SpyCloud has the world's largest repository of recaptured dark web data. Simply enter your email and we’ll check your corporate domain against hundreds of billions of recaptured darknet assets, from credentials to PII – for free. See your darknet footprint, including breach exposures and malware-exfiltrated data that puts your business at risk of account takeover and ransomware. Check your exposure now.
We're always looking for ways to improve the N2K CyberWire network to give you an intelligence-driven news experience. Please take a few minutes to tell us about your network experience and share your feedback by completing our 2024 Audience Survey, and you will have a chance to win a $100 Amazon gift card. Take the survey.
A Taiwanese national, Rui-Siang Lin, was arrested in New York yesterday for his alleged operation and ownership of the dark web narcotics marketplace "Incognito Market." Assistant Director in Charge James Smith of the FBI New York Field Office stated in a press release, "For nearly four years, Rui-Siang Lin allegedly operated ‘Incognito Market,’ one of the largest online platforms for narcotics sales, conducting $100 million in illicit narcotics transactions and reaped millions of dollars in personal profits. Under the promise of anonymity, Lin’s alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale."
The growing emergence of artificial intelligence (AI) has upended conventional security, ushering in a transformative shift in both defensive and offensive strategies. In this report, we collected data from over 3,900 pentests. Here is what you will learn:
Download the report now and gain insights from the pioneers of Pentesting as a Service.
Imaging sensors manufacturer OmniVision disclosed a data breach that occurred during a ransomware attack the company sustained in September 2023, BleepingComputer reports. OmniVision submitted a breach notification to the California Attorney General's Office stating that "an unauthorized party took some personal information from certain systems between September 4, 2023, and September 30, 2023." While the type of stolen information wasn't disclosed, BleepingComputer notes that the Cactus ransomware gang claimed at the time of the attack to have stolen passport scans, nondisclosure agreements, contracts, and other confidential documents. The group subsequently made the data available to download for free, but has since removed it from their leak site.
Launching a new product or service? Looking for alternative ways to recruit cyber talent? Want your company or leadership team members to be seen as an industry thought leader? Be heard by over 350,000 subscribers on the N2K CyberWire network. Whether through sponsored advertising, executive events, or exclusive interviews, we offer off-the-shelf and bespoke packages to help you reach your goals. Let’s work together.
Researchers at Tenable have discovered a critical memory corruption vulnerability (CVE-2024-4323) affecting Fluent Bit, a logging and metrics tool used by all major cloud services. The flaw could lead to denial of service, information leakage, or remote code execution. The project's maintainers committed fixes for the vulnerability to Fluent Bit's main branch on May 15th.
Tenable states, "As for the remote code execution possibilities of this issue, exploitation is dependent on a variety of environmental factors such as host architecture and operating system. While heap buffer overflows such as this are known to be exploitable, creating a reliable exploit is not only difficult, but incredibly time intensive. The researchers believe that the most immediate and primary risks are those pertaining to the ease with which DoS and information leaks can be accomplished."
Today's issue includes events affecting Taiwan, the United Kingdom, and the United States.
CVE-2024-4367 in PDF.js Allows JavaScript Execution, Potentially Affecting Millions of Websites: Update Now - SOCRadar® Cyber Intelligence Inc. (SOCRadar® Cyber Intelligence Inc.) Security experts identified a significant vulnerability in PDF.js, a widely used JavaScript library for displaying PDF documents in web browsers, which is
New BiBi Wiper version also destroys the disk partition table (BleepingComputer) A new version of the BiBi Wiper malware is now deleting the disk partition table to make data restoration harder, extending the downtime for targeted victims.
CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw (SecurityWeek) CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog.
Exclusive: UK to propose mandatory reporting for ransomware attacks and licensing regime for all payments (The Record) The U.K.'s proposals will be included in a public consultation to be published next month, according to multiple sources with knowledge of the matter who spoke to Recorded Future News.
HHS offering $50 million for proposals to improve hospital cybersecurity (The Record) The program run by the Advanced Research Projects Agency for Health seeks to create a vulnerability mitigation software platform and a system for auto-detecting vulnerabilities.
“Incognito Market” Owner Arrested for Operating One of the Largest Illegal Narcotics Marketplaces on the Internet (US Justice Department) Rui-Siang Lin, also known as Ruisiang Lin, 林睿庠, Pharoah, and faro, 23, of Taiwan, was arrested today in connection with his operation and ownership of “Incognito Market,” an online dark web narcotics marketplace that enabled its users to buy and sell illegal narcotics anonymously around the world. Lin was arrested at John F. Kennedy Airport on May 18, and will be presented in Manhattan federal court before U.S. Magistrate Judge Willis later today.
For a complete running list of events, please visit the Event Tracker.
SANS Leadership & Cloud Security – Crystal City 2024 (Arlington (and virtual), Virginia, USA, May 20 - 24, 2024) At SANS Leadership & Cloud Security – Crystal City 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Cybersec Europe 2024 (Brussels, Belgium, May 29 - 30, 2024) Cyber attacks are an ever-growing threat in today's tech environment. Cybersec Europe 2024 is the platform for experienced cyber security experts as well as next-gen start-ups to share knowledge with peers for jointly coping with the cybersecurity challenges. Businesses and institutions of all sectors learn how to enhance cyber resilience and protect their core.
2024 State of the Space Industrial Base (Albuquerque, New Mexico, USA, May 29 - 31, 2024) Don’t miss out! Mark your calendars and join us for a dynamic hybrid workshop that is a “must attend” space industry event. Participants will learn how the strength of the industrial base has advanced in the last year, and they will contribute to progressing solutions that support the Space industrial base, increase prosperity and ensure national security. Please sign up to learn more about the 2024 Space Industrial Conference and SSIB Workshop! Stay tuned for more details about the 2024 Space Industrial Conference and SSIB Hybrid Workshop!
SANS Stay Sharp: May 2024 (Virtual, May 29 - 31, 2024) At SANS Stay Sharp: May 2024, choose from 48 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Season IV US Cyber Games Open SEASON IV US Cyber Games® Kick-Off CELEBRATION (Virtual, May 30, 2024) -Help us kick off and celebrate Season IV -Get the scoop on all that we have planned -Hear from US Cyber Team athletes and coaches -Learn about accessibility in cyber -Find out how to stand out as an applicant -Get a CyberChef walk-through -Be inspired by special VIP guest keynotes
