Cybersecurity news can sometimes feel like a never-ending horror movie, can’t it? Just when you think the villains are locked up, a new threat emerges from the shadows. This week… Read More »THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 – Oct 27)
Operational Technology (OT) security has affected marine vessel and port operators, since both ships and industrial cranes are being digitalized and automated at a rapid pace, ushering in new types… Read More »Sailing the Seven Seas Securely from Port to Port – OT Access Security for Ships and Cranes
Cybersecurity researchers have warned of a spike in phishing pages created using a website builder tool called Webflow, as threat actors continue to abuse legitimate services like Cloudflare and Microsoft… Read More »Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials
A new attack technique could be used to bypass Microsoft’s Driver Signature Enforcement (DSE) on fully patched Windows systems, leading to operating system (OS) downgrade attacks. “This bypass allows loading… Read More »Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel
Four members of the now-defunct REvil ransomware operation have been sentenced to several years in prison in Russia, marking one of the rare instances where cybercriminals from the country have… Read More »Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions
The infamous cryptojacking group known as TeamTNT appears to be readying for a new large-scale campaign targeting cloud-native environments for mining cryptocurrencies and renting out breached servers to third-parties. “The… Read More »Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining
The Computer Emergency Response Team of Ukraine (CERT-UA) has detailed a new malicious email campaign targeting government agencies, enterprises, and military entities. “The messages exploit the appeal of integrating popular… Read More »CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities
A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges. The CERT Coordination Center (CERT/CC) said the vulnerability, tracked as… Read More »Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite
Apple has publicly made available its Private Cloud Compute (PCC) Virtual Research Environment (VRE), allowing the research community to inspect and verify the privacy and security guarantees of its offering.… Read More »Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security
Artificial Intelligence (AI) has rapidly evolved from a futuristic concept to a potent weapon in the hands of bad actors. Today, AI-based attacks are not just theoretical threats—they’re happening across… Read More »Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?