Ransomware Incidents Hit Record High, But Law Enforcement Takedowns Slow Growth

According to Corvus, the number of active ransomware groups grew by 34% between Q1 and Q4 2023, linked to the fracturing of well-known ransomware groups that leaked their proprietary encryptors.

Cyware News – Latest Cyber News – ​Read More

CISA Warns of Active Exploitation of Critical Flaws in Apple iOS and macOS

The flaw allows attackers with arbitrary read and write capability to bypass Pointer Authentication, and it’s recommended that Federal Civilian Executive Branch (FCEB) agencies apply the fixes by February 21, 2024.

Cyware News – Latest Cyber News – ​Read More

Brazilian Police Make Arrests in Grandoreiro Banking Malware Case

The Grandoreiro malware can track keyboard inputs, simulate mouse activity, and initiate communication with criminals’ servers, making it a potent threat to banking activities.

Cyware News – Latest Cyber News – ​Read More

AI-Generated Code Leads to Security Issues for Most Businesses: Report

According to a survey by Snyk, over three-quarters of developers are bypassing established protocols to use AI-powered code completion tools, raising concerns about security implications.

Cyware News – Latest Cyber News – ​Read More

CISA Warns of Active Exploitation of Critical Vulnerability in iOS, iPadOS, and macOS

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting iOS, iPadOS, macOS, tvOS, and watchOS to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability, tracked as CVE-2022-48618 (CVSS score: 7.8), concerns a bug in the kernel component.
“An attacker with

The Hacker News – ​Read More

US Says It Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans

Chinese government hackers are busily targeting water treatment plants, the electrical grid, transportation systems and other critical infrastructure inside the United States, FBI Director Chris Wray told lawmakers.

The post US Says It Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans appeared first on SecurityWeek.

SecurityWeek – ​Read More

Johnson Controls Ransomware Cleanup Costs Top $27M and Counting

JCI’s latest SEC filing notes that its smart-factory installations weren’t compromised, allaying physical security fears.

darkreading – ​Read More

More Ivanti VPN Zero-Days Fuel Attack Frenzy as Patches Finally Roll

Both China-backed APTs and ordinary cyberattackers have seized on a pair of Ivanti VPN bugs for global exploitation.

darkreading – ​Read More