Infosecurity News
Clop Could Make $100m from MOVEit Campaign
Coveware claims small number of victims paid very high ransoms
US DoJ Announces Plan to Shakeup Cybercrime Investigations
In a speech, the DoJ’s Nicole M. Argentieri announced the merger of the NCET into the CCIPS
Plurilock Launches Generative AI 'Guardrails' Product for Workforces
PromptGuard is a new cloud access security broker (CASB) that supports employee AI use while ensuring that sensitive data is not released to AI systems
Russian Prosecutor Asks for 18 Years in Jail for Group-IB Founder
Ilya Sachkov, the founder of cybersecurity provider Group-IB, is accused of state treason
Chinese Hackers Breached Ambassador’s Email
Storm-0558 attack was revealed last week
Clop Drives Record Ransomware Activity in June
Scores of victims hit by MOVEit campaign
GitHub Warns Devs of North Korean Attacks
Social engineering campaign designed to deliver malicious npm packages
New Study Highlights Critical Infrastructure's Resilience
They exhibited a 20% higher threat detection behavior than the industry average
Zyxel Vulnerability Exploited by DDoS Botnets on Linux Systems
Fortinet discovered Multiple DDoS botnets, including Dark.IoT, a variant based on Mirai
Microsoft Strengthens Cloud Logging Against Nation-State Threats
The company said they collaborated closely with CISA to expand cloud logging
Old Roblox Data Leak Resurfaces, 4000 Users' Personal Information Exposed
Malicious actors have recently used an allegedly old data leak affecting Roblox developers
Half of AI Open Source Projects Reference Buggy Packages
Study also finds LLMs are poor at detecting malicious code
CNI Firms: Climate Tech is Increasing Cyber Risk
UK’s critical infrastructure sector concerned over expanding attack surface
Estee Lauder Breached by Two Ransomware Groups
Cosmetics giant confirms data was taken
Chinese APT41 Linked to WyrmSpy and DragonEgg Surveillanceware
Lookout attributed WyrmSpy and DragonEgg to APT41 due to overlapping Android signing certificates
Critical API Security Gaps Found in Financial Services
The Salt Security report also notes a 244% surge in unique attackers between H1 and H2 2022
How Cyber Threat Intelligence Practitioners Should Leverage Automation and AI
The Cyber Threat Intelligence Summit discussed how automation and generative AI could help CTI practitioners tackle the overload of data they have to process
Biden-Harris Administration Unveils Smart Device Cyber Program
The criteria for certification are set to be based on cybersecurity guidelines published by NIST
Industry Experts Urge CISA to Update Secure by Design Guidance
A letter authored by industry experts says that CISA should include specific details on how to implement security-by-design through threat modeling
Scam Job Offers Target Uni Students
Threat actors exploit high cost of living
