Infosecurity News
MOVEit Exploitation Fallout Drives Record Ransomware Attacks
NCC Group researchers observed 502 ransomware attacks in July 2023, with a large proportion made up of Clop’s exploitation of MOVEit
Cyber-Attack on Australian Utility Firm Energy One Spreads to UK Systems
Australian utility company Energy One confirmed it had taken steps to limit a cyber-attack affecting its corporate systems
New APT Group Launches Supply Chain Campaign
Legitimate software used to deploy backdoor malware
Ivanti Warns of Critical New Zero-Day Bug
Latest vulnerability affects Ivanti Sentry
Tesla: Insiders Responsible For Major Data Breach
Two former employees shared information with German newspaper
Deceptive AI Bots Spread Malware, Raise Security Concerns
ESET said Facebook promoted the download of what seemed to be Google’s Bard AI tool
New Chrome Feature Alerts Users About Malicious Extensions
The feature, called the “Safety Check,” is designed to address three specific scenarios
New NCUA Rule Requires Swift Cyber Incident Reporting
Credit unions will be obligated to notify the NCUA about any cyber incident within 72 hours
US Space Industry Under Threat from Foreign Cyber Espionage
An advisory by US intelligence provides guidance for space firms on how to identify an espionage campaign, report and mitigate it
Government Urges More Students to Be Cyber Explorers
Over 50,000 have already signed up to program
Police Insider Tipped Off Criminal Friend About EncroChat Bust
Intelligence analyst posed a serious risk to Operation Venetic
Cuba Ransomware Group Steals Credentials Via Veeam Exploit
Russian gang operates comprehensive set of attack tools
QR Code Campaign Targets Major Energy Firm
Cofense said that over 29% of the malicious emails were directed at the energy sector giant
Cybersecurity Study Reveals Web App Vulnerability Crisis
Latest CyCognito report exposes 74% PII vulnerability, prompting urgent data protection
Interpol-Led Africa Cyber Surge II Nets 14 Cybercrime Suspects
The operation identified 20,000 cyber networks associated with financial losses exceeding $40m
UK’s AI Safety Summit Scheduled For Early November
Experts welcome efforts to safeguard society from emerging technologies
Chinese Hackers Use DLL Hijacking to Target Asian Gamblers
Espionage campaign shares similarities with previous attacks
Proxyjacking and Cryptomining Campaign Targets GitLab
Threat actors use several evasion techniques to stay hidden
CISA Launches Joint Initiative to Secure RMM Software
It was created with industry and government stakeholders via the Joint Cyber Defense Collaborative
Critical Flaws in PowerShell Gallery Enable Malicious Exploits
Aqua Nautilus exposed naming policy, ownership verification and module exposure vulnerabilities
