Infosecurity News

Biden Announces National Cyber Workforce and Education Strategy
The White House says that filling cyber job vacancies is a national security imperative

UK Military Embraces Security by Design
The initiative is designed to transform how cybersecurity is addressed in capability programs across the MoD

Ongoing STARK#MULE Attack Campaign Discovered
The campaign appears directed at Korean-speaking victims, indicating an origin in North Korea

Global Lawyers Unveil Cyber Best Practices for Execs
International Bar Association offers practical policy recommendations

Think Tank: Insurers Not Fuelling Ransomware Market
RUSI report makes recommendations for the industry

CISA: New Submarine Backdoor Used in Barracuda Campaign
Chinese threat actor used malware in attacks

Security Serious Unsung Heroes Awards 2023 Open for Nominations
Nominations are open for the eighth annual Security Serious Unsung Heroes Awards.

UK MoD Error Sends Emails to Russia’s Ally Instead of US
The MoD clarified that the incident involved fewer than 20 emails and none were top secret

New Study Reveals Forged Certificate Attack Risks
Attempts can lead to unauthorized access to important company resources

40% of Ubuntu Cloud Workloads Vulnerable to Exploits
Wiz Research said the vulnerabilities were discovered in the Linux filesystem, OverlayFS

Microsoft Accused of Negligence in Recent Email Compromise
In an open letter, Senator Ron Wyden urged federal agencies to investigate Microsoft following a Chinese campaign that compromised US government emails

Australia and US Issue Warning About Web App Threats
The advisory issues recommendations for developers and end users on reducing the prevalence of access control vulnerabilities

SSNDOB Marketplace Admin Pleads Guilty
Site was used to trade stolen data

North Korean Hackers Bag Another $100m in Crypto Heists
Two new breaches traced back to prolific Lazarus group

MOVEit Campaign Claims Millions More Victims
US government services firm is latest to reveal compromise

Security Incident Impacts CardioComm’s Operations
Several of the company’s products are affected by the outage

High Severity Vulnerabilities Discovered in Ninja Forms Plugin
The popular forms builder plugin for WordPress has over 900,000 active installations

China’s Wuhan Earthquake Center Suffers Cyber-Attack
Responding to the news, a Chinese Foreign Ministry Spokesperson claimed the US is engaging in malicious cyber operations across the world

“Mysterious Elephant” Emerges, Kaspersky Reports
Kaspersky also sheds light on more information related to the “Operation Triangulation” campaign

OpenAI, Microsoft, Google and Anthropic Form Body to Regulate AI
Four generative AI pioneers launched the Frontier Model Forum, which will focus on ‘safe and responsible’ creation of new AI models



