Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks

Unsophisticated methods can still be used to hack ICS/OT — even so, many cyberattack claims are likely exaggerated. 

The post Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks appeared first on SecurityWeek.

SecurityWeek – ​Read More

Firefox Update Introduces Hidden Tracking Under “Privacy” Feature

Yesterday, noyb (short for None Of Your Business) filed a complaint with the Austrian data protection authority (DPA) against Mozilla for enabling a controversial feature called “Privacy Preserving Attribution” in its Firefox browser. Despite its name, this feature, introduced in version 128, allows Firefox to track user behavior across websites, shifting the control of tracking from…

Source

TechSplicer Blog – ​Read More

Cloudflare Warns of India-Linked Hackers Targeting South and East Asian Entities

An advanced threat actor with an India nexus has been observed using multiple cloud service providers to facilitate credential harvesting, malware delivery, and command-and-control (C2).
Web infrastructure and security company Cloudflare is tracking the activity under the name SloppyLemming, which is also called Outrider Tiger and Fishing Elephant.
“Between late 2022 to present, SloppyLemming

The Hacker News – ​Read More

5 obscure web browsers that will finally break your Chrome addiction

Give one of these alternative browsers just a few minutes of your time and you’ll never go back. They’re all free, so what have you got to lose?

Latest stories for ZDNET in Security – ​Read More

Brief CyberNews: Kaspersky’s U.S. Exit, Necro Malware in Apps, AI-Made Malware, ChatGPT Exploits, and MOVEit Hack Impact

Welcome to this week’s CyberNews! Here’s a quick roundup of recent cybersecurity developments. Kaspersky has recently installed UltraAV antivirus on nearly 1 million U.S. machines after its products were banned from U.S. markets, due to national security concerns. Without prior sufficient notification and user consent…

Source

TechSplicer Blog – ​Read More

‘SloppyLemming’ APT Abuses Cloudflare Service in Pakistan Attacks

Who needs advanced malware when you can take advantage of a bunch of OSS tools and free cloud services to compromise your target?

darkreading – ​Read More

Chinese Hackers Infiltrate U.S. Internet Providers in Cyber Espionage Campaign

Nation-state threat actors backed by Beijing broke into a “handful” of U.S. internet service providers (ISPs) as part of a cyber espionage campaign orchestrated to glean sensitive information, The Wall Street Journal reported Wednesday.
The activity has been attributed to a threat actor that Microsoft tracks as Salt Typhoon, which is also known as FamousSparrow and GhostEmperor.
“Investigators

The Hacker News – ​Read More

After TikTok inquiry, Republicans call for investigation into Temu data practices

In a letter to the Securities and Exchange Commission (SEC) and FBI, members of the Select Committee on Intelligence asked a range of questions about whether investigations are underway examining Temu and its parent company Pinduoduo (PDD).

The Record from Recorded Future News – ​Read More

MoneyGram Cyberattack: Global Service Disruptions Enter Day 5

MoneyGram faces a cyberattack that has caused global service disruptions for five days. Customers are unable to send…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

CrowdStrike Offers Mea Culpa to House Committee

The company said the rogue update that caused disruptions on a global scale resulted from a “perfect storm” of issues.

darkreading – ​Read More