Infosecurity News

RTM Locker Gang Targets Corporate Environments with Ransomware
Trellix said the businesslike approach of the group shows its organizational maturity

Hyundai Experiences Cybersecurity Issues: Breach and App Bugs
The breach affected Italian and French car owners as well as individuals who booked test drives

UK Education Sector Suffered Most from Ransomware in 2022
British schools were hit far more than those abroad

Five Arrests in Crackdown on $98m Investment Fraud Gang
Police estimate the victim count exceeds 30,000

Volume of Opaque Breach Notices Surges in Q1
Non-profit calls for more actionable information for victims

Over 20,000 Iowa Medicaid Members Affected By Data Breach
The breach was due to an attack on a contractor's computer systems

Pakistan-Aligned Hackers Disrupt Indian Education Sector
APT36 targeted institutions with malicious Office documents distributing Crimson RAT

GuLoader Targets US Financial Firms With Tax-Themed Phishing Lures
Security researchers at eSentire shared the findings in an advisory published on Monday

Stolen Card Volumes Plummet 94% Globally
Blow for card fraudsters, although UK is an outlier

Superyacht-Maker Hit by Easter Ransomware Attack
Bremen shipbuilder Lürssen tight-lipped on details

Rapid7 Has Good News for UK Security Posture
FTSE 350 firms on a par with global peers

CISA Updates Zero Trust Maturity Model With Public Feedback
The guidelines aim to further the US federal government's progress toward a zero trust approach

Lazarus Group's DeathNote Campaign Reveals Shift in Targets
Kaspersky uncovered a shift in the attack's targets and updated infection vectors in 2020

Emotet Climbs March 2023's Most Wanted Malware List With OneNote Campaign
The malicious software tool is now second on the list, one spot up from February's report

Researchers Uncover 7000 Malicious Open Source Packages
W4SP stealer copycats among the latest finds

New Zero-Click iOS Exploit Deploys Israeli Spyware
Researchers say exploit is delivered via iCloud calendar invitation

Ethical Hackers Could Earn up to $20,000 Uncovering ChatGPT Vulnerabilities
Following criticisms around ChatGPT’ security and privacy practices, OpenAI has launched a bug bounty program to help identify vulnerabilities across its systems and services

Microsoft Fixes Zero-Day Bug This Patch Tuesday
It is one of around 100 software flaws addressed this month

Malicious Android Apps Sold For Up to $20,000 on Darknet
Like on legitimate forums, Kaspersky explained there are various darknet offers for these apps

Apple Patches Two Zero-Days Exploited in the Wild
Vulnerabilities affect macOS Ventura 13.3.1 and iOS and iPadOS 16.4.1 devices



