Cyber Journal

Cyber News

Articles and analysis on Cyber News.

· Cyber News

Russian Cyberwarfare Documents Leaked

Now this is interesting: Thousands of pages of secret documents reveal how Vulkan’s engineers have worked for Russian military and…

Read article
· Cyber News

Automatic Updates Deliver Malicious 3CX ‘Upgrades’ to Enterprises

In a Solar Winds-like attack, compromised, digitally signed versions of 3CX DesktopApp are landing on user systems via the vendor’s update…

Read article
· Cyber News

Report: Terrible employee passwords at world’s largest companies

Find out the most commonly used weak passwords by industry and country, according to NordPass. Plus, get tips on creating strong passwords.

Read article
· Cyber News

Volume of HTTPS Phishing Sites Surges 56% Annually

Scammers are increasingly trying to legitimize their efforts

Read article
· Cyber News

AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services

A new “comprehensive toolset” called AlienFox is being distributed on Telegram as a way for threat actors to harvest credentials from API…

Read article
· Cyber News

Cyberstorage: Leveraging the Multi-Cloud to Combat Data Exfiltration

Multi-cloud data storage, once merely a byproduct of the great cloud migration, has now become a strategy for data management.

Read article
· Cyber News

New Wi-Fi Protocol Security Flaw Affecting Linux, Android and iOS Devices

A group of academics from Northeastern University and KU Leuven has disclosed a fundamental design flaw in the IEEE 802.11 Wi-Fi protocol…

Read article
· Cyber News

3CX DesktopApp compromised by supply chain attack

3CX is working on a software update for its 3CX DesktopApp, after multiple security researchers alerted the company of an active supply…

Read article
· Cyber News

APT group Winter Vivern exploits Zimbra webmail flaw to target government entities

An APT group known in the security industry as Winter Vivern has been exploiting a vulnerability in the Zimbra Collaboration software to…

Read article
· Cyber News

Fixing Vulnerabilities can be messy;

and so it is Continue reading on The CISO Den »

Read article
· Cyber News

Stop Blaming the End User for Security Risk

Don’t count on securing end users for system security. Instead, focus on better securing the systems — make them closed by default and…

Read article
· Cyber News

Nexus Android malware targets 450 financial applications

Learn how to protect your organization and users from this Android banking trojan.

Read article
· Cyber News

The CISO Mantra: Get Ready to Do More With Less

For the foreseeable future, with the spigots closing shut, CISOs will need to find ways to do more with less.

Read article
· Cyber News

Security Vulnerabilities in Snipping Tools

Both Google’s Pixel’s Markup Tool and the Windows Snipping Tool have vulnerabilities that allow people to partially recover content that…

Read article
· Cyber News

Breaking the Mold: Pen Testing Solutions That Challenge the Status Quo

Malicious actors are constantly adapting their tactics, techniques, and procedures (TTPs) to adapt to political, technological, and…

Read article
· Cyber News

IcedID Malware Shifts Focus from Banking Fraud to Ransomware Delivery

Multiple threat actors have been observed using two new variants of the IcedID malware in the wild with more limited functionality that…

Read article
· Cyber News

Pakistan-Origin SideCopy Linked to New Cyberattack on India’s Ministry of Defence

An advanced persistent threat (APT) group that has a track record of targeting India and Afghanistan has been linked to a new phishing…

Read article
· Cyber News

Data loss from insider events increase despite IRM programs: Report

A vast majority of companies are struggling with data losses from insider events despite having dedicated insider risk management (IRM)…

Read article
· Cyber News

Spend on Safety Measures & Call Out Insecure Practices for Safer IoT

IoT risk and security must get more attention from vendors and support from the marketplace.

Read article
· Cyber News

Can zero trust be saved?

Graham Cluley Security News is sponsored this week by the folks at Kolide.

Read article
· Cyber News

Cybersecurity vs. Everyone: From Conflict to Collaboration

Don’t assume stakeholders outside security understand your goals and priorities, but consider how you’ll communicate with them to gain…

Read article
· Cyber News

OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident

OpenAI on Friday disclosed that a bug in the Redis open source library was responsible for the exposure of other users’ personal…

Read article
· Cyber News

Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

Microsoft on Friday shared guidance to help customers discover indicators of compromise (IoCs) associated with a recently patched Outlook…

Read article
· Cyber News

U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals

In what’s a case of setting a thief to catch a thief, the U.K. National Crime Agency (NCA) revealed that it has created a network of fake…

Read article

We are here to answer your questions 24/7

Ready To Achieve Next-Level Performance?