Infosecurity News
Modular "AlienFox" Toolkit Used to Steal Cloud Service Credentials
Harvesting API keys and secrets from AWS SES, Microsoft Office 365 and other services
New Azure Flaw "Super FabriXss" Enables Remote Code Execution Attacks
The cross-site scripting flaw affects SFX version 9.1.1436.9590 or earlier and has a CVSS of 8.2
UK Regulator: HIV Data Protection Must Improve
ICO issues call after reprimanding NHS Highland
GCHQ Updates Security Guidance for Boards
Agency wants business leaders to get serious about cyber
Ukrainian Police Bust Multimillion-Dollar Phishing Gang
More than 100 sites created to lure European victims
North Korean Hackers Use Trojanized 3CX DesktopApp in Supply Chain Attacks
Windows and Mac versions of the software were compromised to deliver infostealers
Over 70% of Employees Keep Work Passwords on Personal Devices
95% of security leaders are also concerned about phishing attacks via private messaging apps
FDA Protects Medical Devices Against Cyber-Threats With New Measures
New medical devices applications should "monitor, identify, and address" cybersecurity issues
Volume of HTTPS Phishing Sites Surges 56% Annually
Scammers are increasingly trying to legitimize their efforts
NCA Celebrates Multimillion-Pound Fraud Takedowns
Agency says it has seized hundreds of assets in month-long operation
Thieves Steal $9m from Crypto Liquidity Pool
SafeMoon claims exploited vulnerability was to blame
Google Warns Against Commercial Spyware Exploiting Zero-Days
Spyware vendors facilitated the spread of malware by government-backed threat actors
Clop Ransomware Group Exploits GoAnywhere MFT Flaw
The vulnerability has a CVSS score of 7.2 and was exploited against several companies in the US
Attacks Targeting APIs Increased By 400% in Last Six Months
The new Salt Security report found that 80% of attacks happened over authenticated APIs
ChatGPT Vulnerability May Have Exposed Users’ Payment Information
The breach was caused by a bug in an open-source library
Tech Industry Bids to Tackle Cyber-Mercenary Epidemic
New principles designed to disrupt and limit a rapidly growing market
Just 1% of Cloud Permissions Are Actively Used
Microsoft warns of "permissions gap" security threat
Experts Warn of Self-Funding North Korean Group APT43
Mandiant says unit is focused on espionage and crypto theft
Clipboard-Injector Attacks Target Cryptocurrency Users
The malware campaign relying on this technique was observed abusing Tor Browser installers
Apple Releases Security Patches For Older iPhone and iPad Models
The vulnerability refers to a type confusion bug in the WebKit browser engine
