Infosecurity News

Russian Company Offers $20m For Non-NATO Mobile Exploits
Operation Zero will pay $20m for exploits like RCE, LPE and SBX, integral to a full-chain attack

Microsoft’s Bing AI Faces Malware Threat From Deceptive Ads
Malwarebytes said the goal of these tactics is to lure victims into downloading malicious software

Phishing, Smishing Surge Targets US Postal Service
The surge in these attacks has prompted DomainTools to delve into their origins and implications

Privacy Regulator Orders End to Spreadsheet FOI Responses
UK ICO issues call after damaging police leak

Microsoft Breach Exposed 60,000 State Department Emails
Chinese actor Storm-0558 compromised Outlook accounts

MOVEit Developer Patches Critical File Transfer Bugs
CVSS 10.0 flaw was found in the WS_FTP Server software

Budworm APT Evolves Toolset, Targets Telecoms and Government
Symantec explained that the attack leveraged a new variant of Budworm’s SysUpdate backdoor

Booking.com Customers Targeted in Major Phishing Campaign
Perception Point research highlights the extensive reach of this issue, affecting hotels and resorts on a global scale

Android Banking Trojan Zanubis Evolves to Target Peruvian Users
The Trojan utilizes the Obfuscapk obfuscator for Android APK files, Kaspersky explained

US Lawmaker: Government Shutdown Will Leave Americans Exposed to Cyber-Attacks
If the US government shutdown occurs, it is expected that 80% of CISA employees will be furloughed

US and Japan Warn of Chinese Router Attacks
BlackTech group blamed for cyber-espionage operation

Google Patches Chrome Zero-Day Used in Spyware Attacks
It’s the fifth zero-day to be fixed this year

UK Logistics Firm Forced to Close After Ransomware Breach
Kettering-based KNP Logistics Group was hit in June

Simple Membership Plugin Flaws Expose WordPress Sites
Patchstack uncovered an unauthenticated role privilege escalation flaw and an account takeover vulnerability

Ransomed.vc Group Hits NTT Docomo After Sony Breach Claims
According to Resecurity, Ransomed.vc is demanding a ransom of over $1m from NTT Docomo

BEC Attacks Increase By 279% in Healthcare
Abnormal Security also found a 167% increase in advanced email attacks

Leading CISO Creates Model for Ransomware Payment Decisions
Lorraine Dryland, CISO at First Sentier Investors, discusses how to help executives make fast and informed decisions when presented with a ransomware demand

Cyber-Attacks on Ukraine Surge 123%, But Success Rates Plummet
Russia-backed cyber-attacks in Ukraine jumped 123% in the first half of 2023 – but were less critical than in 2022

Regulator Warns Breaches Can Cost Lives
ICO says handling of domestic abuse victims’ data must improve

Attacks on European Financial Services Double in a Year
Region also experiences most DDoS events



