Information

2 Environmentalists Who Were Targeted by a Hacking Network Say the Public Is the Real Victim

Two environmentalists told a federal judge Thursday that the public was the real victim of a global computer hacking campaign that targeted those fighting big oil companies to get the truth out about global warming. A climate scientist and the director of a fund that creates initiatives to address climate change spoke at the sentencing of an Israeli man who prosecutors said enabled the hacking of thousands of individuals and entities worldwide. Aviram Azari, 52,…

Read More

US Teen Pleads Guilty to Credential Stuffing Attack on Fantasy Sports Website

Wisconsin teenager Joseph Garrison has pleaded guilty to his involvement in a scheme to access user accounts at a fantasy sports and betting website. According to court documents, on November 18, 2022, Garrison launched a credential stuffing attack against the betting site, obtaining access to approximately 60,000 user accounts. The defendant and others then stole about $600,000 from approximately 1,600 victim accounts, by adding a new payment method to the accounts, depositing $5 to each…

Read More

Alleged Extortioner of Psychotherapy Patients Faces Trial

Prosecutors in Finland this week commenced their criminal trial against Julius Kivimäki, a 26-year-old Finnish man charged with extorting a once popular and now-bankrupt online psychotherapy practice and thousands of its patients. In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in 2015 of perpetrating tens of thousands of cybercrimes, including data breaches, payment fraud, operating a botnet and calling in bomb…

Read More

Biden Campaign Looking for CISO

The Biden for President campaign is searching for a Chief Information Security Officer (CISO) to lead its IT and security division. The campaign said the incoming cybersecurity chief will work to “define the organization’s risk appetite” and direct the formulation and execution of strategic cybersecurity and IT initiatives across the campaign.  Back in 2020, the campaign hired former White House cybersecurity adviser Chris DeRusha as its first CISO amidst reports that hackers linked to foreign…

Read More

Capture The Flag: 5 websites to sharpen your hacking skills

Secure Coding Through engaging hacking challenges and competitions, CTFs offer an excellent opportunity to test and enhance your security and problem-solving skills Christian Ali Bravo 13 Nov 2023  •  , 3 min. read Cybersecurity is not only an ever-evolving and increasingly important concern in our digital age, but it can also be a lot of fun. Capture The Flag competitions, also known as CTFs, have a lot to do with that. Through hacking challenges of…

Read More

Level up! These games will make learning about cybersecurity fun

We Live Progress Discover six games that will provide valuable knowledge while turning learning about digital security into an enjoyable and rewarding adventure Luiza Pires 14 Nov 2023  •  , 4 min. read In this day and age, knowing your way around the digital world is not merely a valuable asset – it is a crucial life skill. With the internet permeating many aspects of our lives, cyberthreats have also proliferated and continue to evolve,…

Read More

Watch Now: Using Governance and Privilege to Gain Control Over Third-Party Access

It’s been said “you cannot control the outcome, but you can control the process.” In today’s world of the “assume-breach” security posture, this has never been more true. Especially when it comes to third-party privilege, one of the most significant attack vectors organizations face.  Watch this webinar from Saviynt and SecurityWeek for advice on how to create more trust in your third party relationships by adding sustainable processes and tools that enable you to control…

Read More

Microsoft Patch Tuesday, November 2023 Edition

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three “zero day” vulnerabilities that Microsoft warns are already being exploited in active attacks. The zero-day threats targeting Microsoft this month include CVE-2023-36025, a weakness that allows malicious content to bypass the Windows SmartScreen Security feature. SmartScreen is a built-in Windows component that tries to detect and block malicious websites and files. Microsoft’s security…

Read More

Royal Ransomware Possibly Rebranding After Targeting 350 Organizations Worldwide

The Royal ransomware gang has targeted at least 350 organizations worldwide, with their ransom demands exceeding $275 million, and the cybercriminals may be preparing to rebrand their operation, the US cybersecurity agency CISA and the FBI say in an updated alert. Active since at least September 2022, Royal has been used in attacks against entities in critical infrastructure, education, healthcare, and manufacturing sectors, making ransom demands ranging between $1 million and $11 million, in Bitcoin.…

Read More

Ransomware Group RansomedVC Closes Shop

The ransomware and data extortion group RansomedVC announced plans to shut down the project and sell parts of its infrastructure. RansomedVC has only been around for a few months, operating under the ransomware-as-a-service (RaaS) business model. The group has listed more than 40 organizations on its leak site, demanding ransom payments of up to $1 million, depending on the victim’s size. The group mainly focuses on organizations in Europe, but recently claimed responsibility for attacks…

Read More