SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories that may not warrant an entire article, but are nonetheless important for a comprehensive understanding of the cybersecurity landscape. Each week, we will curate and present ..
Tag : Cybercrime
Nearly 1,000 organizations and 60 million individuals are reportedly impacted by the recent MOVEit campaign conducted by the Russian-speaking Cl0p ransomware group. It’s worth noting that these numbers include both directly and indirectly impacted entities. For instance, several organizations and millions of people had their information compromised through PBI, which provides research services for the ..
A financially motivated cybercrime group has exploited a zero-day vulnerability in the popular file archiving utility WinRAR to deliver malware to traders and steal their money, according to cybersecurity firm Group-IB. The vulnerability, tracked as CVE-2023-38831, was quickly patched by WinRAR developers, with a beta version released on July 20 and a stable version (6.23) ..
A UK court on Wednesday found a teenager responsible for a hacking campaign that included one of the biggest breaches in the history of the video game industry. Arion Kurtaj, 18, was described by the prosecution as one of the “key players” in the Lapsus$ group that hacked Rockstar Games in 2022 and published footage ..
The Federal Bureau of Investigation has published information on six cryptocurrency wallets operated by North Korean hackers and believed to be holding stolen funds. The cryptocurrency addresses, the FBI says, hold roughly 1,580 Bitcoin that are likely related to the recent theft of cryptocurrency assets worth hundreds of millions of dollars. “Over the last 24 ..
Energy One, an Australian company that provides software products and services to the energy sector, has been hit by a cyberattack. In a statement issued on Monday, the company said the incident was detected on August 18 and it impacted some corporate systems in Australia and the UK. “As part of its work to ensure ..
Cybersecurity company Cyfirma claims to have uncovered the real identity of the developer behind the CypherRAT and CraxsRAT remote access trojans (RATs). Using the online handle of ‘EVLF DEV’ and operating out of Syria for the past eight years, the individual is believed to have made over $75,000 from selling the two RATs to various ..
Australian financial services company Latitude Financial reported on Friday that the cyberattack disclosed earlier this year has cost it tens of millions of dollars. In a financial report covering the first half of 2023, the consumer lender reported AU$76 million (roughly US$50 million) of pre-tax costs and provisions relating to the cyber incident. The company ..
Il costo medio complessivo delle violazioni di dati è pari a 3,55 milioni di euro, in crescita rispetto ai 3,03 milioni di euro nel 2021 e ai 3,40 milioni di euro del 2022. Nell’ultimo decennio, il costo medio per ogni violazione dei dati è cresciuto del 55% (da 95 euro nel 2013 a 147 euro ..
The Rapid7 mid-year review of the threat landscape is not reassuring. Ransomware remains high, basic security defenses are not being used, security maturity is low, and the return on investment for criminality is potentially enormous. The review is compiled from the observations of Rapid7’s researchers and its managed services teams. It finds there were more ..
