Infosecurity News

  1. MITRE and CISA Release OT Attack Emulation Tool

    The open source tool will enable cyber teams to consistently test and boost the defenses of ICS environments

  2. Russia-Backed APT28 Tried to Attack a Ukrainian Critical Power Facility

    The attack has been carried out using legitimate services and standard software functions, CERT-UA observed

  3. High-Severity Vulnerability Discovered in Popular CMS

    The unpatched bug in PHPFusion could result in the theft of sensitive data, Synopsys researchers warn

  4. UK Boards Are Growing Less Concerned About Cyber-Risk

    Their global peers feel the opposite, according to Proofpoint study

  5. Experts Uncover Underground Phishing “Empire” W3LL

    Secretive group targets specifically Microsoft 365 accounts

  6. Crypto Casino Stake.com Back Online After $40m Heist

    Hot wallets were compromised at firm

  7. Mend.io SAML Vulnerability Exposed

    SAML flaw in enabled rogue customers to access others’ SaaS data

  8. Airlines Battle Surge in Loyalty Program Fraud

    Group-IB said 2022 saw 30% more loyalty fraud, impacting 75+ airlines and involving 2000 malicious sources

  9. UK Electoral Commission Fails Cybersecurity Test Amid Data Breach

    Auditors cited outdated software and unsupported iPhones as key reasons for the failed test

  10. More Schools Hit By Cyber-Attacks Before Term Begins

    Highgate Wood School forced to delay new term for six days

  11. UK National Cyber Security Centre Gets a New CTO

    Industry veteran Ollie Whitehouse is confirmed

  12. Freecycle Breach May Have Hit Millions of Users

    Non-profit urges all users to reset passwords

  13. Python Package Index Targeted Again By VMConnect

    ReversingLabs uncovered three additional malevolent packages believed to be part of the campaign

  14. New Attack Technique “MalDoc in PDF” Alarms Experts

    JPCERT/CC said it can elude detection by embedding a malicious Word file within a PDF document

  15. Medical Data Breach: Ayush Jharkhand Hacked

    According to CloudSEK, the leaked database contains over 320,000 patient records

  16. Sensitive Data about UK Military Sites Potentially Leaked by LockBit

    Zaun, the UK’s only manufacturer of fencing systems, saw its IT systems being compromised in early August

  17. Sydney University Suffers Supply Chain Breach

    Blast radius appears limited to international students

  18. Four Convicted in $18m Investment Fraud Scheme

    The Brittingham Group promised outsized returns to victims

  19. Suffolk High School Forced Offline After Cyber-Attack

    Separate research warns of widespread email security failings

  20. Smishing Triad: China-Based Fraud Network Exposed

    Resecurity explained the “Smishing Triad” campaign exclusively utilizes iMessages

What’s hot on Infosecurity Magazine?