A major threat actor has been crippled by an international law enforcement action, as the Lumma infostealer malware operation saw its control panel seized along with infrastructure dwelling in Europe and Japan. This was supplemented by Microsoft seizing some 2,300 domains belonging to the group, which has infected over 394,000 Windows computers globally.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Victims that interacted with the fake KeePass ads would get a maliciously modified version of the password manager called "KeeLoader" designed to exfiltrate passwords and provide a backdoor for further malware delivery and ransomware attacks.
The Federal Bureau of Investigation (FBI) warns about AI-generated phishing text or deepfake audio messages impersonating senior U.S. officials targeting current and former state and federal officials and their contacts.
The emergence of Venice.ai AI chatbot may mark the beginning of a new stage of the security race. Available for free via the "clear web," the service promises capabilities on par with ChatGPT and other popular models but with no guardrails or security restrictions in place.
Largest U.S. steel manufacturer Nucor Corporation suffered a cyber attack, forcing it to shut down certain IT systems, disrupting operations across several facilities.
French luxury giant Dior suffered a cyber attack that resulted in a data breach in numerous countries after unauthorized individuals accessed its information systems.
A ransomware gang that recently hit major UK retailers such as Marks & Spencer with cyber attacks is now setting its sights on US companies, according to a warning from Google's security team.
Crypto exchange Coinbase has said that it will reimburse customers that lost funds due to a recent data breach, and is also setting aside a $20 million reward for information leading to the arrest and conviction of the hackers.
A multi-agency cybersecurity advisory warns about unsophisticated hackers compromising U.S. critical infrastructure using basic and elementary intrusion techniques.
London, UK-headquartered education giant Pearson has confirmed a customer data breach after malicious actors gained unauthorized access to parts of its IT systems.










