Infosecurity News
8Base Ransomware Group Emerges as Major Threat
VMware explained that 8Base employs a combination of encryption and “name-and-shame” tactics
LockBit Claims TSMC Hack, Demands $70m Ransom
If confirmed, it could be the fourth-largest ransom demand of all time
MITRE Announces Most Dangerous Software Weaknesses
CWE Top 25 list is calculated from two years of vulnerability data
GCHQ Reveals Details of State-Backed Breach
Cyber-espionage incident occurred 20 years ago, says NCSC
Amazon Issues Lawsuits Targeting Fake Review Brokers
E-commerce giant looks to improve customer trust in its marketplace
NSA and CISA Release Guidelines to Secure CI/CD Environments
The guidelines highlight three key threat scenarios and recommends mitigations for each
MIT Publishes Framework to Evaluate Cybersecurity Methods
It assesses information hackers could get from a victim program protected by an obfuscation scheme
Charming Kitten’s PowerStar Malware Evolves with Advanced Techniques
Volexity said the updated malware uses IPFS, public cloud hosting for decryption and configuration
LockBit Dominates Ransomware World, New Report Finds
LockBit becomes one of the first major ransomware operations to specifically target macOS
VPN and RDP Exploitation the Most Common Attack Technique
Initial access brokers still play a key role in threat supply chain
US Prosecutors Line Up Charges in $2.5bn Healthcare Fraud Cases
Nearly 80 individuals accused of participating in multiple schemes
Japan in the Crosshairs of Many State-Sponsored Threat Actors New Report Finds
Rapid7 found that Vietnamese APTs have also been targeting Japanese organizations, especially competitors of Vietnam’s budding automotive industry
Manifest Confusion Threat Undermines Trust in Entire Npm Registry
Former manager takes registry to task for slow response
Suncor Energy Responds to Cybersecurity Incident
Over 1500 Petro-Canada gas stations are unable to accept credit card payments
ThirdEye Infostealer Poses New Threat to Windows Users
FortiGuard explained that ThirdEye can harvest BIOS and hardware data
Andariel’s Mistakes Uncover New Malware in Lazarus Group Campaign
Kaspersky analyzes the group’s tactics and reveals the emergence of a new threat called EarlyRat
Mobile Malware and Phishing Surge in 2022
Zimperium records large increase in share of compromised devices
EncroChat Bust Leads to 6500 Arrests in Three Years
Encrypted comms platform was used by organized criminals
Experts Unconvinced by Upskill in UK Cyber Program
Its 3600 applicants will barely make a dent in overall skills shortages
Anatsa Banking Trojan Targets Banks in US, UK and DACH Region
ThreatFabric said the ongoing campaign started in March and has witnessed over 30,000 installations
