Security News Headlines #119

Author

Ian Bishop
September 24, 2024

Security News Headlines for today bring attention to insider threats, a newly discovered zero-click bug, and the rise of phishing attacks, among other critical topics in cybersecurity. From the discovery of new malware gateways to major data breach investigations, today’s stories highlight the evolving threat landscape and the innovative defenses being developed. Let’s dive into today’s top security developments.

New hires are especially vulnerable to insider threats in the first 90 days of employment. A Proofpoint study reveals this period is critical as employees adjust to new roles and may unknowingly create risks through improper handling of sensitive data. This highlights the need for enhanced monitoring and education during onboarding.

A critical vulnerability in MediaTek chips allows attackers to take over smartphones via Wi-Fi without user interaction. Discovered by researchers, the bug could let malicious actors access data and devices remotely. This zero-click exploit raises concerns about the security of millions of affected devices.

Attackers are using CAPTCHA challenges to deliver malware, deceiving users into believing the site is safe. McAfee Labs warns that these CAPTCHA-backed schemes are increasingly effective at bypassing security filters. This technique demonstrates how attackers are evolving their tactics to distribute malicious software more discreetly.

Amazon has launched a new tool to automatically detect and respond to website defacements using CloudWatch Synthetics. This service simulates user interactions and flags changes that indicate potential defacement, helping organizations quickly react to visual or content tampering on their websites.

Dell is investigating claims of a data breach after a hacker leaked employee information online. Although Dell hasn’t confirmed the breach, the leaked data includes email addresses and other sensitive details. This incident could have significant consequences for the company's reputation and employee privacy.

A new report finds that online scams are becoming more efficient, with shorter execution times and higher financial returns. Scammers are using automated tools to quickly launch and profit from fraudulent schemes before detection mechanisms can catch up, signaling a shift in the cybercrime landscape.

Google has introduced a feature that allows passkey synchronization across Android and desktop devices. This enhancement streamlines the use of passkeys, providing a more secure and convenient alternative to traditional passwords. It marks a step toward broader adoption of passwordless authentication.

The FBI has successfully disrupted a botnet with over 260,000 infected devices, primarily targeting universities and government agencies in the U.S. The botnet was being used for distributed denial-of-service (DDoS) attacks and data theft, underscoring the importance of vigilance in protecting institutional networks.

This article explores the complexities of cyber incident disclosure, including the timing, legal obligations, and risks of publicizing data breaches. Companies must balance transparency with security concerns to prevent further exploitation by attackers, while maintaining trust with stakeholders.

Researchers introduce the “Unified Kill Chain,” a new model for analyzing cyberattacks by combining elements from existing frameworks. The kill chain provides a comprehensive method for understanding how attackers compromise systems, offering insights that can help strengthen defensive strategies.

A new phishing attack leverages Windows PowerShell to gain elevated system privileges, making it especially dangerous. This sophisticated method is harder to detect and could be used to bypass traditional security measures, putting both individuals and organizations at higher risk.

Authorities have shut down a criminal operation that unlocked over 1.2 million stolen mobile phones. The hackers used a website to unlock the devices, which were then resold. This takedown highlights the ongoing issue of mobile phone theft and the demand for stolen devices on the black market.

The U.S. Air Force’s Information Warfare Hub is looking to integrate advanced sensors and AI-driven tools to enhance its cyber defense capabilities. These technologies will support more effective threat detection and response, crucial for modernizing the Air Force’s defense infrastructure.

Hackers are exploiting a vulnerability in Microsoft SQL Server to target contractor software, allowing them to gain unauthorized access to sensitive data. This loophole poses a significant threat to organizations that rely on contractors and third-party services for key operations.

Palo Alto Networks researchers have uncovered “Splinter,” a pentesting tool with both legitimate and malicious uses. While designed to help security teams identify weaknesses, it’s being used by cybercriminals for nefarious purposes, blurring the lines between ethical hacking and exploitation.

Reply

or to participate.