Infosecurity News

Acting White House Cyber Director Withdraws Nomination
Reports suggest personal debt behind Kemba Walden’s decision

AI Tool WormGPT Enables Convincing Fake Emails For BEC Attacks
Security expert Daniel Kelley worked with the SlashNext team on the research

New Threat Actor Launches Cyber-attacks on Ukraine and Poland
Cisco Talos said the malicious campaigns started in April 2022 and are currently ongoing

LokiBot Malware Targets Windows Users in Office Document Attacks
Fortinet suggests attackers are leveraging vulnerabilities like CVE-2021-40444 and CVE-2022-30190

Chinese APT Favorite Backdoor Found in Pakistani Government App
Trend Micro found a backdoor previously exploited by various Chinese threat actors in a popular application used by Pakistan’s government agencies

NCSC Shares Alternatives to Using a SOC
Security agency’s advice could help save time and money

Ransomware Costs Financial Services $32bn in Five Years
The figure accounts for losses due to downtime alone

UK Financial Regulator Urges Banks to Tackle AI-Based Fraud
Prime Minister wants UK to be a global center of AI regulation

New CVSS Version Unveiled Amid Rising Cyber Threats
FIRST has released details of version 4.0 of the standard, which aims to address criticisms of CVSS 3.1

Mandiant Unveils Russian GRU's Cyber Playbook Against Ukraine
Mandiant has observed that the same playbook has been used by various Russian threat actors since the breakout of war in Ukraine, making them likely to be part of a GRU-led deliberate strategy

White House Publishes Plan to Implement US National Cybersecurity Strategy
The plan details over 65 federal initiatives, each of which is assigned to a responsible agency

US on Track For Record Number of Data Breaches
Latest quarterly figures show compromises at an all-time high

Fewer Than 100 Scammers Responsible For Global Email Extortion
Barracuda research lifts the lid on widespread threat activity

Chinese Threat Group Compromises US Government
Threat actors forged authentication tokens to access email

Diplomats in Ukraine Targeted by “Staggering” BMW Phishing Campaign
Unit 42 researchers believe a Russian threat group repurposed a legitimate flyer for a BMW car sent to embassies in Kyiv, Ukraine

Ethical Hackers Reveal How They Use Generative AI
Bugcrowd’s report finds that many ethical hackers are utilizing generative AI in their work, but 72% argue it will never replace human creativity

Financial Industry Faces Soaring Ransomware Threat
Banks and financial service providers have emerged as attractive targets for the most prominent ransomware groups

Crypto Crime Down 62% but Ransomware Activity Surges
Chainalysis claims big-game hunting is back

Scam Page Volumes Surge 304% Annually
Social media and messaging apps are main conduit

Microsoft Fixes Six Zero-Days This Patch Tuesday
One of the bugs has been actively exploited in NATO attacks



