Infosecurity News

US Primary Care Services Shuttered After Cyber-Attack
Prospect Medical Holdings took its systems offline on Friday and initiated an investigation

Invisible Ad Fraud Targets Korean Android Users
McAfee said the library registers device information and drains battery life and mobile data

FBI Warns Against Criminals Posing as NFT Developers
Users are tricked into connecting their cryptocurrency wallets to malicious smart contracts

Russian Hacktivists Overwhelm Spanish Sites With DDoS
Attacks come after Prime Minister’s trip to Kyiv

Colorado Education Department Suffers Ransomware Breach
Past and current staff and students are impacted

Clop Gang Offers Data Downloads Via Torrents
Latest innovation designed to speed up download process

Stealthy npm Malware Exposes Developer Data
Phylum said the attack demonstrated a carefully crafted development cycle

VMConnect: Python PyPI Threat Imitates Popular Modules
ReversingLabs said the attackers displayed a sophisticated approach and techniques

CISA Announces 2024-2026 Strategic Plan
The US’ leading cybersecurity agency calls for us to “embody the hacker spirit” in its latest strategic plan

Sophisticated Phishing Exploits Zero-Day Salesforce Vulnerability
Guardio Labs detected the campaign and detailed its findings in a technical blog post

Microsoft Warns of Growing Cyber-Threats to Sporting Events
Microsoft observed attackers continually attempting to compromise connected systems at the 2022 World Cup

Credentials Account For Over Half of Cloud Compromises
Google Cloud figures also point to misconfiguration

Legacy Flaws Dominate Top 12 Vulnerabilities List
Security agencies urge timely patching

UK Government: Cyber-Attacks Could Kill or Maim Thousands
Risk assessment predicts critical infrastructure attacks could cost billions

Hacktivist Collective “Mysterious Team Bangladesh” Revealed
Group-IB said the group carried out 750 DDoS attacks and more than 70 website defacements in a year

Cisco Talos Discusses Flaws in SOHO Routers Post-VPNFilter
Over the last five years the firm reported and mitigated 141 advisories, encompassing 289 CVEs

Microsoft Teams Targeted in Midnight Blizzard Phishing Attacks
The Russia-based actor exploited compromised Microsoft 365 tenants owned by small businesses

Cyber-Attacks Targeting Government Agencies Increase 40%
BlackBerry found that public services now rank as the second most targeted industry by threat actors

Menlo Leverages Advanced Technology to Combat Surging Browser Threats
Menlo Security co-founder highlights the challenge relating to web browser security and how to overcome them

Humans Unable to Reliably Detect Deepfake Speech
Research from UCL finds that humans struggle to identify deepfake audio



