Infosecurity News
UK Blames China for 2021 Hack Targeting Millions of Voters' Data
The UK’s NCSC assesses that China-backed APT31 was “almost certainly” responsible for hacking the email accounts of UK parliamentarians
Police Bust Multimillion-Dollar Holiday Fraud Gang
Law enforcers have arrested nine suspected members of a prolific cyber-fraud gang
Russian Cozy Bear Group Targets German Politicians
Mandiant observes what it claims is the first ever APT29 campaign aimed at political parties
New AcidPour Wiper Targeting Linux Devices Spotted in Ukraine
SentinelLabs researchers identified the malware as a new variant of AcidRain, which shut down thousands of Viasat satellites in Ukraine and Western Europe in 2022
US Government Releases New DDoS Attack Guidance for Public Sector
The joint advisory sets out how to mitigate and respond to DDoS attacks, limiting disruption to critical services
US Treasury Targets Russian Entities in Cyber Influence Campaign
The campaign notably included attempts to impersonate legitimate media outlets
US Legislation Targets Data Sharing With Foreign Adversaries
The US House of Representatives approved the new bill with an overwhelming vote of 414-0
Security Leaders Acknowledge API Security Gaps Despite Looming Threat
Most decision-makers have experienced API security problems over the past year, yet many haven’t invested in a robust API security strategy, Fastly reveals
ICO Probes Kate Middleton Medical Record Breach
The ICO said it is assessing the reported breach of Kate Middleton’s medical records at The London Clinic
Fake Obituary Sites Send Grievers to Porn and Scareware Pages
Secureworks is warning of fake obituary sites which expose visitors to fake AV scams
Security Researchers Win Second Tesla At Pwn2Own
The Synacktiv team won its second Tesla car for finding one of 19 zero-day bugs on the first day of Pwn2Own Vancouver
CISA Warns Critical Infrastructure Leaders of Volt Typhoon
The agency has issued a fact sheet about the threat actor, emphasizing the importance of cyber-risk as a core business concern
Study Uncovers 27% Spike in Ransomware; 8% Yield to Demands
Thales latest report also suggests less than half of organizations have a formal ransomware response plan
UK Government: 75% of UK Businesses Experienced a Cyber Incident in 2023
A new UK government report finds that 75% of businesses and 79% of charities experienced a cyber incident in 2023
Ukrainian Police Arrest Suspected Brute-Force Account Hijackers
Police in Kharkiv arrest three men suspected of hacking 100 million Instagram and email accounts
White House Convenes States to Discuss Water Sector Breaches
The Biden administration is inviting state representatives to urgently discuss the security of the water sector
Researchers Uncover New “Conversation Overflow” Tactics
SlashNext said the method deceives ML systems to deliver phishing messages into victims’ inboxes
Research Shows IT and Construction Sectors Hardest Hit By Ransomware
The Ontinue report draws from an extensive analysis of data collected from 600,000 endpoints
NCSC Publishes Security Guidance For Cloud-Hosted SCADA
The UK’s National Cyber Security Centre wants to help organizations migrate their SCADA systems to the cloud
Prolific Chinese Threat Campaign Targets 100+ Victims
Trend Micro uncovers Chinese cyber-espionage campaign Earth Krahang
