SpyCloud has the world's largest repository of recaptured dark web data. Simply enter your email and we’ll check your corporate domain against hundreds of billions of recaptured darknet assets, from credentials to PII – for free. See your darknet footprint, including breach exposures and malware-exfiltrated data that puts your business at risk of account takeover and ransomware. Check your exposure now.
We're always looking for ways to improve the N2K CyberWire network to give you an intelligence-driven news experience. Please take a few minutes to tell us about your network experience and share your feedback by completing our 2024 Audience Survey, and you will have a chance to win a $100 Amazon gift card. Take the survey.
Researchers at Bitdefender are tracking a newly discovered China-aligned threat actor they've dubbed "Unfading Sea Haze" that's targeting military and government targets associated with the South China Sea. The threat actor has been conducting cyberespionage in the region since at least 2018. Bitdefender explains that the threat actor's "custom malware arsenal, including the Gh0st RAT family and Ps2dllLoader, showcases a focus on flexibility and evasion techniques. The observed shift towards modularity, dynamic elements, and in-memory execution highlights their efforts to bypass traditional security measures. Attackers are constantly adapting their tactics, necessitating a layered security approach." The researchers add that "[t]he extended period of Unfading Sea Haze’s invisibility, exceeding five years for a likely nation-state actor, is particularly concerning."
The growing emergence of artificial intelligence (AI) has upended conventional security, ushering in a transformative shift in both defensive and offensive strategies. In this report, we collected data from over 3,900 pentests. Here is what you will learn:
Download the report now and gain insights from the pioneers of Pentesting as a Service.
The United Kingdom will propose a law requiring all ransomware victims to report attacks and obtain licenses before paying a ransom, the Record reports. The law would also ban critical infrastructure organizations from making ransomware payments in order to remove incentives for ransomware gangs to target these entities. The proposed legislation is still in early stages and likely won't move forward until after the next general election later this year. The Record notes, however, "Even if the proposals are not immediately implemented, they mark a dramatic development in how governments around the world are responding to the ransomware crisis."
Launching a new product or service? Looking for alternative ways to recruit cyber talent? Want your company or leadership team members to be seen as an industry thought leader? Be heard by over 350,000 subscribers on the N2K CyberWire network. Whether through sponsored advertising, executive events, or exclusive interviews, we offer off-the-shelf and bespoke packages to help you reach your goals. Let’s work together.
A hacktivist group called "Ikaruz Red Team" is using several strains of ransomware to launch disruptive attacks against government infrastructure in the Philippines, according to SentinelOne. The researchers note, "Within the hacktivist landscape, Ikaruz Red Team fits into a larger movement of threat actors committing unsophisticated yet damaging attacks targeting the Philippines region. There is indication that a broader cluster of these behaviors may be part of rising regional tensions with China and a desire to destabilize Philippine critical infrastructure."
Today's issue includes events affecting China, the Philippines, the United Kingdom, and the United States.
GhostEngine mining attacks kill EDR security using vulnerable drivers (BleepingComputer) A malicious crypto mining campaign codenamed 'REF4578,' has been discovered deploying a malicious payload named GhostEngine that uses vulnerable drivers to turn off security products and deploy an XMRig miner.
CentroMed Confirms Data Breach Affecting an Estimated 400k | JD Supra (JD Supra) On May 20, 2024, El Centro Del Barrio d/b/a CentroMed filed a notice of data breach with the Attorney General of Texas after discovering that an...
Critical SAML Auth Bypass Vulnerability Found in GitHub Enterprise Server (Heimdal Security Blog) A critical SAML auth bypass vulnerability has been identified and patched in GitHub Enterprise Server. Users are suggested to patch fast!
Ikaruz Red Team | Hacktivist Group Leverages Ransomware for Attention Not Profit (SentinelOne) Politically-motivated attacks involving ransomware are on the rise as hacktivists aim to increase their impact through easily available tools.
Criminal record database of millions of Americans dumped online | Malwarebytes (Malwarebytes) A notorious cybercriminal involved in breaches has released a database containing 70 million US criminal records.
Ivanti Patches Critical Code Execution Vulnerabilities in Endpoint Manager (SecurityWeek) Ivanti has released product updates to resolve multiple vulnerabilities, including critical code execution flaws in Endpoint Manager.
2024 Voice of the CISO Report (Proofpoint) The Proofpoint 2024 Voice of the CISO report surveyed 1,600 CISOs from around the world. We invited them to share their first-hand experiences during the past 12 months and offer their insights for the next two years.
Cyber firm CyberArk inks $1.54 billion deal to acquire Venafi (The Record) Acquiring Venafi will enable CyberArk to “establish a unified platform for end-to-end machine identity security at enterprise scale,” the company said.
DoD CIO debuts cybersecurity reciprocity playbook to streamline system authorizations, boost cybersecurity efficiency (Industrial Cyber) DoD CIO debuts cybersecurity reciprocity playbook to streamline system authorizations and boost cybersecurity efficiency.
For a complete running list of events, please visit the Event Tracker.
Initial Compromise Insights: VPN and Phishing Attacks Exposed (, Jun 20, 2024) Join us for an exclusive deep dive into initial compromise risks, focusing on threats posed by VPN vulnerabilities and sophisticated phishing attacks, and share insights from recent research and reports by Zscaler ThreatLabz group. Register now.
SANS Leadership & Cloud Security – Crystal City 2024 (Arlington (and virtual), Virginia, USA, May 20 - 24, 2024) At SANS Leadership & Cloud Security – Crystal City 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Cybersec Europe 2024 (Brussels, Belgium, May 29 - 30, 2024) Cyber attacks are an ever-growing threat in today's tech environment. Cybersec Europe 2024 is the platform for experienced cyber security experts as well as next-gen start-ups to share knowledge with peers for jointly coping with the cybersecurity challenges. Businesses and institutions of all sectors learn how to enhance cyber resilience and protect their core.
2024 State of the Space Industrial Base (Albuquerque, New Mexico, USA, May 29 - 31, 2024) Don’t miss out! Mark your calendars and join us for a dynamic hybrid workshop that is a “must attend” space industry event. Participants will learn how the strength of the industrial base has advanced in the last year, and they will contribute to progressing solutions that support the Space industrial base, increase prosperity and ensure national security. Please sign up to learn more about the 2024 Space Industrial Conference and SSIB Workshop! Stay tuned for more details about the 2024 Space Industrial Conference and SSIB Hybrid Workshop!
SANS Stay Sharp: May 2024 (Virtual, May 29 - 31, 2024) At SANS Stay Sharp: May 2024, choose from 48 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Season IV US Cyber Games Open SEASON IV US Cyber Games® Kick-Off CELEBRATION (Virtual, May 30, 2024) -Help us kick off and celebrate Season IV -Get the scoop on all that we have planned -Hear from US Cyber Team athletes and coaches -Learn about accessibility in cyber -Find out how to stand out as an applicant -Get a CyberChef walk-through -Be inspired by special VIP guest keynotes
