Infosecurity News

Cisco Talos Discusses Flaws in SOHO Routers Post-VPNFilter
Over the last five years the firm reported and mitigated 141 advisories, encompassing 289 CVEs

Microsoft Teams Targeted in Midnight Blizzard Phishing Attacks
The Russia-based actor exploited compromised Microsoft 365 tenants owned by small businesses

Cyber-Attacks Targeting Government Agencies Increase 40%
BlackBerry found that public services now rank as the second most targeted industry by threat actors

Menlo Leverages Advanced Technology to Combat Surging Browser Threats
Menlo Security co-founder highlights the challenge relating to web browser security and how to overcome them

Humans Unable to Reliably Detect Deepfake Speech
Research from UCL finds that humans struggle to identify deepfake audio

Cocaine Smugglers that Posed as PC Sellers Jailed
Four members behind bars after EncroChat bust

Hundreds of Citrix Endpoints Compromised With Webshells
Zero-day exploit warning was issued a week ago

Ivanti Discloses Yet Another Critical Flaw
Latest bug described as a patch bypass

Manufacturing Sector Reeling From Financial Costs of Ransomware
Analysis by Comparitech found that manufacturers have lost $46.2bn from ransomware attacks in downtime alone since 2018

AI-Powered CryptoRom Scam Targets Mobile Users
Sophos security researchers shared the findings in a report published today

Threat Actors Use AWS SSM Agent as a Remote Access Trojan
Mitiga’s research demonstrated two potential attack scenarios

Cloud Firm Under Scrutiny For Suspected Support of APT Operations
Halcyon said that Cloudzy has been playing a pivotal role in facilitating cyber-criminal activities

AI-Enhanced Phishing Driving Ransomware Surge
Reported ransomware attacks targeting municipalities, education and healthcare in 2023 has quadrupled compared with 2021

Russian Cybersecurity Exec Wanted By Russia and US
Nikita Kislitsin is currently being detained in Kazakhstan

OT/IoT Malware Surges Tenfold in First Half of the Year
Nozomi Networks warns of escalating threats

CISA in New Warning Over Ivanti Vulnerabilities
Agency says two bugs are being chained in attacks

Novel Worm-Like Malware P2Pinfect Targets Redis Deployments
Cado Security said the malware acts as a botnet and is compatibille with both Windows and Linux

Canon Inkjet Printers Expose Wi-Fi Threat
The printers retained various information after re-initialization, including SSIDs and passwords

Cloud Tech Debt Puts Millions of Apps at Risk, Says New Report
Published by Qualys, the document draws from anonymized global cloud scans conducted in April 2023

New Infostealer Uncovered in Phishing Scam Targeting Facebook Business Accounts
Unit 42 researchers detail a campaign that aimed to instal an infostealer variant capable of taking over Facebook business accounts



