White House and ECCouncil Partner to Invest $15 Million in Cybersecurity Training Programs
The White House and ECCouncil have teamed up to invest $15 million in training programs to address the global cybersecurity workforce gap, aiming to train over 50,000 students in cybersecurity skills such as ethical hacking and network defense.
View full story…
Critical Apache OFBiz RCE Vulnerability CVE-2024-38856 Identified
Security researchers have discovered a critical pre-authentication remote code execution vulnerability in Apache OFBiz, allowing threat actors to execute remote code without authentication.
View full story…
Critical Security Vulnerability Discovered in Rockwell Automation’s ControlLogix and GuardLogix Controllers
A flaw in Rockwell Automation’s controllers allows threat actors to bypass security features and gain unauthorized access to industrial control systems.
View full story…
Design Weaknesses in Microsoft’s Windows Smart App Control and SmartScreen Features Exploited by Attackers Since 2018
Security researchers have identified vulnerabilities in Windows Smart App Control and SmartScreen features, allowing attackers to bypass security checks and gain access to systems since 2018.
View full story…
Chinese APT Group StormBamboo Compromises ISP Through DNS Poisoning Attack
Security researchers have identified StormBamboo as a China-linked APT group responsible for compromising an ISP through a supply chain attack involving DNS poisoning.
View full story…
Nation-State Threat Actors Targeting Physical Device Supply Chains Highlighted in Recent Reports
Growing concern over nation-state threat actors targeting physical device supply chains and tampering with hardware and firmware integrity emphasized in recent reports by HP Wolf Security and HP, Inc.
View full story…
Latest Cybernews
US Releases High-Profile Russian Cybercriminals in Prisoner Exchange
The recent prisoner exchange involving Belarus, Germany, Norway, Russia, Slovenia, and the US resulted in the release of 24 prisoners, including notorious cybercriminals like Roman Valerevich Seleznev and Vladislav Klyushin, raising concerns about the implications of releasing individuals involved in serious criminal activities.
View full story…
Fighting Ursa APT28 Targets European Diplomats with Car-for-Sale Phishing Campaign
Russian threat actor Fighting Ursa, also known as APT28 or Fancy Bear, uses car-for-sale phishing lure to distribute HeadLace malware targeting diplomats across Europe.
View full story…
EPA Faces Increasing Cyber Risks in Water and Wastewater Systems
The US Environmental Protection Agency is addressing cybersecurity risks in the water sector following incidents of disruption and threats to public health and the environment.
View full story…
New Windows Backdoor Malware BITSLOTH Linked to Cyber Attack on South American Government’s Foreign Ministry
Cybersecurity researchers have identified a new Windows backdoor malware called BITSLOTH, linked to a cyber attack on a South American government’s Foreign Ministry in June 2024.
View full story…
UK Regulator Warns Social Media Platforms Over Children’s Privacy Compliance
The UK’s Information Commissioner’s Office issues warnings to 11 social media and video sharing platforms for failing to comply with the Children’s Code regarding children’s privacy practices.
View full story…
Suspected Chinese Hackers Target Taiwan Research Institute with Cyber Intrusion
China’s APT41 breaches Taiwan research institute, exfiltrates data using ShadowPad and Cobalt Strike.
View full story…
NCSC Launches ACD 2.0 to Enhance National Cyber Resilience
The National Cyber Security Centre (NCSC) has introduced ACD 2.0, a new suite of services aimed at protecting the majority of people in the UK from cyber attacks through collaboration with industry and academia.
View full story…
Cybercriminals Exploit Cloudflare Tunnels for Malware Distribution
Attackers are using Cloudflare’s TryCloudflare service to distribute malware, including families like AsyncRAT and Remcos RAT, through rate-limited tunnels and phishing emails containing ZIP archives.
View full story…