Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Olivia William
OWIS Singapore: Cultivating Global Minds Across Unique Campuses
Singapore has long been a hub for international education, attracting families seeking holistic, globally minded schooling options. Among the distinguished names in this space is One World International School (OWIS Singapore) — a vibrant institution that places equal emphasis on academic rigor, character development, and cross-cultural understanding. This article explores what makes OWIS distinct, and offers insight into its role in the landscape of quality schooling in Singapore.
Apple Responds Swiftly To Active Security Threats With IOS 16.5.1 Update
In a bid to protect its users, Apple has rolled out an important update, iOS 16.5.1, along with macOS 13.4.1, which patches two critical security flaws that have been actively exploited. The company has taken immediate action to remediate these vulnerabilities, demonstrating once again its commitment to user safety. The two patches address significant security issues affecting almost all of Apple’s devices, including iPhone 6s and later, modern iPads, Macs, and even Apple Watches.
British Airways And Boots Battling Data Breaches, Millions Of Customers Affected
Summary: Both British Airways and Boots have recently fallen victim to data breaches, resulting in millions of customers’ personal information being compromised. Hackers accessed the personal information of 380,000 British Airways customers and 90,000 Boots customers, including sensitive data such as names, addresses, and credit card numbers. Both companies are collaborating with law enforcement to examine the breaches and have implemented measures to bolster their system security.
Buhti Ransomware Adopts Stolen Encryptors For Windows & Linux
The perpetrators behind the budding Buhti ransomware have abandoned their own payload in favor of exploiting vulnerabilities in Windows and Linux using the exposed LockBit and Babuk ransomware families. The cybersecurity firm knows them as Blacktail and is following them. In February 2023, Palo Alto Networks Unit 42 first brought attention to Buhti, claiming it as a Golang ransomware that specifically targets Linux.
Barracuda Alerts Of Breaches In Email Gateways From Zero-Day Flaws
Barracuda, a provider of email and network security solutions, issued a warning to its customers today that a zero-day vulnerability had been exploited to compromise some of their Email Security Gateway (ESG) equipment last week. The email attachment scanning module had a flaw that was uncovered on Friday, May 19th. On May 20 and 21, two security fixes were implemented to fix the problem.
GoldenJackal: Threat Risk For Organizations In Middle East & South Asia
GoldenJackal is a new advanced persistent threat actor that targets government and diplomatic organizations in the Middle East and South Asia. Kaspersky Labs, a Russian cybersecurity company, has been monitoring the group’s actions since the middle of 2020 and has described them as both powerful and covert.
Micron: China Issues Ban On US Chipmaker
The Chinese government has ordered infrastructure operators to stop buying Micron Technology chips. The action follows a US prohibition on using the social video app TikTok on government phones and US limitations on exporting some advanced computer components to China. While using its platform, the Cyberspace Administration of China warned that its products pose “serious network security risks” to China’s information infrastructure and national security.
Investigating Risks Through Threat Hunting Capability Guide
Threat hunting is the means of exploring and searching for malicious software or unauthorized users on your network. Since a security information and event management (SIEM) system gives insight into network, endpoint, and application behavior that may indicate an attack, it is commonly acknowledged as the method to utilize while doing threat hunting.
18-Year-Old Hacker Charged Over Theft Of 60,000 DraftKings Accounts
According to today’s DOJ announcement, a Wisconsin man named Joseph Garrison, 18, has been accused of breaking into the accounts of about 60,000 customers of the DraftKings accounts for the sports betting website in November 2022. The complaint states that the suspect hacked into the accounts by using stolen credentials from multiple earlier breaches. He eventually sold the compromised accounts to criminals who stole $600,000 from 1,600 of them.
Warning Issued About BianLian Ransomware Attacks By CISA & FBI
CISA & FBI has released a joint Cybersecurity Advisory from government agencies in the United States and Australia to warn businesses about the most recent tactics, methods, and procedures (TTPs) utilized by the BianLian ransomware group. Since June 2022, BianLian, a ransomware and data extortion outfit, has been aiming its attacks towards organizations within the United States and Australia’s critical infrastructure.
Chinese Hackers Mustang Panda Attacks TP-Link Routers
The Chinese state-sponsored hacking outfit “Camaro Dragon” attacks household TP-Link routers with bespoke “Horse Shell” malware to attack European foreign affairs organizations. Hackers use backdoor virus in custom firmware for TP-Link routers to launch assaults from home networks. According to Check Point research, this attack targets residential and home networks, not important networks.
RA Group Hacks Businesses Using Stolen Babuk Source-Code
The ransomware attacks of the recently identified RA Group, the latest threat actor to use the stolen Babuk code, have increased in frequency and severity. Their specialized technique sets them apart from the rest of the Babuk tribe. This week, Cisco Talos released an investigation claiming that RA Group had launched on April 22 and had since expanded significantly. So far, it has targeted manufacturing, wealth management, insurance, and pharmaceutical firms in the United States and South Korea.
Merdoor Backdoor Exploits Agencies By The Lancefly APT
South and Southeast Asian government, airline, and telecom institutions have been targeted by a new APT hacking outfit called Lancefly, which employs a variant of the ‘Merdoor’ backdoor malware. Symantec Threat Labs announced today that Lancefly has been using the stealthy Merdoor backdoor in targeted attacks against businesses since 2018. This allows the attackers to remain persistent, issue instructions, and collect keystroke data.
5.8 Million People Affected By Data Breach At PharMerica
On April 8 that the Money Message ransomware organization attacked the national pharmacy network PharMerica and its parent company. The home and community healthcare business BrightSpring Health. Threat actors exposed evidence data, a statement was obtained from BrightSpring, and additional evidence and allegations were gained via Money Message.
Review Of News And Events That Happened This Week
A rundown of the headlines of news and events from the past week pertaining to ransomware, data breaches, quick response security, and other related topics. Malware Attacks From SmokeLoader And RoarBAT, CERT-UA Warns CERT-UA has reported the spread of SmokeLoader malware through invoice-themed phishing campaigns, which hijack accounts to send emails with a ZIP package containing a bogus document and JavaScript file.
10 Web Development Skillset And Key Abilities You Can't Ignore
Web development involves building and programming websites and apps. It’s different from web design, which focuses on how websites look. Web developers make sure websites work well and are easy to use. They write code using different programming languages depending on what they need to do and which platform they are working on. Web developers are responsible for creating the web pages we use every day. Are you interested in becoming a web designer or improving your web development skills?
Google Broadens Dark Web Monitoring To Track All Gmail Users
Gmail users now have access to Google’s free dark web monitoring service, which can detect if their email is being shared on hacking forums. Google One, the search giant’s paid subscription service in the United States, already has a dark web surveillance option for paying subscribers. But at Google I/O 2018, the firm announced that all Gmail users will now receive free security monitoring.
FBI Disables 'Sophisticated' Russian Snake Cyberspying Tool
U.S. officials announced on Tuesday that they had destroyed a worldwide network of compromised computers that Russian intelligence personnel had used to spy on the U.S. and its allies for over 20 years. It has been reported that a branch of Russia’s Federal Security Service (FSB) stole classified material from hundreds of infiltrated computer networks in at least 50 countries by using malicious software known as Snake.
Severe Ruckus RCE Flaws Utilized By Fresh DDoS Botnet Malware
“AndoryuBot’ is a new malware botnet that infects unpatched Wi-Fi access points for DDoS assaults using a key Ruckus Wireless Admin panel weakness. CVE-2023-25717 allows remote attackers to execute code on susceptible Ruckus Wireless Admin panels version 10.4 and older by sending unauthenticated HTTP GET requests. February 8, 2023, found and corrected the problem. Many have not installed security upgrades, and end-of-life models affected by the security issue will not receive a fix.
LinkedIn Displaces 716 Positions, Pulls Out Its China App
LinkedIn is eliminating 716 jobs and will begin winding down its local jobs app in China as part of the company’s restructuring.
NextGen Healthcare Hit By Data Breach, Over 1M+ Details Exposed
Hackers broke into the computers of NextGen Healthcare, an American provider of electronic health record software, and stole the personal information of over a million patients. NextGen Healthcare reported that hackers accessed the personal information of 1.05 million patients, including about 4,000 Maine residents. In a notification filed with the office of the attorney general of Maine.
Protecting DevOps Workflow From The Threat Of Malicious Packages
The compound word, DevOps, defines an extensive procedure and culture that comprises the process and technology of software planning/development (Dev) and IT operations (Ops). DevOps has helped shorten the time for organizational system development, improving the running of software while attaining high-quality delivery as organizations offer services to customers (good customer experience).
Summary Of News And Events That Happened This Week
A summary of news and events that happened this week with ransomware, data breaches, rapid response security, etc. Chatgpt Triumphantly Returns To Italy After …… Tech businesses and regulatory authorities must communicate and cooperate to resolve ChatGPT’s prohibition in Italy quickly. Innovation and consumer privacy must be balanced as AI enters our daily lives. OpenAI’s dedication to privacy and security shows a potential future that prioritizes user trust and collaboration.
Google Implements Passkeys For Secured Sign-in To Google Accounts
Nearly five months after integrating passkey support into its Chrome browser, the tech giant has started implementing the password-free option for all Google Accounts across all platforms. This enables users to sign into their Google accounts without having to input a password or utilize 2-Step Verification (2SV). The FIDO Alliance-supported Passkeys are a more private alternative to using a regular password to sign in to apps and websites.
US Government Disengages Try2check Platform On The Dark Web
Denis Gennadievich Kulkov, a Russian national, was indicted by the U.S. government today on charges of running a stolen credit card checking business that made them gather in tens of millions of dollars. Kulkov allegedly made at least $18 million in Bitcoin by creating the underground service Try2Check in 2005. This site quickly gained popularity among hackers engaged in the unlawful credit card trade.
PornHub Blocked In Utah State Due To SB287 Age Verification Law
In reaction to a new rule requiring websites to verify that a visitor from the state is 18 or older, adult film production company MindGeek has barred entrance to its websites platform in Utah (including PornHub, Brazzers, RedTube, YouPorn, and Reality Kings). The governor of Utah signed S.B. 287 Online Pornography Viewing Age Requirements into law in March, and it becomes operative today.
Apple Puts First Rapid Security Response Patch On IPhones
As of now, the release of Apple’s initial Rapid Security Response update to the public, which includes security fixes for iOS 16.4.1 and macOS 13.3.1, hasn’t been entirely smooth. According to a support document recently published by the company, RSR patches are updates of small size that aim to address security issues on iPhone, iPad, and Mac platforms between major software updates.
50 Crypto Wallets Targeted By Atomic MacOS Malware
Security professionals have issued alerts regarding a new type of malware that targets MacOS devices in an effort to steal sensitive data, including credit card details, credit card expiration dates, and information from over 50 Bitcoin browser extensions. The threat, dubbed “Atomic” (also known as “AMOS”), is being offered for $1,000 per month on Telegram, a notorious encrypted messaging service with a bad reputation for serving as a venue for the exchange of illegal materials and content.
35M Downloads Of Android Minecraft Clones Spreads Adware
A group of 38 Minecraft-like games on Google Play attacked devices with the Android adware “HiddenAds,” which loaded ads in the background without the user’s knowledge. This made money for the games’ creators. Minecraft is a successful sandbox game with over 140 million active players monthly. Many game companies have tried to make similar games. About 35 million Android users around the world, mostly from the US, Canada, South Korea, and Brazil got Minecraft-like games that were hiding adware.
Microsoft Admits PaperCut Servers Used In LockBit And Cl0p Ransomware
Businesses and organizations of all kinds are increasingly concerned about ransomware attacks, and recent information from Microsoft reveals that even well-liked software applications can be exposed to attack. Microsoft recently acknowledged that the PaperCut servers were utilized to distribute the LockBit and Cl0p ransomware. The news is worrying because many firms rely on PaperCut, which is a commonly used print management program.
Saas Security: The Need For Continuous Sustenance
Data has emerged as a company’s most essential asset in the modern world. Every security team prioritizes protecting sensitive data, but changes to the perimeter have forced teams to adapt how they approach enterprise security. SaaS adoption has skyrocketed in recent years, accounting for most cloud service costs in organizations. But regarding security concerns, SaaS security still isn’t a priority and it’s not even in the top three, according to our recent IT and security pros survey.
Large 2,200x DDoS Amplification Assault Due To New SLP Flaw
Threat actors can conduct enormous denial-of-service attacks with 2,200X amplification thanks to a new reflected Denial-of-Service (DoS) increasing its vulnerability in the Service Location Protocol (SLP). Researchers at BitSight and Curesec identified this weakness as CVE-2023-29552. They claim that around 2,000 companies are utilizing equipment that exposes about 54,000 exploitable SLP instances that can be used in DDoS amplification assaults.
OTP Codes Synchronized Across Devices With Google Authenticator
The upgrade matches a feature that rival authenticator apps and password-manager services have long provided. Thanks to Google’s Authenticator app, you no longer need to keep your one-time codes in a single location to secure your accounts. They can instead sync with your Google account.
The Means To Privacy And Security On Internet
When it comes to cybersecurity and privacy, people are always on the lookout for solutions that will ensure their safety online. This solution that has been gaining popularity in recent times is the Tails operating system. Tails is a Linux-based operating system designed to be used as a live operating system, which means that it can be run from a USB stick or a DVD without installing it on a computer.
Summary Of News And Events That Happened This Week
Here is a rundown of news and events that happened over the week. Chinese App Uses Android Flaw To Spy On Users, CISA Warns A top US security firm has given the government until May 4 to patch a zero-day vulnerability that allowed e-commerce software to eavesdrop on customers. CVE-2023-20963 was added to CISA’s Known Exploited Vulnerabilities List late last week. After “limited, focused exploitation,” Google patched the high-severity issue last month.
Cisco And VMware Issues Security Updates For Critical Flaws
Cisco Systems has taken steps to enhance the security of its products by releasing a series of updates that fix critical vulnerabilities in its system. These vulnerabilities were identified as being capable of being exploited by attackers, who could then manipulate affected systems to execute arbitrary code.
New Ransomware Attack Hits Health Insurer Point32Health
A ransomware attack affecting several of its systems is being dealt with this week by a New England health insurance company that provides services to over two million people.
Raspberry Robin Adopts Initiates Evasion Techniques
Security researchers at Check Point Research (CPR) have released an advisory that details the unique evasion techniques employed by threat actors who rely on the Raspberry Robin malware to avoid detection. In the advisory published on Tuesday, CPR experts explain the novel malware features and provide technical details on how to guard against them.
Warning From UK Cyber Agency For A New 'Class' Of Russian Hackers
There is a new “class” of Russian hackers, the UK cyber-agency warns. Due to an increased danger of attacks by state-aligned Russian hackers, the National Cyber Security Centre (NCSC) of the UK is encouraging all businesses to put the recommended protection measures into place. The NCSC alert states, “during the past 18 months, a new kind of Russian hackers has developed.” These state-aligned organizations frequently support Russia’s incursion and are driven more by ideology than money.
Apple MacOS Devices Now Subject Of LockBit Ransomware
According to MalwareHunterTeam, the LockBit ransomware group is purportedly working on a new variant of malware that may encrypt data on Apple macOS. Although LockBit has traditionally concentrated on Linux and Windows systems, this would be the first instance of malware aiming at Mac devices. The ransomware organization is renowned for its RaaS (ransomware-as-a-service) business, which rents out the ransomware to online criminals in exchange for money.
Catch Up On News And Events That Happened This Week
Here is catching up on news and events that happened this week in the world of cybersecurity. Estonian National Charged in U.S. for Acquiring Hacking-Tools An Estonian was prosecuted for buying U.S. military and government equipment for Russia. On March 28, 2023, Tallinn detained 45-year-old Andrei Shevlyakov. He faces 18 conspiracy charges and others. If convicted, he may serve 20 years. Shevlyakov is accused of importing critical technology from U.S. corporations through front companies.
Superyacht-Maker Lürssen, Targeted By Ransomware Attacks
Over the Easter weekend, a well-known manufacturer of high-end yachts for the super-wealthy was the victim of a ransomware assault; however, it is unclear if private client data was taken. German Superyacht-Maker Lürssen, established in 1875, is thought to generate close to €2 billion ($2.2 billion) in annual sales and undoubtedly has an exclusive clientele, making it a prime target for cyber extortionists.
Hyundai Data Breach In France & Italy Reveals Car Owners
Hyundai Notifies Vehicle Owners in France and Italy of Data Breach. Hyundai, a South Korean multinational automaker that sells over 500,000 automobiles a year throughout Europe, has announced a data breach that has affected car owners in France and Italy. The company has warned that a hacker got unlawful access to the personal information of the company’s customers. This Hyundai Data Breach also contains phone numbers, email addresses, street locations, and vehicle chassis numbers.
Top 10 AI Jobs Taking Over With Automation
As technology evolves, artificial intelligence is becoming more prevalent in various industries. While AI technology is designed to make our lives easier, it’s also transforming job industries and taking over human responsibilities. Here we look at automation processes that AI jobs is taking over. Many people are concerned about Elon Musk’s prediction that computers, intelligent machines, and robots are the future workforce.
Military Intel Leak Investigated By US Officials
Top US officials are investigating a military intel leak. This extraordinary level of detail in the files revealed how the United States spies on both allies and enemies. This has left U.S. officials and their foreign allies stunned and occasionally enraged as they tried to figure out how dozens of classified intelligence documents ended up on the internet on Saturday.
Review Of News And Events That Happened This Week
Here is the rundown of news and events that happened this week in the world of cybersecurity. TMX Financial Reveals 4.8 Million Persons Affected By Data Breach TMX Finance, an American consumer loan company, announced a major data breach three months ago. The Savannah, Georgia-based corporation informed the Maine Attorney General that the breach likely began in early December 2022. On February 13, 2023, the corporation discovered it.
Microsoft, Fortra Gains Legal Rights Against Cobalt Strike Abuse
To combat the widespread exploitation of Cobalt Strike abuse, a legitimate testing tool that attackers have used to devastate the healthcare sector, Microsoft and two partner organizations have been given a court order.
Google Wants Android Apps To Have More Control Of Data Policy
Google strives to increase the security of Play Store apps and make users more aware of how Android apps use their data. Google is adopting a new policy for Android apps developer to give users and developers more control and clarity over the data that users share with apps. This guideline requires developers to allow users to cancel their accounts and data online and within the Android apps. Google enhances user experience by making it more straightforward for consumers to request data deletion.
How HTTPS Works And Overview Of Its Components
In the modern world, technology has enabled people to connect and communicate virtually anywhere. With the internet being a critical part of our lives, we transmit and receive a vast amount of sensitive data daily, from banking information to personal emails. However, this has made us vulnerable to cyberattacks like data breaches and identity thefts.
Marketplace 600K Records Leaked By Database Snafu
More than 600,000 records from a well-known online store have leaked due to a database bug. Concerns have been made about the security and privacy of users’ personal information in the wake of the incident brought on by a system misconfiguration. The marketplace’s IT department was conducting routine maintenance on the system when the misconfiguration that caused the data leak happened. A mistake was made during the maintenance procedure, leaving the information exposed and open to exploitation.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Olivia
Contact Olivia, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack