Infosecurity News
New CVSS Version Unveiled Amid Rising Cyber Threats
FIRST has released details of version 4.0 of the standard, which aims to address criticisms of CVSS 3.1
Mandiant Unveils Russian GRU's Cyber Playbook Against Ukraine
Mandiant has observed that the same playbook has been used by various Russian threat actors since the breakout of war in Ukraine, making them likely to be part of a GRU-led deliberate strategy
White House Publishes Plan to Implement US National Cybersecurity Strategy
The plan details over 65 federal initiatives, each of which is assigned to a responsible agency
US on Track For Record Number of Data Breaches
Latest quarterly figures show compromises at an all-time high
Fewer Than 100 Scammers Responsible For Global Email Extortion
Barracuda research lifts the lid on widespread threat activity
Chinese Threat Group Compromises US Government
Threat actors forged authentication tokens to access email
Diplomats in Ukraine Targeted by “Staggering” BMW Phishing Campaign
Unit 42 researchers believe a Russian threat group repurposed a legitimate flyer for a BMW car sent to embassies in Kyiv, Ukraine
Ethical Hackers Reveal How They Use Generative AI
Bugcrowd’s report finds that many ethical hackers are utilizing generative AI in their work, but 72% argue it will never replace human creativity
Financial Industry Faces Soaring Ransomware Threat
Banks and financial service providers have emerged as attractive targets for the most prominent ransomware groups
Crypto Crime Down 62% but Ransomware Activity Surges
Chainalysis claims big-game hunting is back
Scam Page Volumes Surge 304% Annually
Social media and messaging apps are main conduit
Microsoft Fixes Six Zero-Days This Patch Tuesday
One of the bugs has been actively exploited in NATO attacks
Clop: Behind MOVEit Lies a Loud, Adaptable and Persistent Threat Group
David Wallace, a senior threat intelligence analyst at Sophos, took a deep dive into Clop’s background and intrusion techniques
11 Million Patients Impacted in Healthcare Data Breach
HCA Healthcare said personal data of approximately 11 million patients was published on an online forum
EU Adopts New US Data Privacy Agreement
The Commission’s announcement allows for the free flow of personal data between the two regions, but is likely to be challenged in the courts
Moroccan Charged With OpenSea NFT and Crypto Theft
Individual allegedly used phishing website to harvest victim credentials
Man Charged With Remote Attack on Water Plant
Individual accused of endangering health of Discovery Bay residents
E-commerce Fraud Surges By Over 50% Annually
Online merchants plan to increase budgets and new hires
RomCom Group Targets Ukraine Supporters Ahead of NATO Summit
The BlackBerry team suspects spear-phishing as the primary vector utilized by the RomCom group
Crimeware Group Asylum Ambuscade Ventures Into Cyber-Espionage
ESET researchers suggested Asylum Ambuscade has been active since 2020
