Infosecurity News

Scores of US Critical Infrastructure Firms Hit by Ransomware
FBI reveals concerning new details of RagnarLocker campaigns

Dirty Pipe Exploit Rings Alarm Bells in the Linux Community
New discovery could give attackers full control over a targeted system

PressReader Suffers Cyber-Attack
Access blocked to 7000 publications after strike on world’s largest digital newspaper distributor

Weight Management Companies Settle Data Privacy Suit
Kurbo and WW International pay $1.5m penalty over alleged violations of children’s privacy laws

Samsung Source Codes Stolen
Tech company confirms source codes for Galaxy devices among data snatched in cyber-attack

Musk Warns Starlink Could Attract Russian Bombs
Satellite comms system is helping Ukraine stay online

Counterfeit and Pirated Imports Surge During Pandemic
Europol report warns of risk to economy and citizens’ health

Ukraine Set to Join NATO Cyber Hub
Members voted unanimously to admit Eastern European nation

Senate Passes Strengthening American Cybersecurity Act
Legislation requiring critical infrastructure operators to report cyber-attacks within 72 hours goes to House

Cyber-Criminals Exploit Invasion of Ukraine
Rise in malspam campaigns exploiting attack on Ukraine by Russia

Vulnerabilities in Over 100k Medical Infusion Pumps
Security researchers find 75% of smart infusion pumps are susceptible to known vulnerabilities

Nearly All Cybersecurity Companies Expose AWS Assets - Report
Study uncovers 200,000 such assets across 35 vendors

Over 60% of SOC Analysts Are Planning to Quit Next Year
Report reveals SecOps teams are overworked and understaffed

Russian Claims YouTube "Misinformation" to Blame for Protests
In the meantime, Ukrainian sites are being hacked to spread fake new

Cyber-Attack on New York Ethics Watchdog
Servers of Joint Commission on Public Ethics targeted by cyber-criminals

HHS Issues Threat Warning to US Healthcare Sector
Healthcare organizations told they could be targeted by cyber-attacks linked to Russian invasion of Ukraine

Most Disclosed ICS Vulnerabilities are Low Complexity
Past four years sees surge in ICS vulnerability disclosures with most vulnerabilities of low complexity

#CCSE22: Why Are Organizations Getting Zero Trust "Wrong"?
A star-studded panel discussion explored implementing zero trust and reducing overall risk

#CCSE22: The Latest Cybersecurity Workforce Trends
ISC(2) provided a deepdive insight into the current state of the cybersecurity workforce

Vulnerability Exploit Attempts Surge Tenfold Against Ukrainian Websites
Thirty Ukrainian university sites compromised during first days of invasion



