Infosecurity News
Simple Membership Plugin Flaws Expose WordPress Sites
Patchstack uncovered an unauthenticated role privilege escalation flaw and an account takeover vulnerability
Ransomed.vc Group Hits NTT Docomo After Sony Breach Claims
According to Resecurity, Ransomed.vc is demanding a ransom of over $1m from NTT Docomo
BEC Attacks Increase By 279% in Healthcare
Abnormal Security also found a 167% increase in advanced email attacks
Leading CISO Creates Model for Ransomware Payment Decisions
Lorraine Dryland, CISO at First Sentier Investors, discusses how to help executives make fast and informed decisions when presented with a ransomware demand
Cyber-Attacks on Ukraine Surge 123%, But Success Rates Plummet
Russia-backed cyber-attacks in Ukraine jumped 123% in the first half of 2023 – but were less critical than in 2022
Regulator Warns Breaches Can Cost Lives
ICO says handling of domestic abuse victims’ data must improve
Attacks on European Financial Services Double in a Year
Region also experiences most DDoS events
NCSC Launches Cyber Incident Exercise Scheme
UK security agency opens scheme to certify assured providers
More than 30 US Banks Targeted in New Xenomorph Malware Campaign
ThreatFabric explained the malware relies on deceptive phishing webpages posing as a Chrome update
ZenRAT Malware Uncovered in Bitwarden Impersonation
Discovered by Proofpoint, ZenRAT is a modular remote access trojan targeting Windows users
ShadowSyndicate Investigation Reveals RaaS Ties
The investigation was conducted by Group-IB, Bridewell and threat researcher Michael Koczwara
Half of Cyber-Attacks Go Unreported
Almost half of organizations have failed to report cyber-attacks to the appropriate authorities in 2023
Tech Giants Launch Post-Quantum Cryptography Coalition
IBM Quantum, Microsoft, MITRE and others join forces
CISA Publishes Hardware Bill of Materials Framework
Agency says it will help firms better manage supply chain risk
Pension Firms Report 4000% Surge in Breaches
Financial services targeted remorselessly over past year
Sophisticated APT Clusters Target Southeast Asia
Unit 42 uncovered three separate threat actor clusters: Stately Taurus, Alloy Taurus and Gelsemium
China-Linked EvilBamboo Targets Mobiles
This extensive operation is directed at Tibetan, Uyghur and Taiwanese individuals and organizations
Voting Equipment Giants Team Up For Security
The move aims to combat the rampant spread of misinformation among American voters
Web3 Platform Mixin Network Hit by $200m Crypto Hack
The decentralized finance network has suspended deposits and withdrawals after what could be one of the biggest cyber-attacks on cryptocurrency projects
BEC Scammer Pleads Guilty to Part in $6m Scheme
Nigerian was extradited to the US from Canada
