Infosecurity News
CISA and Partners Publish Guide For Remote Access Security
Cyber-actors are utilizing these tools for easy and broad access to victim systems
North Korean APT Group Kimsuky Expands Social Engineering Tactics
SentinelOne said the campaign specifically targets experts in North Korean affairs
"PowerDrop" PowerShell Malware Targets US Aerospace Industry
Adlumin said the malware combines elements of off-the-shelf threats and APT tactics
Cisco Counterfeiter Pleads Guilty to $100m Scheme
Dual US/Turkish citizen ran at least 19 companies
FBI Warns of Surge in Deepfake Sextortion Attempts
Fake imagery is being used to harass and extort victims
CVEs Surge By 25% in 2022 to Another Record High
Volume of new vulnerabilities has increased three-fold in a decade
Three Vulnerabilities Discovered in Game Dev Tool RenderDoc
Qualys identified one instance of privilege escalation and two heap-based buffer overflows
Exploitation of Vulnerabilities Have Soared, Unit 42 Report Finds
The Palo Alto Networks report also suggests Linux malware emerged as a growing concern last year
New ChatGPT Attack Technique Spreads Malicious Packages
Vulcan Cyber's Voyager18 research team called the technique "AI package hallucination"
BEC Volumes and Ransomware Costs Double in a Year
Annual Verizon report reveals humans are still a major source of risk
Kaspersky Releases Tool to Detect Zero-Click iOS Attacks
Fallout from Operation Triangulation continues
Clop Ransom Gang Breaches Big Names Via MOVEit Flaw
Boots, BA, the BBC and more have data compromised
Satacom Malware Campaign Steals Crypto Via Stealthy Browser Extension
The extension employs various JavaScript scripts to manipulate users' browsers
Critical Zero-Day Flaw Exploited in MOVEit Transfer
The vulnerability (CVE-2023-34362) can grant escalated privileges and unauthorized access
Spanish Bank Globalcaja Hit By Ransomware Attack
The firm said the attack occurred last Thursday and prompted it to activate its security protocols
UK Closes CCP Cyber Certification Scheme
Certified Cyber Professional will be replaced by new chartered scheme
North Korea Makes 50% of Income from Cyber-Attacks: Report
US assessment highlights significance of offensive capabilities
Atomic Wallet Customers Lose Over $35m in Crypto Attacks
Digital wallet provider still investigating cause of incidents
Enzo Biochem Hit by Ransomware, 2.5 Million Patients' Data Compromised
The information includes names, test information and 600,000 Social Security numbers
US and Korean Agencies Issue Warning on North Korean Cyber-Attacks
The advisory identifies several actors: Kimsuky, Thallium, APT43, Velvet Chollima and Black Banshee
