Infosecurity News
Understanding NullBulge, the New AI-Fighting 'Hacktivist' Group
The threat actor who claimed the recent Disney hack previously targeted AI-centric games and applications with commodity malware and ransomware
Paris 2024 Olympics Face Escalating Cyber-Threats
Fortinet observed an 80-90% increase in darknet activity targeting the Olympics between 2023 and 2024
Sensitive Data Sharing Risks Heightened as GenAI Surges
Netskope found that 96% of organizations use generative AI applications, with sensitive data frequently shared with these tools
Global Police Swoop on Black Axe Cybercrime Syndicate
Interpol claims hundreds of arrests were made as police disrupted the West African Black Axe cybercrime gang
CISA: Patch Critical GeoServer GeoTools Bug Now
CISA has told federal agencies to patch a critical GeoServer GeoTools vulnerability under active exploitation
MHTML Exploited By APT Group Void Banshee
Void Banshee targeted North American, European and Southeast Asian regions with the Atlantida stealer
Iranian MuddyWater Upgrades Arsenal With New Custom Backdoor
The Iranian APT group has shifted away from using legitimate remote monitoring tools to compromise its victims
Hacktivists Claim Leak Over 1 Terabyte of Disney Data
Disney unreleased projects and internal data are part of a data leak claimed by hacktivist group ‘NullBulge’
Hacktivist Groups Target Romania Amid Geopolitical Tensions
CyberDragon and Cyber Army of Russia, among others, have claimed responsibility for the attacks
Half of SMEs Unprepared for Cyber-Threats
JumpCloud found that half of SME IT teams believe they lack the resources and staffing to defend their organization against cyber-threats
Kaspersky to Quit US Following Commerce Department Ban
Russian AV-maker Kaspersky is set to shutter its US operations from Saturday
Two-Fifths of Senior Citizens Suffer Frequent Fraud Attempts
A Portsmouth University study finds that large numbers of elderly citizens are being harassed by phone fraudsters
CRYSTALRAY Cyber-Attacks Grow Tenfold Using OSS Tools
Sysdig said CRYSTALRAY used a variety of open source security tools to scan for vulnerabilities
WP Time Capsule Plugin Update Urged After Critical Security Flaw
The WordPress plugin has over 20,000 active installations and is used for site backups and update management
Attackers Exploit URL Protections to Disguise Phishing Links
Barracuda has observed attackers using three different URL protection services to mask their phishing URLs, bypassing email security tools
Pharmacy Giant Rite Aid Hit By Ransomware
US pharmacy chain Rite Aid has confirmed a cybersecurity ‘incident’ in June
Google Lines Up $23bn Swoop For Startup Wiz Security
Google is in talks to acquire security startup Wiz Security
Hackers Downloaded Call Logs from Cloud Platform in AT&T Breach
AT&T discloses data breach where hackers accessed customer call logs from a cloud platform in April
Indiana County Files Disaster Declaration Following Ransomware Attack
Clay County, Indiana, said a ransomware attack has prevented the administration of critical services, leading to a disaster declaration being filed
Snowflake Breach at Advance Auto Parts Hits 2.3 Million People
Advance Auto Parts has confirmed a breach of its Snowflake account will impact millions
