Cybersecurity

Category Added in a WPeMatico Campaign

Cybersecurity

N. Korean Hackers ‘Mixing’ macOS Malware Tactics to Evade Detection

Nov 28, 2023NewsroomMalware / Cyber Espionage The North Korean threat actors behind macOS malware strains such as RustBucket and KANDYKORN have been observed “mixing and matching” different elements of the two disparate attack chains, leveraging RustBucket droppers to deliver KANDYKORN. The findings come from cybersecurity firm SentinelOne, which also tied a third macOS-specific malware called […]

Cybersecurity

Rhysida ransomware gang claimed China Energy hack

Rhysida ransomware gang claimed China Energy hack Pierluigi Paganini November 25, 2023 The Rhysida ransomware group claimed to have hacked the Chinese state-owned energy conglomerate China Energy Engineering Corporation. The Rhysida ransomware gang added the China Energy Engineering Corporation to the list of victims on its Tor leak site. The China Energy Engineering Corporation (CEEC) […]

Cybersecurity

Portneuf Medical Center latest in a string of cyberattacks – East Idaho News

POCATELLO — Portneuf Medical Center is investigating a possible security breach that has the hospital’s emergency room on divert status. Administrators learned of the issue on Thursday, according to Mary Keating, spokesperson for Portneuf Medical Center. “We became aware of a network outage due to a potential security incident that is affecting Portneuf Medical Center,” […]

Cybersecurity

Municipal Water Authority of Aliquippa hacked by Iranian-backed cyber group

Municipal Water Authority of Aliquippa hacked by Iranian-backed cyber group Municipal Water Authority of Aliquippa hacked by Iranian-backed cyber group 01:22 ALIQUIPPA, Pa. (KDKA) – The Municipal Water Authority of Aliquippa said on Saturday that one of their booster stations had been hacked by an Iranian-backed cyber group. Matthew Mottes, the chairman of the board […]

Cybersecurity

Lazarus Group Exploit MagicLine4NX Flaw to Launch Supply Chain Attacks | Cyware Hacker news

The NCSC and Korea’s National Intelligence Service (NIS) have issued a joint report to warn organizations about new supply chain attacks that exploit a zero-day flaw in MagicLine4NX software. Codenamed Operation Dream Magic, these attacks are attributed to the North Korea-based Lazarus threat group.  According to the report, threat actors are leveraging the flaw to […]

Cybersecurity

Experts Uncover Passive Method to Extract Private RSA Keys from SSH Connections

Nov 27, 2023NewsroomServer Security / Encryption A new study has demonstrated that it’s possible for passive network attackers to obtain private RSA host keys from a vulnerable SSH server by observing when naturally occurring computational faults that occur while the connection is being established. The Secure Shell (SSH) protocol is a method for securely transmitting […]