Infosecurity News

University of Manchester Suffers Suspected Data Breach During Cyber Incident
The University is working with authorities to resolve the incident and understand what data has been accessed

Barracuda Urges Swift Replacement of Vulnerable ESG Appliances
Investigating the ESG bug, Rapid7 assumed the presence of persistent malware hindering device wipes

Google Launches Framework to Secure Generative AI
The Secure AI Framework (SAIF) is a first step to help collaboratively secure AI technology, said Alphabet’s subsidiary

Security Experts Highlight Exploit for Patched Windows Flaw
Numen Cyber said exploiting the vulnerability does not require novel techniques

Minecraft Users Warned of Malware Targeting Modpacks
Bitdefender researchers warn that mods and plugins have been rigged by the infostealer malware, dubbed Fractureiser

Organizations Urged to Address Critical Vulnerabilities Found in First Half of 2023
Rezilion's report exposed the most dangerous vulnerabilities found in the first half of 2023

Espionage Attacks in North Africa Linked to "Stealth Soldier" Backdoor
The malware focuses on surveillance operations, according to a new advisory by Check Point Research

Pharmaceutical Giant Eisai Hit By Ransomware Incident
Several systems, including logistics systems, have been temporarily taken offline

Microsoft Brings OpenAI Tech to US Agencies
The capabilities will expedite content generation and enhance decision-making processes

Interpol: Human Trafficking is Fueling Fraud Epidemic
Policing organization issues Orange Notice to members

Lazarus Group Blamed for Atomic Wallet Heist
Notorious North Korean group pegged for recent campaign

Cyber Extortionists Seek Out Fresh Victims in LatAm and Asia
Ukraine war may have been catalyst for targeting non-NATO countries

CISA and Partners Publish Guide For Remote Access Security
Cyber-actors are utilizing these tools for easy and broad access to victim systems

North Korean APT Group Kimsuky Expands Social Engineering Tactics
SentinelOne said the campaign specifically targets experts in North Korean affairs

"PowerDrop" PowerShell Malware Targets US Aerospace Industry
Adlumin said the malware combines elements of off-the-shelf threats and APT tactics

Cisco Counterfeiter Pleads Guilty to $100m Scheme
Dual US/Turkish citizen ran at least 19 companies

FBI Warns of Surge in Deepfake Sextortion Attempts
Fake imagery is being used to harass and extort victims

CVEs Surge By 25% in 2022 to Another Record High
Volume of new vulnerabilities has increased three-fold in a decade

Three Vulnerabilities Discovered in Game Dev Tool RenderDoc
Qualys identified one instance of privilege escalation and two heap-based buffer overflows

Exploitation of Vulnerabilities Have Soared, Unit 42 Report Finds
The Palo Alto Networks report also suggests Linux malware emerged as a growing concern last year



