Cybercriminals Transform Raspberry Pi Into A Tool For Fraud & Anonymization: GEOBOX Discovery

  Resecurity identified a new solution advertised on the Dark Web – GEOBOX, a custom software, purpose-built for Raspberry Pi devices, representing an evolution in tooling for fraud and anonymization. Notably, the cybercriminals transformed widely used geek-favorite device into a ‘plug-and-play’ weapon for digital deception – enabling the operator to spoof GPS locations, emulate specific…

Read More

CISA Releases Guidance For Critical Infrastructure To Defend Against Chinese Hacking Group

CISA Releases Guidance For Critical Infrastructure To Defend Against Chinese Hacking Group CISA, along with several other U.S. authorities including the NSA, FBI and global partner Five Eyes cyber security agencies have warned critical infrastructure leaders to protect their systems against the Chinese Volt Typhoon hacking group. Volt Typhoon (also known as Vanguard Panda, Brronze…

Read More

CybeReady Announces Launch of New Internal Communications Center to Maximize Cybersecurity Learning & Readiness

CybeReady a global leader in autonomous cybersecurity learning, is pleased to announce the launch of its new Internal Communications Center.   This innovative management dashboard is designed to enhance how organizations orchestrate and communicate cybersecurity engagement among their employees, making it easier to keep everyone continually informed and committed to mastering the cybersecurity education process.  …

Read More

Ransomware to Govt-Backed Attackers, Aviation Industry Challenges are Many

Cyviation, focuses on aircraft security and provides  multiple layers of resilience ranging from fleet assessment and aircrew training to aviation security SIEM. The aim of the company is to remain focused on their mission and empower the aviation industry with robust defenses and proactive strategies. Providing cyber event management and intrusion detection for commercial aircraft…

Read More

Google Introduces Enhanced Real-Time URL Protection for Chrome Users

URL protection is an advanced email security service rewrites all links in inbound email and scans the destination website in real-time when clicked by the user to ensure that suspicious websites are blocked, no matter which client or which device is being used. Google recently announced an enhanced version of Safe Browsing to provide real-time, privacy-preserving URL…

Read More

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

Cisco has released patches to address a high-severity security flaw impacting its Secure Client software that could be exploited by a threat actor to open a VPN session with that of a targeted user. Cisco described the vulnerability, tracked as CVE-2024-20337 (CVSS score: 8.2), as allowing an unauthenticated, remote attacker to conduct a carriage return…

Read More

5,000 Donors Affected by Data Leak at Recently Formed German Party

A data leak at the recently formed German political party Sahra Wagenknecht Alliance (BSW) has given unauthorized people access to information on thousands of donors and subscribers to a newsletter. A party spokeswoman confirmed a corresponding report by Der Spiegel news magazine on Thursday. According to the report, up to 35,000 people are affected, including…

Read More

Current Scenario of Mobile Security Challenges & its Future Direction

Each smart phone is always connected to the internet and applications are downloaded from different sources. Hence securing all these applications is a monumental task as each application has its own security vulnerabilities. In an interview with securitydive.in, Clement SAAD, CEO, Pradeo, uncovered some of the startling revelations and explained how serious challenge it is…

Read More

Eye Security Raises $39 Million Led by JPMorgan as EU Ransomware Attacks Jump

Dutch cybersecurity firm Eye Security has reportedly raised $39 million to expand throughout Europe. The company’s funding round was led by JPMorgan Chase’s growth investment arm, The Wall Street Journal (WSJ) reported Sunday (March 10), noting that the financing is happening amid a jump in ransomware attacks. The report, citing information from the European Digital SME Alliance, said that such…

Read More

Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

The China-linked threat actor known as Evasive Panda orchestrated both watering hole and supply chain attacks targeting Tibetan users at least since September 2023. The end goal of the attacks is to deliver malicious downloaders for Windows and macOS that deploy a known backdoor called MgBot and a previously undocumented Windows implant known as Nightdoor. Key findings:…

Read More