Infosecurity News

US Space Industry Under Threat from Foreign Cyber Espionage
An advisory by US intelligence provides guidance for space firms on how to identify an espionage campaign, report and mitigate it

Government Urges More Students to Be Cyber Explorers
Over 50,000 have already signed up to program

Police Insider Tipped Off Criminal Friend About EncroChat Bust
Intelligence analyst posed a serious risk to Operation Venetic

Cuba Ransomware Group Steals Credentials Via Veeam Exploit
Russian gang operates comprehensive set of attack tools

QR Code Campaign Targets Major Energy Firm
Cofense said that over 29% of the malicious emails were directed at the energy sector giant

Cybersecurity Study Reveals Web App Vulnerability Crisis
Latest CyCognito report exposes 74% PII vulnerability, prompting urgent data protection

Interpol-Led Africa Cyber Surge II Nets 14 Cybercrime Suspects
The operation identified 20,000 cyber networks associated with financial losses exceeding $40m

UK’s AI Safety Summit Scheduled For Early November
Experts welcome efforts to safeguard society from emerging technologies

Chinese Hackers Use DLL Hijacking to Target Asian Gamblers
Espionage campaign shares similarities with previous attacks

Proxyjacking and Cryptomining Campaign Targets GitLab
Threat actors use several evasion techniques to stay hidden

CISA Launches Joint Initiative to Secure RMM Software
It was created with industry and government stakeholders via the Joint Cyber Defense Collaborative

Critical Flaws in PowerShell Gallery Enable Malicious Exploits
Aqua Nautilus exposed naming policy, ownership verification and module exposure vulnerabilities

Phishing Spree Targets Zimbra Collaboration Account Holders
ESET said the campaign mainly targeted SMEs and governmental entities in Poland, Ecuador and Italy

Ransomware Surges With 1500 Confirmed Victims This Year
A Rapid7 report finds there have been at least 1500 ransomware victims in the first half of 2023

CISA Urges Patching of Actively Exploited Citrix Bug
Citrix ShareFile vulnerability dates back to June

AnonFiles Shuts Down After Massive User Abuse
Anonymous file sharing service puts domain up for sale

Google Fixes 26 Bugs Amid Fake Update Warning
Chrome 116 update fixes eight critical flaws

Clorox Operations Disrupted By Cyber-Attack
The cyber-attack disrupted manufacturing and distribution processes

Mass-Exploitation Campaign Targets Citrix NetScalers With Backdoors
The attack was unveiled by cybersecurity firm Fox-IT in collaboration with the DIVD

Scammers Exploit Hacked Websites For Phishing
Kaspersky explained one common strategy is the hacking of abandoned or poorly maintained websites



