Infosecurity News
Ransomware Targets Unpatched WS_FTP Servers
The threat actors attempted to escalate privileges using the open-source GodPotato tool
Growing Concern Over Role of Hacktivism in Israel-Hamas Conflict
Hacktivists claim DDoS attacks against Israeli websites as cybersecurity experts urge caution in believing these cyber-criminals’ claims
Signal Disputes Alleged Zero-Day Flaw
Reports emerged over the weekend regarding a zero-day exploit in the messaging app
Healthcare Sector Warned About New Ransomware Group NoEscape
The US government highlighted the operations of the NoEscape group, which is believed to be a rebrand of Russian threat actor Avaddon
New RomCom Backdoor Targets Female Political Leaders
A new version of the RomCom backdoor was used to lure attendees of the June 2023 Women Political Leaders Summit
UK Regulator Fines Equifax £11m for 2017 Data Breach
The UK FCA held Equifax Ltd responsible for failing to protect UK consumer data held by its US-based parent company
New Phishing Campaign Uses LinkedIn Smart Links in Blanket Attack
Email security provider Cofense has unveiled a large-scale phishing campaign leveraging LinkedIn Smart Links
CISOs Receive Smaller Raises and Bonuses in 2023
Most CISOs are considering a job change in the next 12 months
Vulnerability Exposed in WordPress Plugin User Submitted Posts
With over 20,000 active installations, the plugin is used for user-generated content submissions
California Enacts “Delete Act” For Data Privacy
Governor Newsom signed the first US bill requiring data brokers to delete personal data upon request
Chinese APT ToddyCat Targets Asian Telecoms, Governments
A cyber espionage campaign tied to the Chinese group ToddyCat is targeting high-profile organizations in Kazakhstan, Uzbekistan, Pakistan, and Vietnam
Half of Small Businesses Hit by Cyber-Attack Over the Past Year
A new survey from accounting software provider Sage showed that most SMEs have developed a cybersecurity posture but struggle to keep up with the threats
European Police Hackathon Hunts Down Traffickers
Many recruit victims on social media, says Europol
Fifth of UK Cybersecurity Pros Work Excessive Hours
Workload is biggest concern for industry professionals
US Smashes Annual Data Breach Record With Three Months Left
Volume of data compromises already exceeds previous high by 14%
Curl Releases Fixes For High-Severity Vulnerability
The flaw impacts curl and libcurl, causing SOCKS5 proxy handshake to suffer heap buffer overflow
US Government Issues Open-Source Security Guidance for Critical Infrastructure
The recommendations are designed to reduce the life-safety implications of cyber incidents in ICS environments
Exploitation Accounts For 29% of Education Sector Attacks
The figures from the latest Critical Start report also suggest 30% come from phishing campaigns
Cyber Professionals Alarmed by Growing Attacker Use of AI
IT security professionals are concerned about the increasing use of AI in cyber-attacks, particularly deepfakes
October Patch Tuesday Addresses Three Zero-Days
Microsoft issues updates for over 100 flaws
