Infosecurity News
Experts Slam Government After “Disastrous” Apple Encryption Move
Experts argue Britons are now less secure after their government effectively forced Apple to abandon end-to-end encryption
Bybit Offers $140m Bounty to Recover Funds After Mega Crypto-Heist
Following the largest-ever crypto theft, Bybit is offering researchers up to 10% of recovered funds
Salt Typhoon Exploited Cisco Devices With Custom Tool to Spy on US Telcos
Chinese threat actor Salt Typhoon used JumbledPath, a custom-built utility, to gain access to a remote Cisco device, said the network provider
DoD Contractor Pays $11.2M over False Cyber Certifications Claims
Health Net Federal Services has agreed to pay over $11m over alleged false cybersecurity reporting
BlackBasta Ransomware Chatlogs Leaked Online
BlackBasta’s internal chatlogs are “highly useful from a threat intelligence perspective,” said Prodaft, the firm that revealed the leak
Microsoft’s Quantum Chip Breakthrough Accelerates Threat to Encryption Protocols
Microsoft has developed the first ever quantum chip, shortening the timeframe for when quantum computers will break exiting encryption
Malicious Ads Target Freelance Developers via GitHub
Fake job ads target freelance developers, spreading malware via GitHub
West Coast Cybersecurity Salaries Outshine Rest of Country
A survey by IANS and Artico found significant regional variation in cybersecurity salary levels across North America
Mobile Phishing Attacks Surge with 16% of Incidents in US
Mobile phishing attacks surged in 2024, with 16% of all incidents occurring in the US, according to a new Zimperium report
Over 330 Million Credentials Compromised by Infostealers
Kela researchers 330 million compromised credentials to infostealer activity on over four million machines in 2024
Hackers Chain Exploits of Three Palo Alto Networks Firewall Flaws
Palo Alto Networks has observed exploit attempts chaining three vulnerabilities in its PAN-OS firewall appliances
CISA and FBI Warn of Global Threat from Ghost Ransomware
CISA and the FBI have released a joint advisory detailing the activity of China’s Ghost ransomware
WordPress Plugin Vulnerability Exposes 90,000 Sites to Attack
A flaw in the Jupiter X Core plugin has been identified, allowing upload of malicious SVG files and remote code execution on vulnerable servers
Finastra Notifies Customers of Data Breach
Finastra notifies customers of data breach that took place more than three months ago, impacting sensitive financial information
Australian IVF Clinic Suffers Data Breach Following Cyber Incident
Australia-based Genea said it is investigating the cyber incident to determine whether any personal data was accessed by an unauthorized third party
Spies Eye AUKUS Nuclear Submarine Secrets, Australia’s Intelligence Chief Warns
The head of the Australian Security Intelligence Organisation gave his Annual Threat Assessment for the year ahead
Cyber Investor Insight Partners Suffers Security Breach
Venture capital firm Insight Partners, which counts Recorded Future, SentinelOne and Wiz in its portfolio, confirmed an intrusion into its systems via a social engineering attack
Russian State Hackers Target Signal to Spy on Ukrainians
Google has warned that Russian state-backed hackers are targeting Signal to eavesdrop on persons of interest in Ukraine
Hundreds of US Military and Defense Credentials Compromised
Hudson Rock has found evidence that infostealers have compromised hundreds of US military and defense contractor credentials
OpenSSH Flaws Expose Systems to Critical Attacks
Significant OpenSSH flaws are exposing systems to man-in-the-middle and denial-of service attacks
