North Korean APT Uses Malicious Microsoft OneDrive Links to Spread New Malware

ReconShark, aimed at gaining initial access to targeted systems, is a component of previous malware used by the Kimsuky group.

https://www.darkreading.com/attacks-brea...ew-malware

Why the FTX Collapse Was an Identity Problem

Cryptocurrency has a valuable role to play in a Web3 world — but only if the public can fully trust it.

https://www.darkreading.com/operations/w...ty-problem

Why the 'Why' of a Data Breach Matters

The motivations of an attacker help establish what protections to put into place to protect assets.

https://www.darkreading.com/edge-article...ch-matters

Western Digital Confirms Customer Data Stolen in Ransomware Attack

Company refutes BlackCat claims, saying it still controls digital signature infrastructure.

https://www.darkreading.com/attacks-brea...y-blackcat

1M NextGen Patient Records Compromised in Data Breach

BlackCat ransomware operators reportedly stole the sensitive data.

https://www.darkreading.com/application-...ds-stolen-

New Cactus ransomware encrypts itself to evade antivirus


A new ransomware operation called Cactus has been exploiting vulnerabilities in VPN appliances for initial access to networks of "large commercial entities." [...]


https://www.bleepingcomputer.com/news/se...antivirus/

Detecting data theft with Wazuh, the open-source XDR


Threat actors can steal data from organizations to sell to other malicious actors, making it a major risk for organizations. Wazuh, the free and open-source XDR/SIEM, offers several capabilities that protection against data theft. [...]


https://www.bleepingcomputer.com/news/se...ource-xdr/

Microsoft: Iranian hacking groups join Papercut attack spree


Microsoft says Iranian state-backed hackers have joined the ongoing assault targeting vulnerable PaperCut MF/NG print management servers. [...]


https://www.bleepingcomputer.com/news/se...ack-spree/

QR codes used in fake parking tickets, surveys to steal your money


As QR codes continue to be heavily used by legitimate organizations—from Super Bowl advertisements to enforcing parking fees and fines, scammers have crept in to abuse the very technology for their nefarious purposes. A woman in Singapore reportedly lost $20,000 after using a QR code to fill out a "survey" at a bubble tea shop. [...]


https://www.bleepingcomputer.com/news/se...our-money/

Microsoft enforces number matching to fight MFA fatigue attacks


Microsoft has started enforcing number matching in Microsoft Authenticator push notifications to fend off multi-factor authentication (MFA) fatigue attacks. [...]


https://www.bleepingcomputer.com/news/mi...e-attacks/