Infosecurity News
British Library: Ransomware Recovery Could Take Months
Famed institution warns of ongoing disruption
CSA Launches First Zero Trust Certification
The CCZT program incorporates foundational principles from leading sources such as CISA and NIST
Cyber-Criminals Exploit Gaza Crisis With Fake Charity
Attackers sought crypto donations of $100-$5000 using Bitcoin, Litecoin and Ethereum addresses
Russian Hacking Group Sandworm Linked to Unprecedented Attack on Danish Critical Infrastructure
A report described the coordinated attack, in which 22 critical infrastructure firms were targeted
Black Friday: Malwarebytes Warns of Credit Card Skimming Surge
Skimming threat actors ramp up their activity just in time for the holiday season
Half of Ransomware Groups Operating in 2023 Are New
WithSecure report highlights widespread code reuse
BlackCat Ransomware Group Reports Victim to SEC
ALPHV/BlackCat tries unusual extortion technique
European Police Take Down $9m Vishing Gang
Fraudsters operated from Ukrainian call centers
US Government Unveils First AI Roadmap For Cybersecurity
The initiative aligns with President Biden’s recent Executive Order
BlackCat Ransomware Gang Targets Businesses Via Google Ads
Nitrogen serves as initial-access malware, using obfuscated Python libraries for stealth
UK Privacy Regulator Issues Black Friday Smart Device Warning
Consumers urged to think before they buy connected technology
Microsoft Fixes Five Zero-Day Vulnerabilities
Patch Tuesday includes fixes for three actively exploited bugs
US Dismantles IPStorm Botnet Proxy Service
Russian-Moldovan national faces maximum 30-year jail stretch
Python Package Index Faces Security Crisis With Validated Leaks
2922 projects contained at least one unique secret, including from AWS, Redis and Google
82% of Attacks Show Cyber-Criminals Targeting Telemetry Data
Sophos report based on 232 IR cases across 25 sectors from January 1 2022 to June 30 2023
Pro-Palestine APT Group Uses Novel Downloader in New Campaign
TA402 launches new targeted phishing campaigns
Royal Ransomware Gang Demands $275m in a Year
CISA highlights links to newer Blacksuit variant
NCSC: UK Facing “Enduring and Significant” Cyber-Threat
Critical infrastructure providers under pressure from state-backed groups
Information-Stealing Malware Escalates in Online Gaming
A report by Sekoia.io shed light on a targeted campaign using Discord and fake download websites
Python Malware Poses DDoS Threat Via Docker API Misconfiguration
Cado Security Labs said the bot agent exhibited various methods for conducting DDoS attacks
