Cybersecurity

CitrixBleed isn’t going away: Security experts struggle to control critical vulnerability

U.S. authorities are struggling to contain a critical vulnerability in Citrix Netscaler Application Delivery Controller and Netscaler Gateway, widely used networking appliances that help companies enable secure remote access.  Thousands of organizations worldwide use the technology, and researchers have seen attacks targeting a wide range of industries, including financial services companies, defense contractors, law firms, […]

Cybersecurity

Karakurt Data Extortion Group | CISA

SUMMARY The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), the Department of the Treasury (Treasury), and the Financial Crimes Enforcement Network (FinCEN) are releasing this joint Cybersecurity Advisory (CSA) to provide information on the Karakurt data extortion group, also known as the Karakurt Team and Karakurt Lair. Karakurt actors have […]

Cybersecurity

‘Virtual Wild, Wild West’: Cybercriminals use Wyoming shell companies for global hacks

Estimated read time: 4-5 minutes WASHINGTON — Digital sabotage had knocked a Somalian news website and email accounts offline in August. “I can still feel the frustration,” reporter Abdalle Ahmed Mumin told Reuters. “Our link to the outside world, to the international media, is our website.” It was only after getting help from Qurium, a […]

Cybersecurity

MITRE Launches Critical Infrastructure Threat Model Framework

The cyber threat to critical infrastructure is increasing, prompting cyber government agencies to issue more warnings and advisories for industrial businesses. Against this backdrop, MITRE has launched EMB3D, a new threat model framework for defenders tasked with protecting operational technology (OT) and industrial control systems (ICS). EMB3D provides a knowledge base of cyber threats to […]

Cybersecurity

Google’s New Tracking Protection in Chrome Blocks Third-Party Cookies

Dec 15, 2023NewsroomPrivacy / User Tracking Google on Thursday announced that it will start testing a new feature called “Tracking Protection” starting January 4, 2024, to 1% of Chrome users as part of its efforts to deprecate third-party cookies in the web browser. The setting is designed to limit “cross-site tracking by restricting website access […]

Cybersecurity

More than 45,000 affected by cyberattack on Idaho nuclear research lab

The information of more than 45,000 people was leaked because of a cyberattack late last month at a federally run nuclear research lab. In filings with regulators in [Maine](https://apps.web.maine.gov/online/aeviewer/ME/40/ff925db5-9987-4a47-a5bc-a89c94f794f5.shtml, Montana and Oregon, the Idaho National Laboratory (INL), said 45,047 employees, former employees, spouses and dependents had sensitive information stored on an “off-site data center” that […]