Infosecurity News
High-Severity Access Control Vulnerability Found in Spring WebFlux
Tracked as CVE-2023-34034, the flaw has a CVSS score of 9.8
Northern Ireland Police Officers Vulnerable After Data Leak
The accidental release of PSNI police officers’ names and department has raised huge safety fears
Notorious Phishing-as-a-Service Platform Shuttered
Suspected Indonesian admin arrested in multi-national operation
Summer Spending Pressure Fuels Loan Fee Fraud Fears
UK financial regulator in new consumer awareness campaign
Microsoft Patches 80+ Flaws Including Two Zero-Days
Another busy Patch Tuesday for sysadmins
Tampa General Hospital Sued Over Data Breach
Plaintiffs claim hospital didn't secure data and worsened the situation by delaying notification
#BHUSA: Ransomware Threat Activity Cluster Uncovered
The elusive ransomware group, Royal, might be collaborating with Hive and Black Basta
Vietnamese-Origin Ransomware Operation Mimics WannaCry Traits
Cisco Talos said what sets this operation apart is the novel approach to delivering ransom notes
UK Voters’ Data Exposed in Electoral Commission Cyber-Attack
The attackers accessed personal data of anyone in the UK who was registered to vote between 2014 and 2022
#BHUSA: Identity Compromise the Cause of Most Breaches
Pushed to the edges by efficient EDRs, threat actors are forced to use living-off-the-land techniques
North Korean Hackers Compromise Russian Missile Maker
NPO Mashinostroyeniya is under sanctions for supporting Kremlin war machine
Two-Thirds of UK Sites Vulnerable to Bad Bots
Those selling goods and classified ads are particularly exposed
Over 200 Million Brits Have Data Compromised in Four Years
Nearly 100,000 breaches were reported to the ICO between 2019 and 2022
US Primary Care Services Shuttered After Cyber-Attack
Prospect Medical Holdings took its systems offline on Friday and initiated an investigation
Invisible Ad Fraud Targets Korean Android Users
McAfee said the library registers device information and drains battery life and mobile data
FBI Warns Against Criminals Posing as NFT Developers
Users are tricked into connecting their cryptocurrency wallets to malicious smart contracts
Russian Hacktivists Overwhelm Spanish Sites With DDoS
Attacks come after Prime Minister’s trip to Kyiv
Colorado Education Department Suffers Ransomware Breach
Past and current staff and students are impacted
Clop Gang Offers Data Downloads Via Torrents
Latest innovation designed to speed up download process
Stealthy npm Malware Exposes Developer Data
Phylum said the attack demonstrated a carefully crafted development cycle
