Infosecurity News
Safer Internet Day: Two Million Brits Victims of Financial Identity Fraud
A new report suggests nearly 2 million UK adults have had their identity stolen and used by fraudsters to open a financial account in 2023
Meta's Oversight Board Urges a Policy Change After a Fake Biden Video
A fake video showing US President Joe Biden touching his granddaughter’s chest remains on Facebook despite an Oversight Board investigation
Latest Ivanti Zero Day Exploited By Scores of IPs
Shadowserver Foundation spots 170 distinct IP addresses trying to exploit Ivanti zero-day CVE-2024-21893
US Cracks Down on Spyware with Visa Restrictions
The US government will deny visas to those involved in misusing spyware
ResumeLooters Gang Raids Retail and Job Site Data
Group-IB uncovers mass data theft campaign from Chinese-speaking ResumeLooters hackers
Pennsylvania Courts’ Website Disrupted by DoS Attack
A number of court web systems have been taken offline in the US state of Pennsylvania following a denial of service attack
US Condemns Iran, Issues Sanctions for Cyber-Attacks on Critical Infrastructure
The US has announced sanctions against six Iranians responsible for an attack on Unitronics, an Israeli manufacturer of systems used in the water sector
AnyDesk Hit by Cyber-Attack and Customer Data Breach
The cyber-attack that hit the remote tool provider could have a more significant impact than initially expected
Clorox and Johnson Controls Reveal $76m Cyber-Attack Bill
SEC filings reveal multimillion-dollar costs of two serious 2023 cyber-attacks on Clorox and Johnson Controls
UK Court Backlog Blocks Attempts to Fight Fraud Epidemic
KPMG research finds a similar number of high-value UK fraud cases heard in 2023 to previous year
Teen Chatting App Wizz Removed from Apple and Google Stores for Sextortion Concerns
The Tinder-like app has countered claims of being a hot spot for sextortion scammers
Romance Scam Victims Surge in 2023
New data from Lloyds found that romance scam victims increased by 22% in 2023, with the average amount lost per incident £6937
Cloudflare Suffers Breach After Failing to Rotate Stolen Okta Credentials
Cloudflare revealed suspected nation-state attackers compromised its systems and accessed source code using credentials stolen in the Okta breach
LockBit Reigns Supreme in Soaring Ransomware Landscape
The last quarter of 2023 saw an 80% year-on-year increase in ransomware victim claims, according to ReliaQuest
US Agencies Failure to Oversee Ransomware Protections Threaten White House Goals
A GAO report found that federal agencies are not assessing whether critical infrastructure sectors are implementing NIST ransomware protection guidance
Interpol-Led Initiative Targets 1300 Suspicious IPs
Global collaborative effort focused on combating the global rise of phishing, malware and ransomware
Pump-and-Dump Schemes Make Crypto Fraudsters $240m
Chainalysis reveals that pump-and-dump schemes made Ethereum market manipulators over $240m in 2023 alone
Google’s Bazel Exposed to Command Injection Threat
Cycode stressed securing software supply chains amid complex dependencies and third-party actions
US Thwarts Volt Typhoon Cyber Espionage Campaign Through Router Disruption
US government agencies took down the botnet of Chinese APT Volt Typhoon, used to target critical infrastructure for nation-state espionage
Ivanti Releases Zero-Day Patches and Reveals Two New Bugs
Ivanti has finally released updates to fix two zero-day bugs and two new high-severity vulnerabilities
