Infosecurity News
DarkGate Malware Campaigns Linked to Vietnam-Based Cybercriminals
WithSecure has found strong indicators that DarkGate attacks are being perpetrated by attackers also using the Ducktail infostealer
QR Codes Used in 22% of Phishing Attacks
The Hoxhunt Challenge was conducted in 38 organizations across nine industries and 125 countries
Valve Enhances Steam Security With SMS Verification
The move comes after threat actors compromised developers’ accounts
US Charge Man with Running Stolen Credentials Marketplace
Authorities believe the E-Root marketplace listed more than 350,000 computer credentials for sale
North Korean Attackers Exploiting Critical CI/CD Vulnerability
Microsoft has warned organizations using JetBrains TeamCity server to take immediate steps to mitigate this threat
Hacker Group GhostSec Unveils New Generation Ransomware Implant
The ex-hacktivist group is now fully involved with the ransomware-as-a-service market
Google Play Protect Bolsters Security Against Malicious Apps
New real-time scanning feature conducts analyses of an app’s code during the installation process
AI Adoption Surges But Security Awareness Lags Behind
The ExtraHop survey involved over 1200 global security and IT leaders
ISACA CEO Hails Europe as a Lighthouse of Capability
ISACA's new CEO highlights growth of its European membership as the Association works on an aggressive growth strategy
Global Economy Could Lose $3.5trn in Systemic Cyber-Attack
A Lloyd's research found that the US alone would experience a $1.1trn loss in the “hypothetical but plausible” risk scenario
Five Eyes Warn Deep Tech Start-Ups Against Nation-State Threats
The Five Eyes intelligence agencies want start-ups dealing with cutting-edge technology to bolster their protections against nation-state threats
FBI: Hackers Are Extorting Plastic Surgery Patients
Cybercriminals are harvesting sensitive medical data from plastic surgery offices as leverage for extortion demands
Persistent Espionage Campaign Targets APAC Governments
Kaspersky said the campaign exploiting USB drives first came to light in early 2023
Fake Browser Updates Used in Malware Distribution
Proofpoint have identified at least four distinct threat clusters
Rising AI-Fueled Phishing Drives Demand for Password Alternatives
FIDO Alliance’s third Online Authentication Barometer showed that AI-powered phishing is slowly prompting users to switch passwords for multi-factor authentication methods
Cisco Warns of Critical Vulnerability in IOS XE Software
The tech giant has issued guidance to mitigate exploitation of the flaw, which has the highest severity rating
A Third of Organizations Not Ready to Comply with NIS2
A new survey found that three-quarters of organizations in the UK are yet to address the five key requirements for compliance
Ransomware Targets Unpatched WS_FTP Servers
The threat actors attempted to escalate privileges using the open-source GodPotato tool
Growing Concern Over Role of Hacktivism in Israel-Hamas Conflict
Hacktivists claim DDoS attacks against Israeli websites as cybersecurity experts urge caution in believing these cyber-criminals’ claims
Signal Disputes Alleged Zero-Day Flaw
Reports emerged over the weekend regarding a zero-day exploit in the messaging app
