Infosecurity News
Patched Critical Flaw Exposed JetBrains TeamCity Servers
Tracked as CVE-2024-23917, the flaw carries a CVSS rating of 9.8
Google and CSA Singapore Combat Android Fraud With New Pilot
The initiative aims to tackle mobile fraud by auto-blocking apps seeking sensitive permissions
Meta to Introduce Labeling for AI-Generated Images Ahead of US Election
Meta will start working on detecting AI images generated from rival services ahead of the November 2024 US presidential election
Ransomware Payments Hit $1bn All-Time High in 2023
Chainalysis monitoring of blockchain transactions reveals ransomware payments hit a record $1bn in 2023
Chinese Spies Hack Dutch Networks With Novel Coathanger Malware
Dutch intelligence services have blamed China for an attack last year targeting FortiGuard devices
Malware-as-a-Service Now the Top Threat to Organizations
The Darktrace report observed an increasing cross-functional adaption of many MaaS strains in 2023
Safer Internet Day: Two Million Brits Victims of Financial Identity Fraud
A new report suggests nearly 2 million UK adults have had their identity stolen and used by fraudsters to open a financial account in 2023
Meta's Oversight Board Urges a Policy Change After a Fake Biden Video
A fake video showing US President Joe Biden touching his granddaughter’s chest remains on Facebook despite an Oversight Board investigation
Latest Ivanti Zero Day Exploited By Scores of IPs
Shadowserver Foundation spots 170 distinct IP addresses trying to exploit Ivanti zero-day CVE-2024-21893
US Cracks Down on Spyware with Visa Restrictions
The US government will deny visas to those involved in misusing spyware
ResumeLooters Gang Raids Retail and Job Site Data
Group-IB uncovers mass data theft campaign from Chinese-speaking ResumeLooters hackers
Pennsylvania Courts’ Website Disrupted by DoS Attack
A number of court web systems have been taken offline in the US state of Pennsylvania following a denial of service attack
US Condemns Iran, Issues Sanctions for Cyber-Attacks on Critical Infrastructure
The US has announced sanctions against six Iranians responsible for an attack on Unitronics, an Israeli manufacturer of systems used in the water sector
AnyDesk Hit by Cyber-Attack and Customer Data Breach
The cyber-attack that hit the remote tool provider could have a more significant impact than initially expected
Clorox and Johnson Controls Reveal $76m Cyber-Attack Bill
SEC filings reveal multimillion-dollar costs of two serious 2023 cyber-attacks on Clorox and Johnson Controls
UK Court Backlog Blocks Attempts to Fight Fraud Epidemic
KPMG research finds a similar number of high-value UK fraud cases heard in 2023 to previous year
Teen Chatting App Wizz Removed from Apple and Google Stores for Sextortion Concerns
The Tinder-like app has countered claims of being a hot spot for sextortion scammers
Romance Scam Victims Surge in 2023
New data from Lloyds found that romance scam victims increased by 22% in 2023, with the average amount lost per incident £6937
Cloudflare Suffers Breach After Failing to Rotate Stolen Okta Credentials
Cloudflare revealed suspected nation-state attackers compromised its systems and accessed source code using credentials stolen in the Okta breach
LockBit Reigns Supreme in Soaring Ransomware Landscape
The last quarter of 2023 saw an 80% year-on-year increase in ransomware victim claims, according to ReliaQuest