Massive Breach Exposes 130K+ Patients’ Social Security Numbers at UHS of Delaware

Soldier stealing paperwork from an office

North Korean APT Group Kimsuky Conducts Targeted Social Engineering Campaign

In a recent collaboration with NK News, SentinelLabs, a renowned cybersecurity firm, has uncovered a targeted social engineering campaign orchestrated by the North Korean Advanced Persistent Threat (APT) group known as Kimsuky.

North Korean Threat Actors Target Think Tanks, Academia, and Media with Phishing Campaign

The United States and South Korean governments have issued a joint advisory [PDF] warning that North Korean threat actors are conducting a phishing campaign targeting

Red shield representing security software shattering into pieces.

Malicious Actor Claims New Tool Can Bypass Any Antivirus, EDR

A malicious actor is selling a tool called Terminator that they claim can bypass antivirus and EDR software.

Russia Accuses US of Widespread Apple iPhone Hacking

Russia’s Federal Security Service (FSB) claims to have discovered an elaborate American espionage operation that compromised thousands of iPhones using sophisticated surveillance software. Moscow-based Kaspersky Lab confirmed that several of its employees’ devices were compromised during the operation.

Mandiant Unearths New Malware That Can Sabotage Power Grids

A new strain of malware, dubbed COSMICENERGY, has been discovered that is designed to penetrate and disrupt critical systems in industrial environments. The malware is capable of exploiting an industrial communication protocol called IEC-104 to issue commands to RTUs, which could potentially cause power disruption. There is no evidence that the malware has been used in attacks, but its discovery is a reminder of the threat posed by malicious software to critical infrastructure.