Infosecurity News
Clop Gang Offers Data Downloads Via Torrents
Latest innovation designed to speed up download process
Stealthy npm Malware Exposes Developer Data
Phylum said the attack demonstrated a carefully crafted development cycle
VMConnect: Python PyPI Threat Imitates Popular Modules
ReversingLabs said the attackers displayed a sophisticated approach and techniques
CISA Announces 2024-2026 Strategic Plan
The US’ leading cybersecurity agency calls for us to “embody the hacker spirit” in its latest strategic plan
Sophisticated Phishing Exploits Zero-Day Salesforce Vulnerability
Guardio Labs detected the campaign and detailed its findings in a technical blog post
Microsoft Warns of Growing Cyber-Threats to Sporting Events
Microsoft observed attackers continually attempting to compromise connected systems at the 2022 World Cup
Credentials Account For Over Half of Cloud Compromises
Google Cloud figures also point to misconfiguration
Legacy Flaws Dominate Top 12 Vulnerabilities List
Security agencies urge timely patching
UK Government: Cyber-Attacks Could Kill or Maim Thousands
Risk assessment predicts critical infrastructure attacks could cost billions
Hacktivist Collective “Mysterious Team Bangladesh” Revealed
Group-IB said the group carried out 750 DDoS attacks and more than 70 website defacements in a year
Cisco Talos Discusses Flaws in SOHO Routers Post-VPNFilter
Over the last five years the firm reported and mitigated 141 advisories, encompassing 289 CVEs
Microsoft Teams Targeted in Midnight Blizzard Phishing Attacks
The Russia-based actor exploited compromised Microsoft 365 tenants owned by small businesses
Cyber-Attacks Targeting Government Agencies Increase 40%
BlackBerry found that public services now rank as the second most targeted industry by threat actors
Menlo Leverages Advanced Technology to Combat Surging Browser Threats
Menlo Security co-founder highlights the challenge relating to web browser security and how to overcome them
Humans Unable to Reliably Detect Deepfake Speech
Research from UCL finds that humans struggle to identify deepfake audio
Cocaine Smugglers that Posed as PC Sellers Jailed
Four members behind bars after EncroChat bust
Hundreds of Citrix Endpoints Compromised With Webshells
Zero-day exploit warning was issued a week ago
Ivanti Discloses Yet Another Critical Flaw
Latest bug described as a patch bypass
Manufacturing Sector Reeling From Financial Costs of Ransomware
Analysis by Comparitech found that manufacturers have lost $46.2bn from ransomware attacks in downtime alone since 2018
AI-Powered CryptoRom Scam Targets Mobile Users
Sophos security researchers shared the findings in a report published today
