Infosecurity News
How DORA Will Force Financial Firms to Adopt Cyber Resilience
The EU's Digital Operational Resilience Act is the first regulation to embrace cyber resilience
Clop Starts MOVEit Extortion as New Bug is Discovered
Progress Software scrambles to release a new security update
CISA and NSA Publish BMC Hardening Guidelines
Vulnerabilities in Baseboard Management Controllers (BMCs) serve as entry points for malicious actors
Microsoft Names Russian Threat Actor "Cadet Blizzard"
Microsoft believes Cadet Blizzard, formerly DEV-0586, to be associated with the Russian GRU
Study Reveals Ransomware as Most Popular Cybercrime Service
Kaspersky also said 24% were infostealers and 18% included botnets, loaders and backdoors
#InfosecurityEurope: EMEA Retailers Experience Surge in Web Attacks, With Germany Heavily Targeted
Germany’s support of Ukraine was cited as a likely factor for the surge in attacks
#InfosecurityEurope: New Study Takes a Deep Dive Into Lookalike Attacks
The latest study from Infosecurity Europe exhibitor Infoblox reveals that cyber-attacks using lookalike domains are on the rise
#InfosecurityEurope: Cost-of-Living Crisis Drives Insider Threat Concerns
UK business leaders believe inflation is driving negligence and malicious behavior
#InfosecurityEurope: Breaches Down as Security Culture Improves
Telstra Purple research has some rare good news for CISOs
LockBit Makes $91m From US Victims in Two Years
Allied security agencies reveal figure in new advisory
Malicious Actors Exploit GitHub to Distribute Fake Exploits
The perpetrators went to great lengths to make their profiles appear genuine
PII Exposed: Unauthenticated IDOR in WooCommerce Stripe Plugin
The vulnerability affects versions 7.4.0 and below of the WordPress plugin
EU Passes Landmark Artificial Intelligence Act
The European Parliament adopted the latest draft of the legislation with an overwhelming majority
Researchers Uncover XSS Vulnerabilities in Azure Services
They could allow unauthorized access to sessions within the compromised Azure service iframe
#InfosecurityEurope: (ISC)² and CIISec Release Guide to Inclusive Language in Cybersecurity
The guide to inclusive language in cybersecurity aims to make the industry more welcoming to people from all backgrounds
#InfosecurityEurope: Cyber Leaders’ Plea to Tackle the Industry’s Mental Health Crisis
A new report looks at the scale of mental health challenges in cybersecurity, and urges action from stakeholders to try and mitigate the problem
Europol Warns of Metaverse and AI Terror Threat
Emerging technologies could help propaganda and recruitment efforts
MFA Bypass Kits Account For One Million Monthly Messages
Threat actors evolve to multi-factor authentication
No Zero-Days but PGM Flaws Cause Patch Tuesday Concern
Microsoft issues nearly 80 CVEs this month
Fortinet Addresses Critical FortiGate SSL-VPN Vulnerability
The release notes did not initially mention the critical SSL-VPN RCE vulnerability being addressed
