Cybersleuths at Microsoft have found a link between the recent ‘Raspberry Robin’ USB-based worm attacks and EvilCorp, a notorious Russian ransomware operation sanctioned by the U.S. government.
Malicious Macro-Enabled Docs Delivered via Container Files to Bypass Microsoft Protections
Threat actors are embedding macro-enabled Office documents in container files such as archives and disk images to circumvent a recently rolled-out macro-blocking feature in Microsoft Office.
Governments Ramp Up Demands for User Info, Twitter Warns
Twitter warned Thursday that governments around the globe are asking the company to remove content or snoop on private details of user accounts at an alarming rate.
N Korean APT Uses Browser Extension to Steal Emails From Foreign Policy, Nuclear Targets
Over the past year, North Korean advanced persistent threat (APT) actor Kimsuky has been observed using a browser extension to steal content from victims’ webmail accounts, threat intelligence and incident response company Volexity reports.
OneTouchPoint Discloses Data Breach Impacting Over 30 Healthcare Firms
Mailing and printing services vendor OneTouchPoint has disclosed a data breach impacting more than 30 healthcare providers and health insurance carriers.
Headquartered in Hartland, Wisconsin, OneTouchPoint offers print, marketing execution and supply chain management services to organizations in the healthcare sector.
Major Cybersecurity Breach of US Court System Comes to Light
The US federal court system suffered a major cybersecurity breach in 2020, House Judiciary chairman Rep. Jerrold Nadler revealed in a public hearing on Thursday.
GitHub Improves npm Account Security as Incidents Rise
Microsoft-owned GitHub this week announced new npm security improvements, amid an increase in incidents involving malicious npm packages.
Calls Mount for US Gov Clampdown on Mercenary Spyware Merchants
Cybersecurity professionals from Google’s threat hunting unit and the University of Toronto’s Citizen Lab are upping the pressure on mercenary hacking firms selling high-end surveillance spyware with fresh calls for the U.S. government to urgently clamp down on these businesses.
Cybersecurity Growth Investment Flat, M&A Activity Strong for 2022
Global markets have suffered following the first Covid-19 pandemic and the Russian invasion of Ukraine – but sales of cybersecurity software have remained strong. VC investment in cybersecurity has adapted to the world economy rather than stalled.
Crackdown on BEC Schemes: 100 Arrested in Europe, Man Charged in US
Authorities in Hungary have arrested close to a hundred individuals as part of two operations meant to crack down on invoice fraud, Europol announced this week.
