Infosecurity News
Malicious PyPI Packages Use Compiled Python Code to Bypass Detection
According to ReversingLabs this could be the first supply chain attack capitalizing on PYC files
Insurers Predict $33bn Bill for Catastrophic "Cyber Event"
One-in-200 year event could stem from cloud, data breach or ransomware
Chinese Phishing Gang "PostalFurious" Expands Campaign
Latest victims of smishing attacks are UAE residents
Kaspersky Says it is Being Targeted By Zero-Click Exploits
Possible US campaign began in 2019
Horabot Campaign Targets Spanish-Speaking Users in the Americas
Cisco Talos said the threat actor behind the campaign is believed to be located in Brazil
Void Rabisu's RomCom Backdoor Reveals Shifting Threat Actor Goals
Trend Micro said the motives of Void Rabisu seem to have changed since at least October 2022
Potential Backdoor in Gigabyte PCs Exposes Supply Chain Risks
Eclypsium is working closely with Gigabyte to rectify insecure implementation of its app center
HMRC in New Tax Credits Scam Warning
Claimants bombarded by phishing emails, phone calls and texts
Amazon to Pay $31m After FTC's Security and Privacy Allegations
Regulator's proposed order to cover civil penalty and consumer refunds
Zyxel Customers Urged to Patch Exploited Bug
Vulnerability being "widely exploited" in Mirai-based botnet attacks
New "Migraine" Flaw Enables Attackers to Bypass MacOS Security
Discovered by Microsoft and dubbed "Migraine," the flaw was disclosed to Apple and patched
SpinOk Trojan Compromises 421 Million Android Devices
The Doctor Web team unveiled information about the malware in an advisory published on Monday
IDSA: Only 49% of Firms Invest in Identity Protection Before Incidents
Just 29% take action after having already experienced a security incident
Danni Brooke to Spotlight the Role of Women in Cyber at Infosecurity Europe 2023
Danni Brooke, former Met police officer and star of Channel 4’s Hunted, has been confirmed as the keynote speaker at this year’s Women in Cybersecurity event
Pentagon Cyber Policy Cites Learnings from Ukraine War
New 2023 strategy document sent to Congress
WordPress Rushes Out Jetpack Patch to Millions
Bug could allow malicious actors to manipulate files
Dark Pink APT Group Expands Tooling and Targets
Group-IB spots five new victims
Nigerian Cybercrime Ring's Phishing Tactics Exposed
The criminal enterprise resulted in losses of up to $1m
Human Error Fuels Industrial APT Attacks, Kaspersky Reports
OT network admins grant access to employees or contractors without sufficient security measures
DogeRAT Malware Impersonates BFSI, Entertainment, E-commerce Apps
Discovered by CloudSEK, the malicious campaign relies on open source Android malware
