Information Technology Security

Among the never-ending list of malicious software that threat actors use in cyber attacks are viruses, worms, trojans, ransomware, spyware, and adware. Today's malware is not just about causing immediate damage; some programs get embedded within systems to siphon off data over time, disrupt operations strategically, or lay the groundwork for massive, coordinated attacks.  A prime example is a recently found malicious backdoor in a popular compression tool, known as xz Utils. Thankfully the malicious code was identified early “due to bad actor sloppiness”, but the consequences could’ve been massive. Read on to get the lowdown on recent high-profile malware attacks along with strategies to help limit malware risks at your organization.  Recent High-Profile Malware Attacks Here's a detailed overview of recent malware attacks, highlighting key incidents and offering valuable insights and lessons learned from each event. StripedFly A prolific and advanced cross-platform malware fra...

Plus: The Conti ransomware gang shuts down, Canada bans Huawei and ZTE, and more of the week’s top security news. By Matt Burgess, Wired As Russia's full-scale war in Ukraine heads towards its hundredth day, opposition from Ukrainian forces is as strong as ever. At the same time, hacktivists all around the world continue to breach Russian institutions and publish their files and emails. This week one hacktivist collective took a different—and slightly peculiar—approach: launching a service to prank-call Russian government officials. The new website uses leaked details to put two random Russian officials on a call with each other. It obviously won't make any difference to the outcome of the war, but the group that created it hopes the tool will cause some confusion and annoy those in Moscow. New research from Google’s Threat Analysis Group has delved into the surveillance-for-hire industry and found that spyware vendors are targeting Android devices with zero-day exploits. State...

'This is one of the most worrisome pieces of software I've ever seen,' says David Wright on 'Unfiltered' By  Fox News Cybersecurity expert Morgan Wright detailed the intent and capabilities of the spyware and citizen surveillance technology "Pegasus," calling it "worrisome" on Saturday's "Unfiltered with Dan Bongino." MORGAN WRIGHT: It's called zero-touch infection, and that's what it means, zero-touch. You don't have to do anything. They just have to have a little bit of information about your phone, maybe a phone number. Maybe they scan an area with another tool and identify all the phones that are there because they can get their unique ID numbers, and then they start targeting. They start figuring out who's moving, who's going in there. And I'll tell ya, Dan, it's not like a physical piece of equipment that if I took a gun away from you, you couldn't duplicate one just out of thin air. But if I to...