Infosecurity News

Dark Web Markets Offer New FraudGPT AI Tool
The tool can craft phishing emails, create undetectable malware and identify vulnerable sites

Ransomware Attacks Skyrocket in 2023
SonicWall’s report finds that ransomware rebounded in Q2 2023 following a major reduction in Q1

Education Sector Has Highest Share of Ransomware Victims
Extortionists know their targets have low tolerance for outages

Over 900,000 MikroTik Routers Exposed to Critical Bug
Attackers could covertly gain remote control of devices

Industry Coalition Calls For Enhanced Network Resilience
Alliance wants to improve visibility and patching

Decoy Dog Malware Upgraded to Include New Features
Decoy Dog used DNS for C2 and is suspected to be employed in ongoing nation-state cyber-attacks

North Korean Cyber Group Suspected in JumpCloud Breach
Mandiant said the compromise resulted from a sophisticated spear-phishing campaign

Critical Flaws Found in Microsoft Message Queuing Service
FortiGuard Labs described the vulnerabilities in an advisory published on Monday

UK Government Report Finds Cybersecurity Skills Gap Stagnant
A new report shows that 50% of all UK businesses have a basic cyber security skills gap, and 33% have an advanced skills gap

Hacker Claims to Have Stolen Sensitive Medical Records from Egypt's Ministry of Health
SOCRAdar and Falcon Feeds reported that the threat actor allegedly started selling the dataset

Aussie Government Exposed Personal Info Via Security Report
Survey participants had details published on parliament website

Ivanti Patches Zero-Day Bug Used in Norway Attacks
CVSS 10.0 score means patch should be urgently deployed by customers

Data Breach Costs Hit Record High but Fall For Some
IBM’s annual study finds over half of breached firms pass costs on

Tampa General Hospital Data Breach Impacts 1.2 Million Patients
TGH said it first detected unusual activity on its computer systems on May 31 2023

Biden-Harris Administration Secures AI Commitments For Safety
Amazon, Anthropic, Google, Inflection, Meta, Microsoft and OpenAI all joined the initiative

Cyber-Attack Strikes Norwegian Government Ministries
Erik Hope revealed the attack was traced back to a vulnerability in a government supplier

Novel Open Source Supply Chain Attacks Target Banking Sector
Checkmarx has identified two distinct open-source software supply chain attacks targeting the financial sector for the first time

Booz Allen Pays $377m to Settle Government Fraud Case
Contractor was accused of violating False Claims Act

Thousands of Citrix Servers Exposed to Zero-Day Bug
Remote code execution attacks are ongoing

Clop Could Make $100m from MOVEit Campaign
Coveware claims small number of victims paid very high ransoms



