In the Security News: Stealing Mastodon passwords, reporting vulnerabilities in open-source privately, labeling does not solve problems, or does it? will it every get patched? geolocating people from photos, no meta-data required, update your firmware on Linux, hacking flow computers, when a driver isn't really a driver, well, its a driver, but not...
Numerous security firms, gaming companies, and luxury car manufacturers have been targeted by the new KmsdBot malware, which uses the Secure Shell cryptographic protocol to facilitate cryptocurrency mining and distributed denial-of-service attacks.
Healthcare organizations across the U.S. have been warned by the Department of Health and Human Services regarding Venus ransomware attacks following a recent intrusion against a healthcare provider, BleepingComputer reports.
Prestige ransomware attacks against Ukraine and Poland have been conducted by Russian hacking group Iridium, which has overlapped with the Sandworm threat operation, according to The Record, a news site by cybersecurity firm Recorded Future.
Worok backdoor concealed in PNG images The Worok threat group has been confirmed by Avast researchers to be leveraging PNG images as a means to conceal information-stealing malware, following earlier findings by ESET assuming such a threat vector, reports BleepingComputer.
The LockBit ransomware gang has been selling files stolen from German multinational automotive parts manufacturer Continental for $50 million, according to SecurityWeek.
California-based Merced College has been impacted by a malware attack on Nov. 3 that resulted in the significant disruption of its network, reports SiliconAngle.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.