Infosecurity News

  1. NCA: Nation States Using Cybercrime Groups as Proxies

    Crime agency chief warns of surging online threat

  2. Norwegian Giant Tomra Suffers “Extensive” Attack

    Employees forced to work from home after IT outage

  3. New Vulnerabilities Found in Adobe ColdFusion

    Rapid7 has observed that some vulnerabilities in Adobe ColdFusion were still being exploited several days after the patches were published

  4. CISA Unveils Guide to Aid Firms Transition to Cloud Security

    It mentions the CSET, SCuBAGear, Untitled Goose Tool, Decider and Memory Forensic on Cloud

  5. drIBAN Fraud Operations Target Corporate Banking Customers

    The web injects allow cyber-criminals to manipulate legitimate web pages' content in real time

  6. JumpCloud Confirms Data Breach By Nation-State Actor

    The attack vector was identified as data injection into the firm's commands framework

  7. Suspected Scareware Fraudster Arrested After Decade on the Run

    Ukrainian said to have caused victim losses of $70m

  8. WooCommerce Bug Exploited in Targeted WordPress Attacks

    Wordfence claims over 157,000 sites have been hit so far

  9. IT Security Pro Jailed for Attempted Extortion

    Hertfordshire man pleaded guilty in May

  10. BreachForums Admin Pleads Guilty to Hacking Charges

    The guilty plea also covered a separate count of possession of child pornography

  11. Ukraine's CERT-UA Exposes Gamaredon's Rapid Data Theft Methods

    The group utilize malware like GAMMASTEEL to rapidly exfiltrate files within 30-50 minutes

  12. Sorillus RAT and Phishing Attacks Exploit Google Firebase Hosting

    eSentire found the threat after detecting suspicious code in a manufacturing customer's network

  13. EU Urged to Prepare for Quantum Cyber-Attacks

    A discussion paper from the European Policy Centre sets out recommendations for an EU quantum cybersecurity agenda

  14. Russian Charged with Tech Smuggling and Money Laundering

    Man accused of aiding the Kremlin with dual-use tech

  15. Health Tech Vendor to Pay $31m After Kickback Allegations

    NextGen Healthcare was accused of violating False Claims Act

  16. Acting White House Cyber Director Withdraws Nomination

    Reports suggest personal debt behind Kemba Walden’s decision

  17. AI Tool WormGPT Enables Convincing Fake Emails For BEC Attacks

    Security expert Daniel Kelley worked with the SlashNext team on the research

  18. New Threat Actor Launches Cyber-attacks on Ukraine and Poland

    Cisco Talos said the malicious campaigns started in April 2022 and are currently ongoing

  19. LokiBot Malware Targets Windows Users in Office Document Attacks

    Fortinet suggests attackers are leveraging vulnerabilities like CVE-2021-40444 and CVE-2022-30190

  20. Chinese APT Favorite Backdoor Found in Pakistani Government App

    Trend Micro found a backdoor previously exploited by various Chinese threat actors in a popular application used by Pakistan’s government agencies

What’s hot on Infosecurity Magazine?