Infosecurity News
Linux Devs Rush to Patch Critical Vulnerability in Shim
The flaw allows the installation of malware that operates at the firmware level
France: 33 Million Social Security Numbers Exposed in Health Insurance Hack
The French data privacy regulator has opened an investigation following a data breach affecting two major health insurance firms
Critical Manufacturing Vulnerabilities Surge 230% in Six Months
Nozomi Networks reveals increasingly sophisticated attacks targeting bugs and other vectors in IoT and OT environments
US Warns of Destructive Chinese Cyber-Attacks
The US claims to have discovered Chinese Volt Typhoon intrusions in multiple critical infrastructure sectors
Governments and Tech Giants Unite Against Commercial Spyware
Over 25 governments and 14 tech companies vowed to fight against the proliferation of commercial spyware
Patched Critical Flaw Exposed JetBrains TeamCity Servers
Tracked as CVE-2024-23917, the flaw carries a CVSS rating of 9.8
Google and CSA Singapore Combat Android Fraud With New Pilot
The initiative aims to tackle mobile fraud by auto-blocking apps seeking sensitive permissions
Meta to Introduce Labeling for AI-Generated Images Ahead of US Election
Meta will start working on detecting AI images generated from rival services ahead of the November 2024 US presidential election
Ransomware Payments Hit $1bn All-Time High in 2023
Chainalysis monitoring of blockchain transactions reveals ransomware payments hit a record $1bn in 2023
Chinese Spies Hack Dutch Networks With Novel Coathanger Malware
Dutch intelligence services have blamed China for an attack last year targeting FortiGuard devices
Malware-as-a-Service Now the Top Threat to Organizations
The Darktrace report observed an increasing cross-functional adaption of many MaaS strains in 2023
Safer Internet Day: Two Million Brits Victims of Financial Identity Fraud
A new report suggests nearly 2 million UK adults have had their identity stolen and used by fraudsters to open a financial account in 2023
Meta's Oversight Board Urges a Policy Change After a Fake Biden Video
A fake video showing US President Joe Biden touching his granddaughter’s chest remains on Facebook despite an Oversight Board investigation
Latest Ivanti Zero Day Exploited By Scores of IPs
Shadowserver Foundation spots 170 distinct IP addresses trying to exploit Ivanti zero-day CVE-2024-21893
US Cracks Down on Spyware with Visa Restrictions
The US government will deny visas to those involved in misusing spyware
ResumeLooters Gang Raids Retail and Job Site Data
Group-IB uncovers mass data theft campaign from Chinese-speaking ResumeLooters hackers
Pennsylvania Courts’ Website Disrupted by DoS Attack
A number of court web systems have been taken offline in the US state of Pennsylvania following a denial of service attack
US Condemns Iran, Issues Sanctions for Cyber-Attacks on Critical Infrastructure
The US has announced sanctions against six Iranians responsible for an attack on Unitronics, an Israeli manufacturer of systems used in the water sector
AnyDesk Hit by Cyber-Attack and Customer Data Breach
The cyber-attack that hit the remote tool provider could have a more significant impact than initially expected
Clorox and Johnson Controls Reveal $76m Cyber-Attack Bill
SEC filings reveal multimillion-dollar costs of two serious 2023 cyber-attacks on Clorox and Johnson Controls
