The threat actors behind the BianLian ransomware have been observed exploiting security flaws in JetBrains TeamCity software to conduct their extortion-only attacks. According to a new report from GuidePoint Security, which responded to a recent intrusion, the incident “began with the exploitation of a TeamCity server which resulted in the deployment of a PowerShell implementation...Read More

For companies and insurance carriers alike, tamping down the latest cyber threat can feel akin to a game of Whack-A-Mole; just as one threat is neutralized, another rears its ugly head. Vulnerabilities – both known and unknown – are ever-present, and they pose serious threats to ongoing operations and financial health across nearly all industries....Read More

Microsoft detailed attempts by a Russian state-sponsored hacking group called Midnight Blizzard to breach its systems by using information stolen from its corporate emails systems in late November 2023, which it first disclosed in a SEC filing early this year. In a blog and updated SEC filing, the tech giant stated it has seen evidence...Read More

A CISA spokesperson told The Record that the agency “identified activity indicating the exploitation of vulnerabilities in Ivanti products the agency uses” about a month ago. “The impact was limited to two systems, which we immediately took offline,” the spokesperson said, adding that the agency continues to modernise its systems, and that there was “no...Read More

By Dr. Vikas Khare  The cyber security of information systems has emerged as a pressing concern, requiring the dedicated attention of researchers, academicians, and organizations to ensure confidentiality. Cybersecurity is the combination of ‘cyber’ and ‘security’, where the word cyber emphasized the culture of computers, information security, and augmented reality and virtual reality. Now it...Read More

Threat actors target email addresses, as they provide a way to access personal and confidential information. Emails often hold valuable data such as financials, login credentials, and personal messages. The attackers could start different kinds of cyber-attacks and propagate malware via compromised email addresses. Cybersecurity researcher Will (@BushidoToken) recently discovered that threat actors from UAC-0050...Read More

Two researchers found a way to use social engineering to potentially steal Teslas parked at charging stations.Kena Betancur/Getty Images Hackers have a potential new way to steal your Tesla. Researchers created a fake Tesla WiFi network to steal the owner’s login info and set up a new phone key. Teams have previously found other hacking...Read More

Pune: The Pune police have acquired a universal forensics extraction device, a licensed software product from an Israeli company, for extraction and analysis of data from cellphones for digital investigation of crimes.“The software, which costs Rs 10 lakh, will help reduce our reliance on forensic science labs for data analysis in cases where faster investigation...Read More

Lancashire’s police and crime commissioner Andrew Snowden has committed £150k of cash seized from criminals to a cyber security programme for small and medium sized businesses. (Image: Lancashire PCC) Lancashire’s police and crime commissioner has committed £150,000 of cash seized from criminals to launch a county-wide cyber security programme. The programme will help businesses protect...Read More

Lancashire’s police and crime commissioner Andrew Snowden has committed £150k of cash seized from criminals to a cyber security programme for small and medium sized businesses. (Image: Lancashire PCC) Lancashire’s police and crime commissioner has committed £150,000 of cash seized from criminals to launch a county-wide cyber security programme. The programme will help businesses protect...Read More