New MOVEit Transfer zero-day mass-exploited in data theft attacks


Hackers are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software, tracked as CVE-2023-34362, to steal data from organizations. [...]


https://www.bleepingcomputer.com/news/se...t-attacks/

New Horabot campaign takes over victim's Gmail, Outlook accounts


A previously unknown campaign involving the Hotabot botnet malware has targeted Spanish-speaking users in Latin America since at least November 2020, infecting them with a banking trojan and spam tool. [...]


https://www.bleepingcomputer.com/news/se...-accounts/

Malicious Chrome extensions with 75M installs removed from Web Store


Google has removed from the Chrome Web Store 32 malicious extensions that could alter search results and push spam or unwanted ads. Collectively, they come with a download count of 75 million. [...]


https://www.bleepingcomputer.com/news/se...web-store/

Burton Snowboards discloses data breach after February attack


Leading snowboard maker Burton Snowboards confirmed notified customers of a data breach after some of their sensitive information was "potentially" accessed or stolen during what the company described in February as a "cyber incident."  [...]


https://www.bleepingcomputer.com/news/se...ry-attack/

NSA and FBI: Kimsuky hackers pose as journalists to steal intel


State-sponsored North Korean hacker group Kimsuky (a.ka. APT43) has been impersonating journalists and academics for spear-phishing campaigns to collect intelligence from think tanks, research centers, academic institutions, and various media organizations. [...]


https://www.bleepingcomputer.com/news/se...eal-intel/

Windows 11 to require SMB signing to prevent NTLM relay attacks


Microsoft says SMB signing (aka security signatures) will be required by default for all connections to defend against NTLM relay attacks, starting with today's Windows build (Enterprise edition) rolling out to Insiders in the Canary Channel. [...]


https://www.bleepingcomputer.com/news/se...y-attacks/

The Week in Ransomware - June 2nd 2023 - Whodunit?


It has been a fairly quiet week regarding ransomware, with only a few reports released and no new significant attacks. However, we may have a rebrand in the making, and a ransomware operation is likely behind a new zero-day data-theft campaign, so we have some news to talk about. [...]


https://www.bleepingcomputer.com/news/se...-whodunit/

Microsoft is killing Cortana on Windows starting late 2023

After introducing a string of AI-powered assistants for its products, Microsoft has now announced that it will soon end support for the Windows standalone Cortana app. [...]


https://www.bleepingcomputer.com/news/mi...late-2023/

Kia no longer just a value brand, says America CEO Sean Yoon

<p>Kia America CEO Sean Yoon said the company has gone through a transformative image overhaul, with new emphasis on crossovers and more disciplined incentive spending to improve consumer perception.</p>

https://www.autonews.com/talk-top/kia-am...nger-valid

Kia, Hyundai anti-theft software fixes a work in progress

<p>Kia and Hyundai have notified dealers that there are problems with a software fix that's being offered as a way to prevent vehicles from being hot-wired.</p>

https://www.autonews.com/regulation-safe...eeds-fixes