Infosecurity News

UK Pension Scheme: Members Should Assume Capita Data Theft
USS says 470,000 individuals may be affected

PaperCut Software Flaw Sparks Ransomware Attacks, CISA Warns
The bug allowed cyber-criminals to remotely execute malicious code without authentication credentials

Toyota Admits Decade-Long Data Leak Affecting 2.15 Million Customers
Spokesperson Hideaki Homma said the cloud-based service issue affected only vehicles in Japan

Essential Addons Plugin Flaw Exposes One Million WordPress Websites
Patchstack cybersecurity experts described the vulnerability in an advisory published on Thursday

Manufacturers Targeted as Ransomware Victim Numbers Spike 27%
Smaller threat groups and coercive tactics are increasingly common

Software Supply Chain Attacks Hit 61% of Firms
Only half of firms are requesting a software bill of materials

Card 'ID Theft' Fraud Doubles in 2022
UK Finance figures show growing online menace

Threat Actors Use Babuk Code to Build Hypervisor Ransomware
According to SentinelOne, these novel variants emerged between 2022 and 2023

Ransomware Attacks Adapt With New Techniques: Kaspersky Report
Attackers are incorporating key attributes from defunct criminal groups

"Greatness" Phishing Tool Exploits Microsoft 365 Credentials
The findings come from security researchers at Cisco Talos

NCSC and ICO Dispel Incident Reporting Myths
Keeping attacks a secret only helps the criminals, they warn

Ransomware Group Tries and Fails to Extort Security Vendor Dragos
Threat actors put the pressure on with references to family members

Bad Bots Now Account For 30% of All Internet Traffic
Figure is highest since records began, says Imperva

Twitter Hacker Admits Guilt in New York Court, Extradited from Spain
O'Connor faces charges of computer intrusion, extortion, stalking, wire fraud and money laundering

Cyber-Criminals Exploit Hardware Wallet to Steal Almost $30,000
Kaspersky discovered that the wallet the victim purchased had been tampered with

NSA and Allies Uncover Russian Snake Malware Network in 50+ Countries
Cybercriminals used Snake to retrieve confidential documents related to international relations

Ransomware Encryption Rates Reach New Heights
Overall, ransomware infections remain steady, Sophos maintains

Spanish Police Arrest 40 in Phishing Gang Bust
Organized crime ring used phishing to fund operation

Microsoft Patches Three Zero-Day Bugs This Month
This month's Patch Tuesday more manageable for sysadmins

ISACA: Companies Still Face Many Barriers to Achieving Digital Trust
While ISACA’s concept of digital trust is increasingly recognized as key to digital transformation, business leaders are still faced with many bottlenecks



