Infosecurity News

US Man Charged in $110m Crypto Trading Scheme
Individual accused of draining funds from trading platform Mango Markets

Quarter of CFOs Have Suffered $1m+ Breaches
Similar number expect surge in cyber-attacks this year

IT Leaders Reveal Cyber Fears Around ChatGPT
A BlackBerry survey reveals 51% of security leaders expect ChatGPT to be at the heart of a successful cyber-attack within a year

Threat Actors Use ClickFunnels to Bypass Security Services
They created pages with malicious links and ultimately conducted credential-harvesting attacks

Arnold Clark Confirms Customer Data Compromised in Breach
Affected data includes names, contact details, vehicle details and ID documents, among others

Lazarus Group Attack Identified After Operational Security Fail
The new campaign highlighted several "noteworthy developments" in TTPs

Women in CyberSecurity Calls for Participants for New Measuring Inclusion Workshops
WiCyS is calling for workshop participants to inform its State of Inclusion of Women in Cybersecurity report

Record $3.8bn Stolen Via Crypto in 2022
North Korean hackers were a major cause

Researchers Warn of Crypto Scam Apps on Apple App Store
Sophos found two fraudulent crypto trading apps

City of London on High Alert After Ransomware Attack
Critical trading software firm Ion is compromised

Ransomware Attack Forces Closure of Nantucket Schools
The district’s superintendent Elizabeth Hallett announced the decision in an email to parents

Google Fi Confirms Data Breach, Hints At Link to T-Mobile Hack
The company uses a combination of T-Mobile and US Cellular for network connectivity

Researchers Claim High-Risk Vulnerabilities Found in 87% of All Container Images
But only 15% of these vulnerabilities with available fixes are in packages loaded at runtime

Almost all Organizations are Working with Recently Breached Vendors
The latest supply chain security report from SecurityScorecard and the Cyentia Institute shows worrying findings

BEC Group Uses Open Source Tactics in Hundreds of Attacks
Firebrick Ostrich has impersonated over 150 organizations

Thriving Dark Web Trade in Fake Security Certifications
Exam cheats, course leaks and fake certs offer career shortcuts

Nearly 30,000 QNAP Devices Exposed Via New Bug
Vulnerability could be exploited by ransomware groups

GitHub Confirms Signing Certificates Stolen in Cyber-Attack, Revokes Them
Revoking these certificates will invalidate some versions of GitHub Desktop for Mac and Atom

DocuSign Brand Impersonation Attack Bypasses Security Measures, Targets Over 10,000
Victims were redirected to a fake landing page to exfiltrate their Proofpoint credentials

Financial Services Targeted in 28% of UK Cyber-Attacks Last Year
API attacks, bad bots and DDoS attacks were the industry's main security challenges



