cybersecurity threats

US warns of North Korean hackers using email security flaws for phishing attacks

North Korean hacking group Kimsuky exploits email security flaws for phishing attacks on organizations.

Proper configuration of email security protocols, such as DMARC, is crucial in preventing phishing attempts and spoofing. [ more ]

ComputerWeekly.com

NCSC updates warning over hacktivist threat to CNI | Computer Weekly

Russia-backed hacktivist groups targeting critical infrastructure with unsophisticated attacks.

NCSC and CISA warning about evolving threats from hacktivist groups not officially backed by the Kremlin. [ more ]

ITPro

Stealthy malware: The threats hiding in plain sight

Criminals are evolving to use more sophisticated methods like hunter-killer malware to hide from security systems, with over two-thirds of malware now employing stealth techniques. [ more ]

Theregister

2 months ago

GitHub struggles to keep up with automated malicious forks

Malware campaign started in PyPI spread to GitHub infecting 100,000 repositories.

Attackers upload altered files to GitHub, cloning legitimate repos to spread malware loaders. [ more ]

Dark Reading

6 months ago

IT Pros Worry Generative AI Will Be a Major Driver of Cybersecurity Threats

Generative AI is viewed as a growing cybersecurity threat by many organizations.

Data breaches and identity-based threats are also top concerns.

Organizations are focused on developing policies and training employees to mitigate cybersecurity risks. [ more ]

Tech.co

6 Ways Remote Workers Can Stop Their Boss Spying on Them

Remote work has privacy risks due to cybersecurity threats and employer monitoring, requiring tools for staying secure online. [ more ]

www.independent.co.uk

1 month ago

Sunak says UK more robust' on China than most allies

The UK's approach to China is robust compared to allies

Criticism towards UK's handling of Chinese-owned companies like Bytedance [ more ]

www.theguardian.com

2 months ago

Huge cybersecurity leak lifts lid on world of China's hackers for hire

Chinese cybersecurity firm data leak reveals state security agents harvesting data on targets, hackers gather information for clients.

Leaked files from I-Soon provide insights into China's hackers for hire, including targeting Nato, UK Foreign Office, and other institutions. [ more ]

TechRepublic

3 months ago

Google's Threat Analysis Group's Spyware Research: How CSVs Target Devices and Applications

Commercial surveillance vendors sell surveillance services to governments for monitoring or spying purposes.

CSVs openly operate with websites, marketing content, and sales teams, and may change names to avoid scrutiny. [ more ]

TechRepublic

3 months ago

Cyber League: UK's NCSC Calls on Industry Experts to Join its Fight Against Cyber Threats

The National Cyber Security Centre (NCSC) in the UK has launched the Cyber League, a collective of industry experts who will work alongside the government agency to tackle cybersecurity threats.

The Cyber League will support existing NCSC initiatives by facilitating knowledge sharing and exchanging insights on the growing threat landscape.

Membership to the Cyber League is open to individuals involved in cybersecurity or threat intelligence with a substantial UK connection. [ more ]

Nextgov.com

5 months ago