Infosecurity News
Russian APT Sandworm Disrupted Power in Ukraine Using Novel OT Techniques
This previously undocumented attack suggests a growing maturity of Russia’s offensive OT arsenal
Microsoft Warns of Election Threats in 2024
To address these challenges, Microsoft is introducing several initiatives
Predator AI ChatGPT Integration Poses Risk to Cloud Services
This integration reduces reliance on OpenAI’s API while streamlining the tool’s functionality
FBI Warns of Emerging Ransomware Initial Access Techniques
The FBI notification advises how to protect against the growing targeting of third-party vendors and services
EU Rules for Digital Identities and Trust Services Face Backlash
A proposed amendment of eIDAS could “weaken the security of the Internet as a whole”, said a letter signed by over 500 individuals and organizations
US Urges Critical Infrastructure Firms to Get “Shields Ready”
Government campaign aims to promote cyber-resilience
Three-Quarters of Retail Ransomware Attacks End in Encryption
Sophos claims more victims are taking longer to recover
Threat Actor Farnetwork Linked to Five Ransomware Schemes
Group-IB lifts the lid on prolific cyber-criminal
Data Breach at Singapore's Marina Bay Sands Affects 665,000 Customers
The leaked data include personally identifiable information, such as customers’ names, email addresses, phone numbers and membership numbers
GootBot Implant Heightens Risk of Post-Infection Ransomware
IBM found Gootloader group opting for GootBot over off-the-shelf tools for lateral movement
New BlueNoroff Malware Variant Targets Cryptocurrency Exchanges
Jamf Threat Labs found a Mach-O universal binary communicating with an identified malicious domain
Veeam Patches Two Critical Bugs in Veeam ONE
Two flaws have near-maximum CVSS scores
SIM Box Fraud to Drive 700% Surge in Roaming Scams
Juniper Research warns telcos they need bilateral agreements in place
Critical Atlassian Bug Exploited in Ransomware Attacks
Attempts to deploy Cerber variant on Confluence servers
Russian National Sanctioned For Virtual Currency Money Laundering
Zhdanova reportedly utilized cash, international money laundering associates and businesses fronts
Spy Trojan SpyNote Unveiled in Attacks on Gamers
The findings are part of Kaspersky’s latest investigation, spanning from July 2022 to July 2023
US, Japan and South Korea Unite to Counter North Korean Cyber Activities
The consultative body aims to tackle cyber-attacks used to fund Pyongyang’s weapons development, including its nuclear program
Over Half of Users Report Kubernetes/Container Security Incidents
Many say it led to a subsequent data breach
Security Agency Publishes Post-Quantum Guidance For Firms
NCSC wants to ease transition to quantum safety
Okta Breach Hit Over 130 Customers
Several suffered follow-on session hijacking attacks
