Infosecurity News
Microsoft Names Russian Threat Actor "Cadet Blizzard"
Microsoft believes Cadet Blizzard, formerly DEV-0586, to be associated with the Russian GRU
Study Reveals Ransomware as Most Popular Cybercrime Service
Kaspersky also said 24% were infostealers and 18% included botnets, loaders and backdoors
#InfosecurityEurope: EMEA Retailers Experience Surge in Web Attacks, With Germany Heavily Targeted
Germany’s support of Ukraine was cited as a likely factor for the surge in attacks
#InfosecurityEurope: New Study Takes a Deep Dive Into Lookalike Attacks
The latest study from Infosecurity Europe exhibitor Infoblox reveals that cyber-attacks using lookalike domains are on the rise
#InfosecurityEurope: Cost-of-Living Crisis Drives Insider Threat Concerns
UK business leaders believe inflation is driving negligence and malicious behavior
#InfosecurityEurope: Breaches Down as Security Culture Improves
Telstra Purple research has some rare good news for CISOs
LockBit Makes $91m From US Victims in Two Years
Allied security agencies reveal figure in new advisory
Malicious Actors Exploit GitHub to Distribute Fake Exploits
The perpetrators went to great lengths to make their profiles appear genuine
PII Exposed: Unauthenticated IDOR in WooCommerce Stripe Plugin
The vulnerability affects versions 7.4.0 and below of the WordPress plugin
EU Passes Landmark Artificial Intelligence Act
The European Parliament adopted the latest draft of the legislation with an overwhelming majority
Researchers Uncover XSS Vulnerabilities in Azure Services
They could allow unauthorized access to sessions within the compromised Azure service iframe
#InfosecurityEurope: (ISC)² and CIISec Release Guide to Inclusive Language in Cybersecurity
The guide to inclusive language in cybersecurity aims to make the industry more welcoming to people from all backgrounds
#InfosecurityEurope: Cyber Leaders’ Plea to Tackle the Industry’s Mental Health Crisis
A new report looks at the scale of mental health challenges in cybersecurity, and urges action from stakeholders to try and mitigate the problem
Europol Warns of Metaverse and AI Terror Threat
Emerging technologies could help propaganda and recruitment efforts
MFA Bypass Kits Account For One Million Monthly Messages
Threat actors evolve to multi-factor authentication
No Zero-Days but PGM Flaws Cause Patch Tuesday Concern
Microsoft issues nearly 80 CVEs this month
Fortinet Addresses Critical FortiGate SSL-VPN Vulnerability
The release notes did not initially mention the critical SSL-VPN RCE vulnerability being addressed
Crypto Wallets Under Attack By DoubleFinger Malware
The malware discovered by Kaspersky employs a multistage attack method
#InfosecurityEurope: Armis Highlights Riskiest Devices in Critical Infrastructure
Engineering workstations, SCADA and automation servers, historians and PLCs identified as highest risk
#InfosecurityEurope: What TechUK's New Plan Means for Cybersecurity
The British tech trade association called for more collaboration between government and industry actors to improve the security of critical sectors
