Security Staff Acquisition & Development

Japanese multinational electronics manufacturing firm Casio had data from its customers around the world compromised following unauthorized access to its ClassPad.net education web app's server, reports SiliconAngle.

Widely known security vulnerabilities have been increasingly targeted by ransomware strains based on the leaked toolkit of the LockBit ransomware operation, reports The Record, a news site by cybersecurity firm Recorded Future.

More stealthy attacks have been launched by the ALPHV/BlackCat ransomware operation with the use of the new Munchkin tool, which facilitates undetected encryptor deployment through virtual machines, BleepingComputer reports.

Insider threat issue comes to light as Justice Department seizes 17 websites linked to IT workers for the People’s Republic of North Korea.

Multiple threat actors are using a malware as a service toolset and targeting Facebook business accounts in the U.S., UK and India.

Subjecting payment systems around the world to a catastrophic cyberattack could result in a $3.5 trillion loss in global gross domestic product over a five-year period, according to The Record, a news site by cybersecurity firm Recorded Future.

Tech companies, professional services organizations, and government entities have been subjected to attacks exploiting a critical information disclosure vulnerability in Citrix NetScaler Application Delivery Controller and NetScaler Gateway instances, tracked as CVE-2023-4966, since late August, or about two months prior to the release of a fix, reports The Register.

Organizations in the oil and gas and defense industries across Eastern Europe have been targeted by spear-phishing attacks leveraging a new iteration of the MATA backdoor framework from August 2022 to May 2023, according to BleepingComputer.