Cybersecurity

CISA and NFL Collaborate to Secure Super Bowl LVIII

The US Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the National Football League (NFL), Allegiant Stadium and Super Bowl LVIII partners, has conducted a cybersecurity tabletop exercise this week in preparation for Super Bowl LVIII. The exercise aimed to assess and enhance cybersecurity response capabilities, plans and procedures for the upcoming event. The Super […]

Cybersecurity

Python Malware Targets Tatar-Language Users: TA866 Threat Actor Strikes Again

In the latest cybersecurity news, researchers have found a new Python malware targeting Tatar language-speaking users. The Tatar language is a Turkic language spoken primarily by the Tatars, an ethnic group in Russia and neighboring countries. This Python malware strain, sourced by Cyble, can capture screenshots on the victim’s systems and send them over to […]

Cybersecurity

From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

Sep 25, 2023THNSpyware / Cyber Espionage Tibetan, Uyghur, and Taiwanese individuals and organizations are the targets of a persistent campaign orchestrated by a threat actor codenamed EvilBamboo to gather sensitive information. “The attacker has created fake Tibetan websites, along with social media profiles, likely used to deploy browser-based exploits against targeted users,” Volexity security researchers […]

Cybersecurity

T-Mobile data breach exposes personal customer information

Telecommunications company T-Mobile has been accused of two data breaches – one caused by a “system glitch” that accidentally exposed the personal information of its customers and the other that allegedly exposed employee personal information. The data breach was recognized by customers on September 20, who noticed that, upon logging into the T-Mobile app, that […]

Cybersecurity

From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

Sep 25, 2023THNSpyware / Cyber Espionage Tibetan, Uyghur, and Taiwanese individuals and organizations are the targets of a persistent campaign orchestrated by a threat actor codenamed EvilBamboo to gather sensitive information. “The attacker has created fake Tibetan websites, along with social media profiles, likely used to deploy browser-based exploits against targeted users,” Volexity security researchers […]

Cybersecurity

CISA urges use of memory safe code in software development

The Cybersecurity and Infrastructure Security Agency is urging the software industry to embrace the use of memory safe programming languages as part of a wider effort to eliminate security vulnerabilities in code.  CISA called for the changes alongside a push to embrace secure-by-design practices during the software development stage and to increase the security of […]

Cybersecurity

Cato Networks Raises $238M on $3B Valuation to Move Upmarket

Cloud Access Security Brokers (CASB) , Data Loss Prevention (DLP) , Endpoint Security Equity Investment Will Allow Cato Networks to Tightly Integrate CASB, DLP With SASE Michael Novinson (MichaelNovinson) • September 22, 2023     Shlomo Kremer, co-founder and CEO, Cato Networks (Image: Cato Networks) A late-stage SASE startup led by a serial entrepreneur hauled […]