SecurityWeek

Cybercriminals are using a recently registered lookalike domain in a phishing campaign targeting United States organizations, FINRA (the Financial Industry Regulatory Authority) warns.A government-authorized not-for-profit organization, FINRA regulates over 624,000 brokerage firms in the United States.

The Federal Bureau of Investigation (FBI) has issued a notification to warn organizations of scammers setting up auto-forwarding email rules to facilitate business email compromise (BEC) schemes.

Industrial cybersecurity company OTORIO has released an open source tool designed to help organizations harden Siemens’ SIMATIC PCS 7 distributed control systems (DCS).

Managed Detection and Response (MDR) provider GoSecure this week announced that it has secured $35 million in Series E growth funding.

ESET’s security researchers have discovered yet another piece of malware that Russian cyber-espionage group Turla has been using in its attacks.

Like many markets in technology, the fraud detection and prevention category is a crowded one. With different types of solutions approaching the fraud problem space from different angles, it’s worth asking the question: What problem or problems are we actually trying to solve with this class of solutions?  To my knowledge, enterprises are most often interested in reducing fraud losses.

Threat actors are targeting an Oracle WebLogic flaw patched last month in an attempt to install a piece of malware named DarkIRC on vulnerable systems.

UK-based cybersecurity company Glasswall this week announced that it has raised £18 million ($24 million) in equity capital, which it will use to fund its expansion.The funding round was led by IPGL, with participation from Lord Rose, chairman of Ocado, Lance Uggla, chairman and CEO of IHS Markit, and Andy Bell, founder and CEO of AJ Bell.

Container security company Prevasio has analyzed 4 million public Docker container images hosted on Docker Hub and found that over half of them had critical vulnerabilities and thousands of images included malicious or potentially harmful elements.

Google Details iPhone Zero-Click Exploit Allowing Theft of User Data, Including Photos, Emails

Threat actors are continuously targeting United States think tanks, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) warn.

Threat intelligence provider EclecticIQ on Tuesday announced that it has closed a €20 million ($24 million) Series C financing round, which brings the total raised by the company to €47 million ($56 million).

Vulnerabilities discovered by researchers in Rockwell Automation’s FactoryTalk Linx product can allow attackers to compromise engineering workstations in industrial environments.

Cybercriminals have been observed targeting a recently disclosed vulnerability in the GO SMS Pro messaging application to steal user data.

School continues to be out for more than 100,000 students in Baltimore County following a ransomware attack on the district’s network.

Brazilian airplane maker Embraer on Monday disclosed a cyberattack that, according to some reports, involved ransomware.

A nation-state threat actor was observed using cryptocurrency miners to avoid attracting too much attention and establish persistence in targeted networks, Microsoft reported on Monday.

A North Carolina man was sentenced to 95 months in federal prison for his involvement in multiple cyber and swatting attacks.

Online learning solutions provider K12 Inc., which recently announced changing its name to Stride Inc., said on Monday that it had decided to pay a ransom to cybercriminals who managed to breach its systems and deploy a piece of ransomware.