Infosecurity News

VMConnect: Python PyPI Threat Imitates Popular Modules
ReversingLabs said the attackers displayed a sophisticated approach and techniques

CISA Announces 2024-2026 Strategic Plan
The US’ leading cybersecurity agency calls for us to “embody the hacker spirit” in its latest strategic plan

Sophisticated Phishing Exploits Zero-Day Salesforce Vulnerability
Guardio Labs detected the campaign and detailed its findings in a technical blog post

Microsoft Warns of Growing Cyber-Threats to Sporting Events
Microsoft observed attackers continually attempting to compromise connected systems at the 2022 World Cup

Credentials Account For Over Half of Cloud Compromises
Google Cloud figures also point to misconfiguration

Legacy Flaws Dominate Top 12 Vulnerabilities List
Security agencies urge timely patching

UK Government: Cyber-Attacks Could Kill or Maim Thousands
Risk assessment predicts critical infrastructure attacks could cost billions

Hacktivist Collective “Mysterious Team Bangladesh” Revealed
Group-IB said the group carried out 750 DDoS attacks and more than 70 website defacements in a year

Cisco Talos Discusses Flaws in SOHO Routers Post-VPNFilter
Over the last five years the firm reported and mitigated 141 advisories, encompassing 289 CVEs

Microsoft Teams Targeted in Midnight Blizzard Phishing Attacks
The Russia-based actor exploited compromised Microsoft 365 tenants owned by small businesses

Cyber-Attacks Targeting Government Agencies Increase 40%
BlackBerry found that public services now rank as the second most targeted industry by threat actors

Menlo Leverages Advanced Technology to Combat Surging Browser Threats
Menlo Security co-founder highlights the challenge relating to web browser security and how to overcome them

Humans Unable to Reliably Detect Deepfake Speech
Research from UCL finds that humans struggle to identify deepfake audio

Cocaine Smugglers that Posed as PC Sellers Jailed
Four members behind bars after EncroChat bust

Hundreds of Citrix Endpoints Compromised With Webshells
Zero-day exploit warning was issued a week ago

Ivanti Discloses Yet Another Critical Flaw
Latest bug described as a patch bypass

Manufacturing Sector Reeling From Financial Costs of Ransomware
Analysis by Comparitech found that manufacturers have lost $46.2bn from ransomware attacks in downtime alone since 2018

AI-Powered CryptoRom Scam Targets Mobile Users
Sophos security researchers shared the findings in a report published today

Threat Actors Use AWS SSM Agent as a Remote Access Trojan
Mitiga’s research demonstrated two potential attack scenarios

Cloud Firm Under Scrutiny For Suspected Support of APT Operations
Halcyon said that Cloudzy has been playing a pivotal role in facilitating cyber-criminal activities



