Infosecurity News
CISA: Patch Bug Exploited by Chinese E-commerce App
Zero-day was linked to malicious Pinduoduo apps
Police Crack Comms to Bust Money Laundering Group
Case relied on decrypting Sky ECC messages
CISA Asks Manufacturers to Prioritize Cybersecurity in Product Design
The guidelines were created by several cybersecurity organizations worldwide
RTM Locker Gang Targets Corporate Environments with Ransomware
Trellix said the businesslike approach of the group shows its organizational maturity
Hyundai Experiences Cybersecurity Issues: Breach and App Bugs
The breach affected Italian and French car owners as well as individuals who booked test drives
UK Education Sector Suffered Most from Ransomware in 2022
British schools were hit far more than those abroad
Five Arrests in Crackdown on $98m Investment Fraud Gang
Police estimate the victim count exceeds 30,000
Volume of Opaque Breach Notices Surges in Q1
Non-profit calls for more actionable information for victims
Over 20,000 Iowa Medicaid Members Affected By Data Breach
The breach was due to an attack on a contractor's computer systems
Pakistan-Aligned Hackers Disrupt Indian Education Sector
APT36 targeted institutions with malicious Office documents distributing Crimson RAT
GuLoader Targets US Financial Firms With Tax-Themed Phishing Lures
Security researchers at eSentire shared the findings in an advisory published on Monday
Stolen Card Volumes Plummet 94% Globally
Blow for card fraudsters, although UK is an outlier
Superyacht-Maker Hit by Easter Ransomware Attack
Bremen shipbuilder Lürssen tight-lipped on details
Rapid7 Has Good News for UK Security Posture
FTSE 350 firms on a par with global peers
CISA Updates Zero Trust Maturity Model With Public Feedback
The guidelines aim to further the US federal government's progress toward a zero trust approach
Lazarus Group's DeathNote Campaign Reveals Shift in Targets
Kaspersky uncovered a shift in the attack's targets and updated infection vectors in 2020
Emotet Climbs March 2023's Most Wanted Malware List With OneNote Campaign
The malicious software tool is now second on the list, one spot up from February's report
Researchers Uncover 7000 Malicious Open Source Packages
W4SP stealer copycats among the latest finds
New Zero-Click iOS Exploit Deploys Israeli Spyware
Researchers say exploit is delivered via iCloud calendar invitation
Ethical Hackers Could Earn up to $20,000 Uncovering ChatGPT Vulnerabilities
Following criticisms around ChatGPT’ security and privacy practices, OpenAI has launched a bug bounty program to help identify vulnerabilities across its systems and services
