SpyCloud has the world's largest repository of recaptured dark web data. Simply enter your email and we’ll check your corporate domain against hundreds of billions of recaptured darknet assets, from credentials to PII – for free. See your darknet footprint, including breach exposures and malware-exfiltrated data that puts your business at risk of account takeover and ransomware. Check your exposure now.
We're always looking for ways to improve the N2K CyberWire network to give you an intelligence-driven news experience. Please take a few minutes to tell us about your network experience and share your feedback by completing our 2024 Audience Survey, and you will have a chance to win a $100 Amazon gift card. Take the survey.
IBM X-Force warns that the Grandoreiro banking Trojan resurfaced in March with several large phishing campaigns targeting more than 1,500 banks in sixty countries. The malware-as-a-service operation was disrupted by law enforcement in January 2024.
The new version of the malware has received significant updates and has expanded its targeting, with a particular focus on Mexico, Argentina, and South Africa. The researchers note, "Although campaigns have traditionally been limited to Latin America, Spain, and Portugal, X-Force observed recent campaigns impersonating Mexico’s Tax Administration Service (SAT), Mexico’s Federal Electricity Commission (CFE), Mexico’s Secretary of Administration and Finance, the Revenue Service of Argentina, and notably the South African Revenue Service (SARS)."
The growing emergence of artificial intelligence (AI) has upended conventional security, ushering in a transformative shift in both defensive and offensive strategies. In this report, we collected data from over 3,900 pentests. Here is what you will learn:
Download the report now and gain insights from the pioneers of Pentesting as a Service.
Australian electronic prescription processing company MediSecure has disclosed a data breach affecting "personal and health information of individuals." The country's Minister for Cyber Security Clare O'Neil described the incident as "large-scale ransomware incident." MediSecure says "early indicators suggest the incident originated from one of our third-party vendors."
The ABC quotes Steve Robson, president of the Australian Medical Association, as saying, "It's not clear exactly what data have either been accessed stolen, blocked or whatever and these things can be complex. I think the scale of what's happened is going to take time to fully be revealed....[W]e would anticipate that many doctors and many patients around the country will have data in the database."
Launching a new product or service? Looking for alternative ways to recruit cyber talent? Want your company or leadership team members to be seen as an industry thought leader? Be heard by over 350,000 subscribers on the N2K CyberWire network. Whether through sponsored advertising, executive events, or exclusive interviews, we offer off-the-shelf and bespoke packages to help you reach your goals. Let’s work together.
Researchers at Symantec describe a new Linux backdoor developed by the North Korean threat actor Kimsuky (tracked by Symantec as "Springtail"). The malware is targeting entities in South Korea, and is delivered via Trojanized versions of legitimate software packages. Symantec states, "The backdoor (Linux.Gomir) appears to be a Linux version of the GoBear backdoor, which was used in a recent Springtail campaign that saw the attackers deliver malware via Trojanized software installation packages. Gomir is structurally almost identical to GoBear, with extensive sharing of code between malware variants."
Today's issue includes events affecting Argentina, Australia, the Democratic People's Republic of Korea, the Republic of Korea, Mexico, South Africa, and the United States.
CISA warns of hackers exploiting Chrome, EoL D-Link bugs (BleepingComputer) The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added three security vulnerabilities to its 'Known Exploited Vulnerabilities' catalog, one impacting Google Chrome and two affecting some D-Link routers.
FBI seizes BreachForums infrastructure — but successor sites are already popping up (ITPro) In the latest win for law enforcement, BreachForums has been taken down in an FBI operation - but alternatives are already popping up
Grandoreiro banking trojan unleashed: X-Force observing emerging global campaigns (Security Intelligence) Since March 2024, IBM X-Force has been tracking several large-scale phishing campaigns distributing the Grandoreiro banking trojan.
The inside story of Cyber Command’s creation (CSO Online) Cartoons, Starbucks cards, and Hollywood storyboards: The ‘Four Horsemen of Cyber’ — CISA’s Jen Easterly, Lt. Gen. S.L. Davis, retired US Navy Vice Admiral T.J. White, and former NSA chief Paul Nakasone — revealed at RSAC 2024 how Cybercom came to be.
FBI seizes BreachForums infrastructure — but successor sites are already popping up (ITPro) In the latest win for law enforcement, BreachForums has been taken down in an FBI operation - but alternatives are already popping up
Assange Can Appeal U.S. Extradition, English Court Rules (NYTimes) The WikiLeaks founder won his bid to appeal his extradition on espionage charges, opening a new chapter in a prolonged legal battle.
BSI sues Microsoft for release of information on security disaster (Security) The Federal Office for Information Security has apparently initiated official proceedings against Microsoft – and is still waiting for answers.
For a complete running list of events, please visit the Event Tracker.
SANS Leadership & Cloud Security – Crystal City 2024 (Arlington (and virtual), Virginia, USA, May 20 - 24, 2024) At SANS Leadership & Cloud Security – Crystal City 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Cybersec Europe 2024 (Brussels, Belgium, May 29 - 30, 2024) Cyber attacks are an ever-growing threat in today's tech environment. Cybersec Europe 2024 is the platform for experienced cyber security experts as well as next-gen start-ups to share knowledge with peers for jointly coping with the cybersecurity challenges. Businesses and institutions of all sectors learn how to enhance cyber resilience and protect their core.
2024 State of the Space Industrial Base (Albuquerque, New Mexico, USA, May 29 - 31, 2024) Don’t miss out! Mark your calendars and join us for a dynamic hybrid workshop that is a “must attend” space industry event. Participants will learn how the strength of the industrial base has advanced in the last year, and they will contribute to progressing solutions that support the Space industrial base, increase prosperity and ensure national security. Please sign up to learn more about the 2024 Space Industrial Conference and SSIB Workshop! Stay tuned for more details about the 2024 Space Industrial Conference and SSIB Hybrid Workshop!
SANS Stay Sharp: May 2024 (Virtual, May 29 - 31, 2024) At SANS Stay Sharp: May 2024, choose from 48 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Season IV US Cyber Games Open SEASON IV US Cyber Games® Kick-Off CELEBRATION (Virtual, May 30, 2024) -Help us kick off and celebrate Season IV -Get the scoop on all that we have planned -Hear from US Cyber Team athletes and coaches -Learn about accessibility in cyber -Find out how to stand out as an applicant -Get a CyberChef walk-through -Be inspired by special VIP guest keynotes
