Empowering Cybersecurity: Biden Administration’s National Cybersecurity Strategy
On March 2, 2023, the Biden Administration released its National Cybersecurity Strategy, which aims to address the growing cybersecurity concerns in the
TheCISO
Published items (166)
Playing with Fire: Why TikTok is a Loaded Gun for America’s Youth
TikTok is an immensely popular social media platform that allows users to create, share, and discover short video clips. However, General Paul Nakasone,
Read moreUpdate Android: Latest Android Security Updates
If you're an Android user, there's some important news you need to be aware of. The March 2023 Android Security Bulletin contains crucial information about
Read moreCrushing the DoppelPaymer Ransomware Gang: Joint Operation Results in Arrests
Core members of the DoppelPaymer ransomware gang were apprehended in a joint operation by the Ukrainian National Police and the German Regional Police, with
Read morePierce Transit Falls Victim to LockBit Ransomware Attack
The Pierce County Public Transportation Benefit Area Corporation (Pierce Transit), a public transit operator in Washington state, has recently become a victim
Read moreRancho Mesquite Casino Data Breach Lawsuit
A class-action lawsuit filed on Wednesday alleges that Rancho Mesquite Casino's computer systems were left vulnerable to a cyberattack, leaving the personal
Read moreRussian National Accused of Creating NLBrute Hacking Tool Faces Criminal Charges in the US
NLBrute, a brute-force hacking tool created by a Russian national, and the criminal charges he faces in the US.
Read moreTwo Radio Stations in Crimea Hacked with a Message from Ukraine
On the eve of the anniversary of Vladimir Putin's 2014 invasion, two radio stations in Crimea were hacked with a message from Ukraine. The message included
Read moreMajor Victory Against Cybercrime: Norwegian Police Seize $5.84 Million Worth of Cryptocurrency Stolen by Lazarus Group
Norwegian police agency Økokrim has made a major breakthrough in the fight against cybercrime, announcing the seizure of $5.84 million worth of cryptocurrency stolen by the notorious Lazarus Group
Read moreHow the Devastating Ransomware Attack in Oakland Brought the City to its Knees
The ransomware attack that struck Oakland on February 8, 2023, has had severe consequences for the city's services. The attack forced the City's Information
Read moreRussian Hacker Pleads Guilty to Laundering Over $150 Million in Ryuk Ransomware Attacks
Denis Mihaqlovic Dubnikov, a Russian national, recently pleaded guilty in a US court to money laundering and concealing the source of funds obtained in connection with Ryuk ransomware attacks. Learn more about his involvement in cryptocurrency and the estimated $150 million in laundered funds.
Read moreToyota Supplier Management Network Hacked
A security researcher, Eaton Zveare, discovered a vulnerability in Toyota's Global Supplier Preparation Information Management System (GSPIMS) and was able to access sensitive data of thousands of suppliers and users worldwide. Toyota quickly addressed the issue and fixed the vulnerability.
Read moreMalVirt Loaders and Formbook: A New Threat to Cybersecurity
Formbook family of malware spread via MalVirt loaders through malvertising attacks.
Read moreOpenSSH Version 9.2 Addresses Security Bugs
The maintainers of OpenSSH have released version 9.2 to address a pre-authentication double free vulnerability in the OpenSSH server (sshd). Learn about the vulnerability, its potential impact, and how to protect yourself
Read moreHeadCrab Malware Threatens Redis Servers
Protect your Redis server from the fast-spreading HeadCrab malware. Learn about the malicious botnet network, its annual profit, and how to secure your environment.
Read moreVMware Fixes High-Severity Privilege Escalation Flaw in Workstation
VMware has fixed a high-severity privilege escalation flaw in Workstation that allows attackers to delete arbitrary files. The issue was reported by Cirosec and updates are available to remedy the vulnerability.
Read moreCritical Vulnerability Discovered in Jira Service Management Server and Data Center
Critical vulnerability (CVE-2023-22501) in Jira Service Management Server and Data Center, its impact, and how to fix it with the latest updates from Atlassian.
Read morePeopleConnect Confirms Data Breach Affecting Millions of TruthFinder and Instant Checkmate Customers
A recent data breach at PeopleConnect, the owners of TruthFinder and Instant Checkmate background check services. Over 20 million customer records were leaked in a 2019 backup database.
Read more