Infosecurity News

Biden-Harris Administration Secures AI Commitments For Safety
Amazon, Anthropic, Google, Inflection, Meta, Microsoft and OpenAI all joined the initiative

Cyber-Attack Strikes Norwegian Government Ministries
Erik Hope revealed the attack was traced back to a vulnerability in a government supplier

Novel Open Source Supply Chain Attacks Target Banking Sector
Checkmarx has identified two distinct open-source software supply chain attacks targeting the financial sector for the first time

Booz Allen Pays $377m to Settle Government Fraud Case
Contractor was accused of violating False Claims Act

Thousands of Citrix Servers Exposed to Zero-Day Bug
Remote code execution attacks are ongoing

Clop Could Make $100m from MOVEit Campaign
Coveware claims small number of victims paid very high ransoms

US DoJ Announces Plan to Shakeup Cybercrime Investigations
In a speech, the DoJ’s Nicole M. Argentieri announced the merger of the NCET into the CCIPS

Plurilock Launches Generative AI 'Guardrails' Product for Workforces
PromptGuard is a new cloud access security broker (CASB) that supports employee AI use while ensuring that sensitive data is not released to AI systems

Russian Prosecutor Asks for 18 Years in Jail for Group-IB Founder
Ilya Sachkov, the founder of cybersecurity provider Group-IB, is accused of state treason

Chinese Hackers Breached Ambassador’s Email
Storm-0558 attack was revealed last week

Clop Drives Record Ransomware Activity in June
Scores of victims hit by MOVEit campaign

GitHub Warns Devs of North Korean Attacks
Social engineering campaign designed to deliver malicious npm packages

New Study Highlights Critical Infrastructure's Resilience
They exhibited a 20% higher threat detection behavior than the industry average

Zyxel Vulnerability Exploited by DDoS Botnets on Linux Systems
Fortinet discovered Multiple DDoS botnets, including Dark.IoT, a variant based on Mirai

Microsoft Strengthens Cloud Logging Against Nation-State Threats
The company said they collaborated closely with CISA to expand cloud logging

Old Roblox Data Leak Resurfaces, 4000 Users' Personal Information Exposed
Malicious actors have recently used an allegedly old data leak affecting Roblox developers

Half of AI Open Source Projects Reference Buggy Packages
Study also finds LLMs are poor at detecting malicious code

CNI Firms: Climate Tech is Increasing Cyber Risk
UK’s critical infrastructure sector concerned over expanding attack surface

Estee Lauder Breached by Two Ransomware Groups
Cosmetics giant confirms data was taken

Chinese APT41 Linked to WyrmSpy and DragonEgg Surveillanceware
Lookout attributed WyrmSpy and DragonEgg to APT41 due to overlapping Android signing certificates



