Martin Fornusek reports: Ukrainian Railways (Ukrzaliznytsia) was the target of a large-scale and sophisticated cyberattack, the company said on March 24, adding that the restoration of all systems is ongoing. “Ukrzaliznytsia’s online systems have been subjected to a large-scale, targeted cyberattack,” the state railway operator said in a statement. The company’s website and application became…
The North Korean threat actors behind the Contagious Interview campaign have been observed using updated versions of a cross-platform malware called OtterCookie with capabilities to steal credentials from web browsers and other files. NTT Security Holdings, which detailed the new findings, said the attackers have “actively and continuously” updated the malware, introducing versions v3 and…
Infostealer malware allowed threat actors to compromise Telefonica employees’ credentials and access the company’s internal ticketing system. The post Infostealer Infections Lead to Telefonica Ticketing System Breach appeared first on SecurityWeek.
Ryan Knappenberger reports: Google began its defense Tuesday in the landmark antitrust trial over the tech giant’s dominance in internet search, with a long-time Google executive warning that the government’s proposed remedies would present significant security risks. The Justice Department, which rested its case earlier on Tuesday, has suggested U.S. District Judge Amit Mehta should release reams…
GitGuardian’s State of Secrets Sprawl report for 2025 reveals the alarming scale of secrets exposure in modern software environments. Driving this is the rapid growth of non-human identities (NHIs), which have been outnumbering human users for years. We need to get ahead of it and prepare security measures and governance for these machine identities as…
Microsoft has warned that using pre-made templates, such as out-of-the-box Helm charts, during Kubernetes deployments could open the door to misconfigurations and leak valuable data. “While these ‘plug-and-play’ options greatly simplify the setup process, they often prioritize ease of use over security,” Michael Katchinskiy and Yossi Weizman from the Microsoft Defender for Cloud Research team
Settlement with Northeast Surgical Group marks OCR’s 10th ransomware enforcement action and 4th enforcement action in OCR’s Risk Analysis Initiative. Today the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Northeast Surgical Group, P.C. (NESG), a provider of surgical services in Michigan, for a potential violation…
