Infosecurity News
New AcidPour Wiper Targeting Linux Devices Spotted in Ukraine
SentinelLabs researchers identified the malware as a new variant of AcidRain, which shut down thousands of Viasat satellites in Ukraine and Western Europe in 2022
US Government Releases New DDoS Attack Guidance for Public Sector
The joint advisory sets out how to mitigate and respond to DDoS attacks, limiting disruption to critical services
US Treasury Targets Russian Entities in Cyber Influence Campaign
The campaign notably included attempts to impersonate legitimate media outlets
US Legislation Targets Data Sharing With Foreign Adversaries
The US House of Representatives approved the new bill with an overwhelming vote of 414-0
Security Leaders Acknowledge API Security Gaps Despite Looming Threat
Most decision-makers have experienced API security problems over the past year, yet many haven’t invested in a robust API security strategy, Fastly reveals
ICO Probes Kate Middleton Medical Record Breach
The ICO said it is assessing the reported breach of Kate Middleton’s medical records at The London Clinic
Fake Obituary Sites Send Grievers to Porn and Scareware Pages
Secureworks is warning of fake obituary sites which expose visitors to fake AV scams
Security Researchers Win Second Tesla At Pwn2Own
The Synacktiv team won its second Tesla car for finding one of 19 zero-day bugs on the first day of Pwn2Own Vancouver
CISA Warns Critical Infrastructure Leaders of Volt Typhoon
The agency has issued a fact sheet about the threat actor, emphasizing the importance of cyber-risk as a core business concern
Study Uncovers 27% Spike in Ransomware; 8% Yield to Demands
Thales latest report also suggests less than half of organizations have a formal ransomware response plan
UK Government: 75% of UK Businesses Experienced a Cyber Incident in 2023
A new UK government report finds that 75% of businesses and 79% of charities experienced a cyber incident in 2023
Ukrainian Police Arrest Suspected Brute-Force Account Hijackers
Police in Kharkiv arrest three men suspected of hacking 100 million Instagram and email accounts
White House Convenes States to Discuss Water Sector Breaches
The Biden administration is inviting state representatives to urgently discuss the security of the water sector
Researchers Uncover New “Conversation Overflow” Tactics
SlashNext said the method deceives ML systems to deliver phishing messages into victims’ inboxes
Research Shows IT and Construction Sectors Hardest Hit By Ransomware
The Ontinue report draws from an extensive analysis of data collected from 600,000 endpoints
NCSC Publishes Security Guidance For Cloud-Hosted SCADA
The UK’s National Cyber Security Centre wants to help organizations migrate their SCADA systems to the cloud
Prolific Chinese Threat Campaign Targets 100+ Victims
Trend Micro uncovers Chinese cyber-espionage campaign Earth Krahang
Moldovan Behind E-Root Marketplace Gets US Federal Prison Term
Sandu Boris Diaconu was involved in conspiracy to commit access device and computer fraud
FCC Agrees to Cyber Trust Mark for IoT Products
The voluntary FCC program will allow smart device manufacturers to demonstrate to consumers that their product has met robust cybersecurity standards
Over 50,000 Vulnerabilities Discovered in DoD Systems Through Bug Bounty Program
Seven years into its ethical hacking program, the Pentagon received its 50,000th vulnerability report on March 15
