Infosecurity News
Over 60% of Network Security Appliance Flaws Exploited as Zero Days
Rapid7 found there were more mass compromise events arose from zero-day vulnerabilities than from n-day vulnerabilities in 2023
Authorities Arrest $100m Incognito Drugs Market Suspect
US officials say the suspected owner of the prolific Incognito dark web drugs marketplace has been arrested
Critical Fluent Bit Bug Impacts All Major Cloud Platforms
A newly discovered flaw in open source utility Fluent Bit could enable widespread DoS, RCE and information leakage
Network Outages Hit 59% of Multi-Site Businesses Monthly
A new report from Kaspersky also shows that 46% of businesses experience network problems between one and three times a month
Iran-Linked Void Manticore Intensifies Cyber-Attacks on Israel
CPR has suggested a significant overlap in targets between Void Manticore and Scarred Manticore
AI Chatbots Highly Vulnerable to Jailbreaks, UK Researchers Find
The UK AI Safety Institute tested four mainstream AI chatbots with basic jailbreak attacks
Grandoreiro Banking Trojan is Back With Major Updates
The malware-as-a-service Grandoreiro Trojan is now targeting 1500 global banks, says IBM
Chinese Duo Indicted For Laundering $73m in Pig Butchering Case
Two Chinese nationals have been charged with laundering over $73m in a pig butchering scheme
UK Councils Warn of Data Breach After Attack on Medical Supplier
Multiple UK councils have warned that residents’ personal data may have been compromised following a ransomware attack on NRS Healthcare
New Android Banking Trojan Mimics Google Play Update App
A new banking Trojan targeting Android devices shows multifaceted capabilities
Patient Data at Risk in MediSecure Ransomware Attack
Electronic prescriptions provider MediSecure said the attack originated from a third-party vendor, and has impacted individuals’ personal and health information
Windows Quick Assist Exploited in Ransomware Attacks
Microsoft warned Storm-1811 started vishing attacks in April to gain access to target devices
SugarGh0st RAT Variant Used in Targeted AI Industry Attacks
Proofpoint said the attackers modified registry key names for persistence
53,000 Employees' Social Security Numbers Exposed in Nissan Data Breach
Car manufacturer Nissan revealed that over 53,000 of its North America employees had their social security numbers accessed by a ransomware attacker
CISO Confidence in AI Security Grows as GenAI Adoption Rises
Nearly six out of ten surveyed ClubCISO members are confident AI is used securely in their organizations
UK Lags Europe on Exploited Vulnerability Remediation
UK organizations are less likely than their European peers to have known exploited bugs but take longer to fix them
BreachForums Hacking Marketplace Taken Down Again
The FBI claims to have seized the domain and servers of hacking forum BreachForums
Cyber-Attack Disrupts Christie’s $840M Art Auctions
Despite this setback, the auction house said bids can still be placed by phone and in-person
PDF Exploitation Targets Foxit Reader Users
CPR said exploit builders in .NET and Python have been employed to deploy this malware
NCSC Expands Election Cybersecurity to Safeguard Candidates and Officials
The National Cyber Security Centre launches an opt-in Personal Internet Protection service to safeguard individuals from cyber threats during the upcoming election
