news

AdSense fraud campaign relies on 10,890 sites that were infected since September 2022

GlobalDefenseBot
3 minutes

The threat actors behind a massive AdSense fraud campaign infected 10,890 WordPress sites since September 2022. In November 2022, researchers from security firm Sucuri reported to have tracked a surge in WordPress malware redirecting website visitors to fake Q&A sites via ois[.]is. The experts were tracking the campaign since September 2022, the campaign’s end goal was black […]

The post AdSense fraud campaign relies on 10,890 sites that were infected since September 2022 appeared first on Security Affairs.

What is Virtual Patching and How Does It Work?

CySecBot
9 minutes

Virtual patching uses policies, rules and security tools to block access to a vulnerability until it can be patched. Zero-day threats and legacy systems are two ways that vulnerabilities can be created for which no patch may exist for some time, if ever. In those cases, security teams can block a potential attack path until […]

The post What is Virtual Patching and How Does It Work? appeared first on eSecurityPlanet.

breaking news

Experts discover over 451 clipper malware-laced packages in the PyPI repository

GlobalDefenseBot
2 minutes

Threat actors published more than 451 unique malware-laced Python packages on the official Python Package Index (PyPI) repository. Phylum researchers spotted more than 451 unique Python packages on the official Python Package Index (PyPI) repository in an attempt to deliver clipper malware on the developer systems. According to the experts, the activity is still ongoing […]

The post Experts discover over 451 clipper malware-laced packages in the PyPI repository appeared first on Security Affairs.

Malware that can do anything and everything is on the rise

CySecBot
1 minute

“Swiss Army knife” malware – multi-purpose malware that can perform malicious actions across the cyber-kill chain and evade detection by security controls – is on the rise, according to the results of Picus Security’s analysis of over…

breaking news

Enigma info-stealing malware targets the cryptocurrency industry

GlobalDefenseBot
3 minutes

Alleged Russian threat actors have been targeting cryptocurrency users in Eastern Europe with Enigma info-stealing malware. A malware campaign conducted by alleged Russian threat actors has been targeting users in Eastern European in the crypto industry. The attackers are sending out emails with fake job opportunities as bait in an attempt to trick victims into […]

The post Enigma info-stealing malware targets the cryptocurrency industry appeared first on Security Affairs.

Typosquatting: Legit Abquery Package Duped with Malicious Aabquerys

CySecBot
1 minute

By Deeba Ahmed
Aabquerys use the typosquatting technique to encourage downloading malicious components, as it has been cleverly named to make it sound like the legitimate NPM module Abquery.
This is a post from HackRead.com Read the original post: Typ…

Chinese Hackers Keep Targeting Group-IB Cybersecurity Firm

CySecBot
1 minute

By Deeba Ahmed
An APT group known as Tonto Team has tried targeting the Singapore-based Group-IB cybersecurity firm for the second time.
This is a post from HackRead.com Read the original post: Chinese Hackers Keep Targeting Group-IB Cybersecurity Firm