Infosecurity News
GambleForce Group Targets Websites With SQL Injection
Group-IB warns of new threat actor GambleForce, which uses SQL injection attacks to steal data from websites
Microsoft Targets Prolific Outlook Fraudster Storm-1152
Microsoft disrupts Vietnam based threat group Storm-1152, which has sold 750 million fake accounts
MITRE Launches Critical Infrastructure Threat Model Framework
MITRE’s EMB3D provides industrial manufacturers with a shared understanding to mitigate cyber threats
Russia Set to Ramp Up Attacks on Ukraine’s Allies This Winter
Russian cyber campaigns aim to disrupt Western allies’ ability and motivation to support Ukraine’s war effort
UK at High Risk of Catastrophic Ransomware Attack, Government Ill-Prepared
A UK parliament report found that large swathes of critical national infrastructure are vulnerable to ransomware
Microsoft Fixes 34 CVEs and One Zero-Day in December Patch Tuesday
Microsoft has released updates for dozens of vulnerabilities including one zero-day flaw
UK Ministry of Defence Fined For Afghan Data Breach
The ICO has fined the Ministry of Defence after an email data breach put lives in danger
Ukraine Claims it “Paralyzed” Russia’s Tax System
Ukrainian Ministry of Defense says cyber-attack wiped Russian tax system servers
Widespread Security Flaws Blamed for Northern Ireland Police Data Breach
An independent review of the August 2023 PSNI data breach found major security failings in the police department’s IT systems
Ukraine's Largest Phone Operator Hack Tied to War With Russia
Kyivstar announced its mobile network had temporarily been shut down due to a major cyber-attack on its systems
Threat Actor Targets Recruiters With Malware
Recruiters are urged to educate staff about a surge in phishing attacks from threat group TA4557
Backup Migration WordPress Plugin Flaw Impacts 90,000 Sites
Users of popular WordPress plugin Backup Migration are urged to patch a new critical vulnerability
Apache Warns of Critical Vulnerability in Struts 2
Users are urged to patch critical vulnerability in Apache Struts 2 immediately
Lazarus Group Targets Log4Shell Flaw Via Telegram Bots
Cisco Talos said Operation Blacksmith leveraged the flaw in publicly facing VMWare Horizon servers
Europol Raises Alarm on Criminal Misuse of Bluetooth Trackers
The majority of reported cases involved cocaine smuggling
EU Reaches Agreement on AI Act Amid Three-Day Negotiations
The landmark bill will regulate the use of generative AI models like ChatGPT and AI systems used by governments and law enforcement
ALPHV/BlackCat Site Downed After Suspected Police Action
Notorious ransomware collective ALPHV/BlackCat may have been disrupted by law enforcement
Police Arrest Hundreds of Human Traffickers Linked to Cyber Fraud
Interpol operation leads to arrest of hundreds on suspicion of human trafficking and fraud
Two-Fifths of Log4j Apps Use Vulnerable Versions
Two years after a critical vulnerability was found in utility Log4j, 38% of apps still use buggy versions
ICO Warns of Fines for “Nefarious” AI Use
UK privacy regulator, the information commissioner, says illegal use of AI will be punished with fines
