Infosecurity News

  1. Vietnam’s Infostealer Crackdown Reveals VietCredCare and DuckTail

    Group-IB revealed key differences in VietCredCare and DuckTail infostealer malware targeting Facebook Business accounts

  2. Google OSS-Fuzz Harnesses AI to Expose 26 Hidden Security Vulnerabilities

    One of these flaws detected using LLMs was in the widely used OpenSSL library

  3. BianLian Ransomware Group Adopts New Tactics, Posing Significant Risk

    The BianLian ransomware group has shifted exclusively to exfiltration-based extortion and is deploying multiple new TTPs for initial access and persistence

  4. Lumma Stealer Proliferation Fueled by Telegram Activity

    Spreading malware via Telegram channels allows threat actors to bypass traditional detection mechanisms and reach a broad, unsuspecting audience

  5. A Fifth of UK Enterprises “Not Sure” If NIS2 Applies

    Over a fifth of large UK businesses aren’t sure of their compliance responsibilities under the new NIS2 directive

  6. Five Charged in Scattered Spider Case

    Five men have been indicted in connection with crimes committed by the Scattered Spider group

  7. Five Privilege Escalation Flaws Found in Ubuntu needrestart

    Five LPE flaws in Ubuntu’s needrestart utility enable attackers to gain root access in versions prior to 3.8

  8. 60% of Emails with QR Codes Classified as Spam or Malicious

    60% of QR code emails are spam according findings from Cisco Talos, who also identified attackers using QR code art to bypass security filters

  9. Chinese APT Group Targets Telecom Firms Linked to Belt and Road Initiative

    CrowdStrike unveiled a new Chinese-aligned hacking group allegedly spying on telecom providers

  10. Apple Issues Emergency Security Update for Actively Exploited Vulnerabilities

    Apple has urged customers to download the security updates, which address vulnerabilities relating to the JavaScriptCore and WebKit frameworks

  11. OWASP Warns of Growing Data Exposure Risk from AI in New Top 10 List for LLMs

    OWASP has updated its Top 10 list of risks for LLMs and GenAI, upgrading several areas and introducing new categories

  12. Hackers Hijack Jupyter Servers for Sport Stream Ripping

    Aqua Security has observed threat actors using compromised Jupyter servers in a bid to illegally stream sporting events

  13. One Deepfake Digital Identity Attack Strikes Every Five Minutes

    Entrust claims deepfakes are driving a surge in digital identity fraud

  14. Cybercriminals Exploit Weekend Lull to Launch Ransomware Attacks

    Ransomware groups are targeting weekends and holidays to exploit understaffed security teams in order to get the best chance of a pay day

  15. CISA Chief Jen Easterly Set to Step Down on January 20

    Easterly and her Deputy Director Nitin Natarajan are expected to leave office before President-elect Trump names a new leadership

  16. T-Mobile Breached in Major Chinese Cyber-Attack on Telecoms

    T-Mobile was hit by Salt Typhoon, a Chinese cyber-espionage group targeting US and global telecom firms

  17. Helldown Ransomware Expands to Target VMware and Linux Systems

    Helldown ransomware has expanded its reach to target Linux and VMware systems, exploiting Zyxel firewall vulnerabilities and exfiltrating data

  18. Palo Alto Networks Patches Critical Firewall Vulnerability

    Palo Alto advised users to patch urgently as the vulnerability is critical and actively exploited in the wild

  19. Ransomware Gangs on Recruitment Drive for Pen Testers

    Ransomware groups are recruiting pen testers from the dark web to expand their operations, as revealed by Cato Network's Q3 2024 SASE Threat Report

  20. Suspected Phobos Ransomware Admin Extradited to US

    A Russian national suspected of involvement in Phobos ransomware has appeared in court in the US

What’s hot on Infosecurity Magazine?