Infosecurity News
Curl Releases Fixes For High-Severity Vulnerability
The flaw impacts curl and libcurl, causing SOCKS5 proxy handshake to suffer heap buffer overflow
US Government Issues Open-Source Security Guidance for Critical Infrastructure
The recommendations are designed to reduce the life-safety implications of cyber incidents in ICS environments
Exploitation Accounts For 29% of Education Sector Attacks
The figures from the latest Critical Start report also suggest 30% come from phishing campaigns
Cyber Professionals Alarmed by Growing Attacker Use of AI
IT security professionals are concerned about the increasing use of AI in cyber-attacks, particularly deepfakes
October Patch Tuesday Addresses Three Zero-Days
Microsoft issues updates for over 100 flaws
Air Europa Asks Customers to Cancel Cards After Breach
Spanish airline did not disclose scale of the attack
Tech Giants Reveal Record-Breaking “Rapid Reset” DDoS Bug
Zero-day has been exploited to launch largest attacks ever seen
IZ1H9 Botnet Targets IoT Devices With New Exploits
FortiGuard Labs said the new campaign incorporates 13 distinct payloads
Flagstar Bank MOVEit Breach Affects 800K Customer Records
The incident occurred between May 27 and 31 2023, before MOVEit Transfer vulnerability was publicly disclosed
#CyberMonth: Google Makes Passkeys Default Sign-In Option
The tech giant said the move is designed to help efforts to make passwords obsolete
Half of CISOs Now Report to CEO as Influence Grows
Trend is more pronounced in Europe than America
New Threat Actor “Grayling” Blamed For Espionage Campaign
Symantec highlights distinctive DLL sideloading technique
Magecart Hackers Hide in 404 Error Pages
Akamai spots new digital skimming campaign
MGM Resorts Reveals Over $100M in Costs After Ransomware Attack
In an SEC 8-K filing published last Thursday, the company cited operational disruptions
Google Bug Bounty Program Expands to Chrome V8, Google Cloud
Google has launched capture the flag (CTF) competitions focused on Chrome’s V8 JavaScript engine and Google Cloud’s kernel-based virtual machine (KVM)
DNA Tester 23andMe Hit By Credential Stuffing Campaign
Threat actor offers to sell DNA profiles of ‘millions’
Blackbaud Settles Ransomware Breach Case For $49.5m
Thousands of non-profit customers were affected
Social Dominates as Victims Take $2.7bn Fraud Hit
Social media is number one channel for fraud, says FTC
AWS to Mandate Multi-Factor Authentication from 2024
Move is designed to mitigate risk of account takeover
Qakbot Gang Still Active Despite FBI Takedown
Cisco Talos found new evidence that Qakbot-affiliated actors were still distributing ransomware despite the August FBI takedown of the threat group
