Infosecurity News

Tampa General Hospital Sued Over Data Breach
Plaintiffs claim hospital didn't secure data and worsened the situation by delaying notification

#BHUSA: Ransomware Threat Activity Cluster Uncovered
The elusive ransomware group, Royal, might be collaborating with Hive and Black Basta

Vietnamese-Origin Ransomware Operation Mimics WannaCry Traits
Cisco Talos said what sets this operation apart is the novel approach to delivering ransom notes

UK Voters’ Data Exposed in Electoral Commission Cyber-Attack
The attackers accessed personal data of anyone in the UK who was registered to vote between 2014 and 2022

#BHUSA: Identity Compromise the Cause of Most Breaches
Pushed to the edges by efficient EDRs, threat actors are forced to use living-off-the-land techniques

North Korean Hackers Compromise Russian Missile Maker
NPO Mashinostroyeniya is under sanctions for supporting Kremlin war machine

Two-Thirds of UK Sites Vulnerable to Bad Bots
Those selling goods and classified ads are particularly exposed

Over 200 Million Brits Have Data Compromised in Four Years
Nearly 100,000 breaches were reported to the ICO between 2019 and 2022

US Primary Care Services Shuttered After Cyber-Attack
Prospect Medical Holdings took its systems offline on Friday and initiated an investigation

Invisible Ad Fraud Targets Korean Android Users
McAfee said the library registers device information and drains battery life and mobile data

FBI Warns Against Criminals Posing as NFT Developers
Users are tricked into connecting their cryptocurrency wallets to malicious smart contracts

Russian Hacktivists Overwhelm Spanish Sites With DDoS
Attacks come after Prime Minister’s trip to Kyiv

Colorado Education Department Suffers Ransomware Breach
Past and current staff and students are impacted

Clop Gang Offers Data Downloads Via Torrents
Latest innovation designed to speed up download process

Stealthy npm Malware Exposes Developer Data
Phylum said the attack demonstrated a carefully crafted development cycle

VMConnect: Python PyPI Threat Imitates Popular Modules
ReversingLabs said the attackers displayed a sophisticated approach and techniques

CISA Announces 2024-2026 Strategic Plan
The US’ leading cybersecurity agency calls for us to “embody the hacker spirit” in its latest strategic plan

Sophisticated Phishing Exploits Zero-Day Salesforce Vulnerability
Guardio Labs detected the campaign and detailed its findings in a technical blog post

Microsoft Warns of Growing Cyber-Threats to Sporting Events
Microsoft observed attackers continually attempting to compromise connected systems at the 2022 World Cup

Credentials Account For Over Half of Cloud Compromises
Google Cloud figures also point to misconfiguration



