Federal prosecutors have charged Robert B. Westbrook, a UK national, for his alleged involvement in a “hack-to-trade” scheme that reportedly generated $3.75 million in illicit stock trades. This operation involved unauthorized access to the Office365 email accounts of various executives at publicly traded companies, allowing Westbrook to acquire confidential quarterly…
Eight vulnerabilities have recently been discovered in Microsoft applications tailored for macOS, potentially enabling attackers to exploit these weaknesses for elevated privileges and unauthorized access to sensitive user data. This circumvention directly undermines the operating system’s permissions framework, specifically the Transparency, Consent, and Control (TCC) model designed by Apple. Security…
Security Flaws Discovered in Rockwell Automation’s PanelView Plus Could Lead to Remote Attacks Recent disclosures have unveiled two critical security vulnerabilities in Rockwell Automation’s PanelView Plus systems, which could potentially allow remote, unauthenticated attackers to execute arbitrary code or trigger denial-of-service (DoS) conditions. This revelation, made by Microsoft security teams,…
Nation-State Actors Leverage AI for Cyber Attacks Recent investigations reveal that nation-state actors from Russia, North Korea, Iran, and China are increasingly incorporating artificial intelligence (AI) and large language models (LLMs) into their cyber offensive strategies. This alarming trend indicates a significant evolution in the tactics employed by these actors…
Cyber Attacks Linked to Iran and Hezbollah Targeting Israel Amid Ongoing Conflict In the wake of heightened tensions resulting from the Israel-Hamas war, hackers associated with Iran and Hezbollah have orchestrated a range of cyber attacks aimed at undermining public support for Israel. These cyber offensives emerged prominently after October…
This week’s cybersecurity updates highlight several significant incidents and developments affecting both users and organizations. We summarize the key news that we haven’t covered in depth. Click on the headlines to access the full stories, and remember to prioritize your safety online. In a notable shift, users of the uBlock…
Microsoft has announced the release of security patches addressing a staggering 143 vulnerabilities as part of its latest monthly updates. Among these issues, two have been confirmed to be actively exploited, heightening concerns for organizations relying on Microsoft software. The updates, which categorize five vulnerabilities as Critical, 136 as Important,…
In January 2024, Microsoft revealed that it fell victim to a cyberattack attributed to the Russian state-sponsored hacking group known as Midnight Blizzard, or Nobelium. This incident stands out not only due to the reputational ramifications for one of the world’s leading technology companies but also because of the ease…
Cybercrime, Fraud Management & Cybercrime, Incident & Breach Response Highlights: Internet Archive Restarts Operations Amid Threats, New Warning on Kerberoasting, and Increase in Passkey Adoption Anviksha More (AnvikshaMore) • October 17, 2024 Image: Shutterstock This week, ISMG presents a summary of significant cybersecurity incidents and breaches worldwide. Notable events include…
