To Customer Support To Customer Support

Events
Leaderboard
Customer Support

📊 2023 OpenText Cybersecurity Threat Report

2 months ago

Home
Community overview
Welcome

Welcome

News, Announcements, Tech Discussions

41016 Topics

Recently active

Most replies Most views Newest first

Jasper_The_RasperModerator

posted in Security Industry News

Dark Pink hackers continue to target govt and military organizations

May 31, 2023 By Bill Toulas The Dark Pink APT hacking group continues to be very active in 2023, observed targeting government, military, and education organizations in Indonesia, Brunei, and Vietnam.The threat group has been active since at least mid-2021, primarily targeting entities in the Asia-Pacific region, but it was first exposed in January 2023 by a Group-IB report.The researchers report that after analyzing signs of previous activity by the threat actor, they now discovered additional breaches against an educational institute in Belgium and a military body in Thailand. >> Full Article <<

11 minutes ago

Jasper_The_RasperModerator

posted in Security Industry News

Gigabyte firmware component can be abused as a backdoor

Attackers can abuse the UEFI firmware to inject executable malware code into the Windows kernel, compromising systems. May 31, 2023 By Lucian Constantin Researchers warn that the UEFI firmware in many motherboards made by PC hardware manufacturer Gigabyte injects executable code inside the Windows kernel in an unsafe way that can be abused by attackers to compromise systems. Sophisticated APT groups are abusing similar implementations in the wild."While our ongoing investigation has not confirmed exploitation by a specific threat actor, an active widespread backdoor that is difficult to remove poses a supply chain risk for organizations with Gigabyte systems," researchers from security firm Eclypsium said in a report. >> Full Article <<

34 minutes ago

Jasper_The_RasperModerator

posted in Security Industry News

CISA issues warning to US businesses: Beware of China's state-sponsored cyber actor

May 31, 2023 By Bill Cozens The US Cybersecurity and Infrastructure Security Agency (CISA) has an urgent message for US businesses: watch out for Volt Typhoon, a threat actor sponsored by the People’s Republic of China (PRC).The agency's joint Cybersecurity Advisory (CSA) published last week highlights a cluster of tactics, techniques, and procedures (TTPs) associated with the cyber actor—including their use of living off the land (LOTL) techniques.In this blog, we'll review Volt Typhoon, dig into how they evade detection, discuss CISA's protective recommendations, and see how Malwarebytes EDR can help eliminate such threats. >> Full Article <<

40 minutes ago

Jasper_The_RasperModerator

posted in Security Industry News

nerdbexNew Member

asked in Tech Talk

My Website got hacked recently

Hy there, recently my website “Pifra” got hacked during the google update. When i check my WordPress dashboard there were more than 10+ posts in a different language linking to gambling websites based in vitnam and other asian countries. I want to know how I can remove this malware from the website. Can you please guide me step-by-step because the hositng support is not helping me sort this problem. Thanks

7 hours ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

📊 2023 OpenText Cybersecurity Threat ReportReport

Our latest OpenText Cybersecurity Threat Report is finally here! Cybersecurity professionals were kept on their toes throughout 2022. Russia’s invasion of Ukraine sent shockwaves through organized cybercrime and disrupted ongoing operations by REvil and Conti. Global law enforcement continued to aggressively target threat actors, including the Hive ransomware gang. And discovery of critical vulnerabilities and exposures (CVE) continued at a record pace, with nine CVEs published with scores of 9 or higher. Our report is full of great insights. Some key findings include:The Middle East, Asia, and South America were the regions with the highest percentage of infections. 55.6% of consumer PCs were infected more than once, and 19.9% infected more than 5 times. Facebook was most often impersonated company in phishing attacks. During 2022, 84% of ransomware attacks now include leak sites The year-end average for ransomware payments in 2022 has skyrocketed to over $400,000With Ransomware now t

158232

19 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Microsoft finds macOS bug that lets hackers bypass SIP root restrictions

May 30, 2023 By Sergiu Gatlan Apple has recently addressed a vulnerability that lets attackers with root privileges bypass System Integrity Protection (SIP) to install "undeletable" malware and access the victim's private data by circumventing Transparency, Consent, and Control (TCC) security checks.Discovered and reported to Apple by a team of Microsoft security researchers, the flaw (dubbed Migraine) is now tracked as CVE-2023-32369.Apple has patched the vulnerability in security updates for macOS Ventura 13.4, macOS Monterey 12.6.6, and macOS Big Sur 11.7.7, released two weeks ago, on May 18. >> Full Article <<

21 hours ago

TripleHelixModerator

posted in Security Industry News

Google Chrome Stable Channel Update for Desktop

Tuesday, May 30, 2023 The Chrome team is delighted to announce the promotion of Chrome 114 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.Chrome 114.0.5735.90 (Linux and Mac), 114.0.5735.90/91( Windows) contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 114. Extended Stable channel has been updated to 114.0.5735.90 (Mac) and 114.0.5735.91 ( Windows. This will roll over over the coming days/weeks List of Security Fixes and Rewards

21 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

WordPress plugin ‘Gravity Forms’ vulnerable to PHP object injection

May 30, 2023 By Bill Toulas The premium WordPress plugin 'Gravity Forms,' currently used by over 930,000 websites, is vulnerable to unauthenticated PHP Object Injection.Gravity Forms is a custom form builder website owners use for creating payment, registration, file upload, or any other form required for visitor-site interactions or transactions.On its website, Gravity Forms claims it is used by a wide variety of large companies, including Airbnb, ESPN, Nike, NASA, PennState, and Unicef.The vulnerability, which is tracked as CVE-2023-28782, impacts all plugin versions from 2.73 and below. >> Full Article <<

21 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Is cybersecurity an unsolvable problem?

Ars chats with law philosopher Scott Shapiro about his new book, Fancy Bear Goes Phishing. JENNIFER OUELLETTE - 5/27/2023 In November 1988, a graduate student at Cornell University named Robert Morris, Jr. inadvertently sparked a national crisis by unleashing a self-replicating computer worm on a VAX 11/750 computer in the Massachusetts Institute of Technology's Artificial Intelligence Lab. Morris had no malicious intent; it was merely a scientific experiment to see how many computers he could infect. But he made a grievous error, setting his reinfection rate much too high. The worm spread so rapidly that it brought down the entire computer network at Cornell University, crippled those at several other universities, and even infiltrated the computers at Los Alamos and Livermore National Laboratories.Making matters worse, his father was a computer scientist and cryptographer who was the chief scientist at the National Security Agency's National Computer Security Center. Even though it

23 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Android apps with spyware installed 421 million times from Google Play

May 30, 2023 By Bill Toulas A new Android malware distributed as an advertisement SDK has been discovered in multiple apps, many previously on Google Play and collectively downloaded over 400 million times.Security researchers at Dr. Web discovered the spyware module and tracked it as 'SpinOk,' warning that it can steal private data stored on users' devices and send it to a remote server.The antivirus company says SpinkOk demonstrates a seemingly legitimate behavior, using minigames that lead to "daily rewards" to spark user interest. >> Full Article <<

23 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

A database containing 478,000 RaidForums members leaked online

May 30, 2023 By Pierluigi Paganini The database of the popular RaidForums hacking forum has been leaked on a new hacking forum, 478,000 members exposed.A database belonging to the now-defunct RaidForums cybercrime platform has been leaked on a new hacking forum called Exposed. The database contains data belonging to 478,000 RaidForums members.In April 2022, the illegal dark web marketplace RaidForums has been shut down and its infrastructure was seized as a result of the international law enforcement Operation TOURNIQUET coordinated by Europol’s European Cybercrime Centre. >> Full Article <<

23 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

PyPI Enforcing 2FA for All Project Maintainers to Boost Security

PyPI will require all accounts that maintain a project to enable two-factor authentication (2FA) by the end of 2023. May 30, 2023 By Ionut Arghire The Python Package Index (PyPI) has announced that it will require all accounts that maintain a project to have two-factor authentication (2FA) enabled by the end of 2023.The official software repository for Python, PyPI has become the target of numerous supply chain attacks over the past years, in some of which threat actors compromised maintainer accounts to inject malicious code into projects.By enforcing 2FA for project maintainers, PyPI wants to prevent account takeover attacks, thus reassuring the community that only people associated with a project can upload, modify, or delete code. >> Full Article <<

23 hours ago

TripleHelixModerator

posted in Security Industry News

Hacked: Thousands of school passwords breached

7:19 am on 29 May 2023 A cyber security firm says hackers are selling thousands of staff and student logins, passwords and access to school and tertiary institution IT systems.Cyber Sentience says it found evidence of nearly 2000 malware infections on devices used by students and teachers last year.It says hackers are also claiming to have found vulnerabilities that give access to the IT systems and websites of more than 550 schools and tertiary institutions in Aotearoa.RNZ education correspondent John Gerritsen reports. Source

1 day ago

ConnorMThreat Research Analyst

published in Security Industry News

Cyber News Rundown: AhRAT trojan injected into popular Android appNews

Researchers have been tracking a non-malicious screen recording app, iRecorder, which has received an update that included the AhRAT remote access trojan and allowed the exfiltration of voice and screen recordings from the infected device. By injecting AhRAT into the iRecorder app, the malicious code gained the recording permissions from the app to gather data from the device without requiring any additional user input. The malicious version of iRecorder had been downloaded over 50,000 times before the Google Play Store was able to remove it.Data leaks force Luxottica to confirm 2021 breachSeveral weeks after a database containing sensitive information on 74 million individuals was posted to a leak site, officials for the eye-wear magnate Luxottica have finally confirmed that one of their partners had suffered a breach in March of 2021. It was also revealed that the company first learned of the incident in November of 2022, nearly 20 months after the breach occurred, and did not begin

1579

1 day ago

ProTruckDriverModerator

posted in Tech Talk

How to Schedule Time Machine Back-Ups in macOS Ventura

Dennis SellersTime Machine is one of the best features of macOS, automating the process of backing up your primary data drive to an external drive. If you’re not using it, you should.Losing your data can be catastrophic. Besides, it’s easy to use; just plugging in an external drive displays a dialog asking whether or not you’d like to use that drive for Time Machine backups. Let’s look at how to schedule backups using macOS Ventura. ⇨⇨ Full Article ⇦⇦

1 day ago

Jasper_The_RasperModerator

posted in Security Industry News

MCNA Dental data breach impacts 8.9 million people after ransomware attack

May 29, 2023 By Bill Toulas Managed Care of North America (MCNA) Dental has published a data breach notification on its website, informing almost 9 million patients that their personal data were compromised.MCNA Dental is one of the largest government-sponsored (Medicaid and CHIP) dental care and oral health insurance providers in the U.S.In a notice published Friday, MCNA says it became aware of unauthorized access to its computer systems on March 6th, 2023, with an investigation revealing that the hackers first gained access to MCNA’s network on February 26th, 2023.During that time, the hackers stole data that contained the following information for almost nine million patients. >> Full Article <<

1 day ago

Jasper_The_RasperModerator

posted in Security Industry News

Raspberry Pi Malware Infects Using Default Username and Password

May 29, 2023 By Ash Hill Think your Pi project is small and insignificant? This trojan doesn’t care. (Image credit: Shutterstock / Sergey Nivens) When it comes to Raspberry Pi, it’s easy to think this simple single-board PC is rather insignificant in the grand scheme of the internet. But don’t let its small size fool you, these little devices can be a gateway for hackers to make their way into your network. Today we’re taking a closer look at a vicious piece of malware that infects Raspberry Pis. YouTuber John Hammond released a video this week, looking at the malicious code line by and dissecting exactly how it works as well as how it spreads to vulnerable Raspberry Pis.Hammond said that he first began investigating this malware when a user submitted an email to him. They explained that the Pi was using the default username and password combination that comes with Raspberry Pi OS. He was logged into an SSH session for only about 30 minutes when the session dropped. Every time he rese

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

New ‘Bandit Stealer’ malware siphons data from browsers, crypto wallets

May 29, 2023 By Daryna Antoniuk Cybersecurity researchers identified a new information-stealing malware that targets browsers and cryptocurrency wallets.Although the malware, called Bandit Stealer, has only targeted Windows systems so far, it has the potential to expand to other platforms such as Linux. What makes Bandit Stealer particularly dangerous is that it’s difficult for victims to detect, researchers at Trend Micro wrote in a report published Friday.For example, Bandit Stealer can bypass Windows Defender, a security tool developed by Microsoft to protect users from various types of threats, including viruses, malware and spyware.Bandit Stealer developers are continuously updating the malware's features, according to advertisements circulating in the malware community: “Get ready, because a major update is coming next week that will blow other stealers out of the water,” it said. >> Full Article <<

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

New Go-written GobRAT RAT targets Linux Routers in Japan

May 29, 2023 By Pierluigi Paganini A new Golang remote access trojan (RAT), tracked as GobRAT, is targeting Linux routers in Japan, the JPCERT Coordination Center warns.JPCERT/CC is warning of cyberattacks against Linux routers in Japan that have been infected with a new Golang remote access trojan (RAT) called GobRAT.Threat actors are targeting Linux routers with publicly exposed WEBUI to execute malicious scripts to deploy the GobRAT malware. >> Full Article <<

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Flash loan attack on Jimbos Protocol steals over $7.5 million

May 29, 2023 By Bill Toulas Jimbos Protocol, an Arbitrum-based DeFi project, has suffered a flash loan attack that resulted in the loss of more than of 4000 ETH tokens, currently valued at over $7,500,000.The company disclosed the attack on Twitter yesterday, saying that law enforcement have been notified and it is working with security professionals to remediate the situation. >> Full Article <<

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Inner workings revealed for “Predator,” the Android malware that exploited 5 0-days

Spyware is sold to countries including Egypt, Indonesia, Oman, Saudi Arabia, and Serbia.DAN GOODIN - 5/26/2023 Smartphone malware sold to governments around the world can surreptitiously record voice calls and nearby audio, collect data from apps such as Signal and WhatsApp, and hide apps or prevent them from running upon device reboots, researchers from Cisco’s Talos security team have found.An analysis Talos published on Thursday provides the most detailed look yet at Predator, a piece of advanced spyware that can be used against Android and iOS mobile devices. Predator is developed by Cytrox, a company that Citizen Lab has said is part of an alliance called Intellexa, “a marketing label for a range of mercenary surveillance vendors that emerged in 2019.” Other companies belonging to the consortium include Nexa Technologies (formerly Amesys), WiSpear/Passitora Ltd., and Senpai. >> Full Article <<

2 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Industrial Giant ABB Confirms Ransomware Attack, Data Theft

Industrial giant ABB has confirmed that it has been targeted in a ransomware attack, with the cybercriminals stealing some data. May 27, 2023 By Eduard Kovacs Swiss industrial giant ABB confirmed this week that it was recently targeted in a ransomware attack and that the cybercriminals exfiltrated some data.The company has issued a press release and an FAQ describing the incident, with many details — including indicators of compromise (IoCs) — being withheld due to the ongoing law enforcement investigation. “ABB has determined that an unauthorized third-party accessed certain ABB systems, deployed a type of ransomware that is not self-propagating, and exfiltrated certain data,” ABB said. “The company is working to identify and analyze the nature and scope of affected data and is further assessing its notification obligations.” >> Full Article <<

2 days ago

1
2
3
4
...
1641

Page 1 / 1641

Badges

Petrovichas earned the badge Beta To The Max
TylerMhas earned the badge Have 50 answers marked as "solved"!
tasystemshas earned the badge Posted 100 comments!
Tarnakhas earned the badge Beta To The Max
andrea.raniolohas earned the badge News: Posted 10 comments!

Show all badges

Join the Conversation

Tweets by Webroot

Terms & Conditions

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

Customer Support
Webroot.com
Blog
Status Page
Community Guidelines
Legal
Privacy
Cookie Preferences

We have recently updated our Privacy Policies. We encourage you to read the full terms here.