Cybersecurity

Category Added in a WPeMatico Campaign

Cybersecurity

Qakbot-affiliated actors distribute Ransom Knight malware despite infrastructure takedown

The threat actors behind the Qakbot malware have been conducting a campaign since early August 2023 in which they have been distributing Ransom Knight ransomware and the Remcos backdoor via phishing emails. Notably, this activity appeared to begin before the FBI seized Qakbot infrastructure in late August and has been ongoing since, indicating the law […]

Cybersecurity

GoldDigger: New Android Trojan Targeting Dozens of Vietnamese Banks| Cyware Hacker News

A new Android trojan named GoldDigger has emerged to set its sights on Vietnam’s financial sector. Cybersecurity firm Group-IB revealed that its intriguing moniker is derived from a distinct “GoldActivity” activity embedded within its APK structure. Diving into Details GoldDigger was first detected in August, although its activity dates back to at least June. It […]

Cybersecurity

Nonprofit Service Provider Blackbaud Settles Data Breach Case for $49.5M With States

The fundraising software company Blackbaud agreed Thursday to pay $49.5 million to settle claims brought by the attorneys general of 49 states and Washington, D.C., related to a 2020 data breach that exposed sensitive information from 13,000 nonprofits. Health information, Social Security numbers and the financial information of donors or clients of the nonprofits, universities, […]

Cybersecurity

Construction insurer hit in data breach

Dive Brief: Builders Mutual Insurance Co., a commercial construction underwriter based in Raleigh, North Carolina, was the target of a hack that affected the personal information of 64,761 customers, current employees and former workers, according to a filing with the Maine Attorney General’s office on Sept. 29. The insurer noticed suspicious activity on Dec. 14, […]

Cybersecurity

CISA pivots focus to China-linked threats against critical infrastructure

Dive Brief: The Cybersecurity and Infrastructure Security Agency is sharply focused on threat activity tied to the People’s Republic of China as that country has become the top nation-state cyber adversary to the U.S. China is actively targeting more critical infrastructure, CISA Director Jen Easterly said Wednesday at the Secureworks Threat Intelligence Summit.  China-linked threat […]

Cybersecurity

Privacy nonprofit calls on FTC to investigate Grindr’s data practices

A complaint filed with the Federal Trade Commission (FTC) Wednesday urges the agency to investigate the LGBTQ+ dating app Grindr for potentially illegally storing and disclosing users’ sensitive data, including HIV and vaccination status. The Electronic Privacy Information Center’s (EPIC) complaint lays out Grindr’s history of compromising users’ privacy and safety, pointing most recently to […]

Cybersecurity

New OS Tool Tells You Who Has Access to What Data

Ensuring sensitive data remains confidential, protected from unauthorized access, and compliant with data privacy regulations is paramount. Data breaches result in financial and reputational damage but also lead to legal consequences. Therefore, robust data access security measures are essential to safeguard an organization’s assets, maintain customer trust, and meet regulatory requirements. A comprehensive Data Security […]

Cybersecurity

Factors leading to organizations losing control over IT and security environments – Help Net Security

Companies are challenged with the growing need to connect everything in their business while maintaining control over their security, productivity, and competitive growth, according to Cloudflare. “Today, the big clouds have built business models on capturing your data, making it hard to move your data. These captivity clouds will lure you in with one product, […]