Infosecurity News

Regulator Warns Breaches Can Cost Lives
ICO says handling of domestic abuse victims’ data must improve

Attacks on European Financial Services Double in a Year
Region also experiences most DDoS events

NCSC Launches Cyber Incident Exercise Scheme
UK security agency opens scheme to certify assured providers

More than 30 US Banks Targeted in New Xenomorph Malware Campaign
ThreatFabric explained the malware relies on deceptive phishing webpages posing as a Chrome update

ZenRAT Malware Uncovered in Bitwarden Impersonation
Discovered by Proofpoint, ZenRAT is a modular remote access trojan targeting Windows users

ShadowSyndicate Investigation Reveals RaaS Ties
The investigation was conducted by Group-IB, Bridewell and threat researcher Michael Koczwara

Half of Cyber-Attacks Go Unreported
Almost half of organizations have failed to report cyber-attacks to the appropriate authorities in 2023

Tech Giants Launch Post-Quantum Cryptography Coalition
IBM Quantum, Microsoft, MITRE and others join forces

CISA Publishes Hardware Bill of Materials Framework
Agency says it will help firms better manage supply chain risk

Pension Firms Report 4000% Surge in Breaches
Financial services targeted remorselessly over past year

Sophisticated APT Clusters Target Southeast Asia
Unit 42 uncovered three separate threat actor clusters: Stately Taurus, Alloy Taurus and Gelsemium

China-Linked EvilBamboo Targets Mobiles
This extensive operation is directed at Tibetan, Uyghur and Taiwanese individuals and organizations

Voting Equipment Giants Team Up For Security
The move aims to combat the rampant spread of misinformation among American voters

Web3 Platform Mixin Network Hit by $200m Crypto Hack
The decentralized finance network has suspended deposits and withdrawals after what could be one of the biggest cyber-attacks on cryptocurrency projects

BEC Scammer Pleads Guilty to Part in $6m Scheme
Nigerian was extradited to the US from Canada

Researchers Spot Novel “Deadglyph” Backdoor
Malware is linked to UAE-backed spies

Almost 900 US Schools Breached Via MOVEit
National Student Clearinghouse reveals more details of incident

CISA and NFL Collaborate to Secure Super Bowl LVIII
Tabletop exercise assessed the cybersecurity response capabilities, plans and procedures for the event

Over 700 Dark Web Ads Offer DDoS Attacks Via IoT in 2023
Kaspersky said these services range from $20 per day to $10,000 a month

Elusive Sandman APT Targets Telecom Giants With LuaJIT Toolkit
SentinelLabs said the group’s tactics focus on stealthy lateral movements and minimal interactions



