UK Software Firm Fined £3 Million Over Ransomware-Caused Data Breach 

The UK ICO has fined Advanced Computer Software Group £3 million ($3.8 million) over a 2022 data breach resulting from a ransomware attack.

The post UK Software Firm Fined £3 Million Over Ransomware-Caused Data Breach  appeared first on SecurityWeek.

SecurityWeek – ​Read More

Russia arrests three for allegedly creating Mamont malware, tied to over 300 cybercrimes

Russian authorities said they arrested three people and seized hardware in an operation against Mamont malware, which specializes in stealing money from Android device users.

The Record from Recorded Future News – ​Read More

Signal downloads spike in the U.S. and Yemen amid government scandal

The encrypted messaging app Signal is getting some unexpected attention this week. High-ranking officials in the Trump administration, including Vice President J.D. Vance and Secretary of Defense Peter Hegseth, communicated the plans for an attack on the Yemeni Houthis via a potentially unauthorized group chat on Signal. However, Atlantic editor-in-chief Jeffrey Goldberg was mistakenly added […]

Security News | TechCrunch – ​Read More

10 pesky Windows 11 24H2 bugs still haunting PCs despite several patches

Before diving into the Windows 11 2024 update, know that you may encounter some problems. Here’s the bug report now.

Latest stories for ZDNET in Security – ​Read More

Hackers Repurpose RansomHub’s EDRKillShifter in Medusa, BianLian, and Play Attacks

A new analysis has uncovered connections between affiliates of RansomHub and other ransomware groups like Medusa, BianLian, and Play.
The connection stems from the use of a custom tool that’s designed to disable endpoint detection and response (EDR) software on compromised hosts, according to ESET. The EDR killing tool, dubbed EDRKillShifter, was first documented as used by RansomHub actors in

The Hacker News – ​Read More

How to protect your site from DDoS attacks – before it’s too late

DDoS attacks don’t take much technical expertise to launch these days. Defending against them is more complicated.

Latest stories for ZDNET in Security – ​Read More

Russian media, academia targeted in espionage campaign using Google Chrome zero-day exploit

“We have discovered and reported dozens of zero-day exploits actively used in attacks, but this particular exploit is certainly one of the most interesting we’ve encountered,” researchers from Kaspersky said in their analysis published Tuesday.

The Record from Recorded Future News – ​Read More

Two Serbian journalists reportedly targeted with Pegasus spyware

Two investigative journalists in Serbia were targeted with advanced commercial spyware last month, Amnesty International said Thursday.

The Record from Recorded Future News – ​Read More

The Importance of Allyship For Women in Cyber

Interview with Taylor Pyle, a Cybersecurity Engineer at Viasat on her experience with both cyber and mentorship.

The post The Importance of Allyship For Women in Cyber appeared first on SecurityWeek.

SecurityWeek – ​Read More

APT36 Spoofs India Post Website to Infect Windows and Android Users with Malware

An advanced persistent threat (APT) group with ties to Pakistan has been attributed to the creation of a fake website masquerading as India’s public sector postal system as part of a campaign designed to infect both Windows and Android users in the country.
Cybersecurity company CYFIRMA has attributed the campaign with medium confidence to a threat actor called APT36, which is also known as

The Hacker News – ​Read More