FTC Orders Blackbaud to Address Poor Security Practices

/in

FTC and fundraising software company Blackbaud reach settlement over poor security practices that led to a major data breach.

The post FTC Orders Blackbaud to Address Poor Security Practices appeared first on SecurityWeek.

SecurityWeek – ​Read More

How audio-jacking using gen AI can distort live audio transactions

/in

Using gen AI to identify and intercept keywords and replace them in context is the essence of how audio jacking works.Read More

Security News | VentureBeat – ​Read More

Zero Trust Implementation: Plan, Then Execute, One Step at a Time

/in

To overcome roadblocks, organizations should prioritize sensitive data, enforce strict authentication and authorization, implement micro-segmentation, and ensure employee awareness of security best practices.

Cyware News – Latest Cyber News – ​Read More

How 2023 Broke Long-Running Records for Health Data Breaches

/in

The healthcare sector experienced a record-breaking number of major data breaches in 2023, affecting over 135 million individuals, highlighting the urgent need for enhanced cybersecurity measures.

Cyware News – Latest Cyber News – ​Read More

Exposed Docker APIs Under Attack in ‘Commando Cat’ Cryptojacking Campaign

/in

The attackers use evasion techniques such as using memory-backed temporary file stores and Base64-encoded scripts to make forensics harder and eliminate competing miner processes on infected machines.

Cyware News – Latest Cyber News – ​Read More

Netherlands Fines Uber Over Data Protection

/in

Dutch regulators impose a 10 million euro ($10.8 million) fine on ride-hailing app Uber for lack of transparency in treating the personal data of its drivers.

The post Netherlands Fines Uber Over Data Protection appeared first on SecurityWeek.

SecurityWeek – ​Read More

White House Seeks Ideas on Boosting AI Privacy

/in

The Office of Management and Budget is soliciting feedback on how federal agencies should identify and mitigate privacy risks related to AI and commercially available information.

Cyware News – Latest Cyber News – ​Read More

Russian Spies Impersonating Western Researchers in Ongoing Hacking Campaign

/in

The hackers, believed to be state-sponsored, have successfully compromised researchers by using sophisticated techniques to solicit feedback on academic articles and harvest credentials through fake Google Drive links.

Cyware News – Latest Cyber News – ​Read More

Multiple Malware Used in Attacks Exploiting Ivanti VPn Flaws

/in

The attackers exploit known vulnerabilities to execute arbitrary commands and have been observed using various malware, including a custom web shell and open-source tools for post-exploitation activities.

Cyware News – Latest Cyber News – ​Read More

DarkGate Malware Delivered via Microsoft Teams

/in
Threat actors have been spotted exploiting Microsoft Teams’ external access feature—enabled by default—allowing users to add external members to Teams chats. An AT&T customer identified an unsolicited Teams chat from an external user, suspected to be a phishing lure. It is recommended to disable External Access in Microsoft Teams unless it is necessary for daily business use.

Cyware News – Latest Cyber News – ​Read More