Infosecurity News

Euro Police Bust Multimillion-Dollar Crypto Fraud Gang
Criminal network may have made hundreds of millions from scams

Illegal Crypto Transaction Volumes Hit All-Time High
Sanctioned entities accounted for the largest volume

Millions of Insurance Customers Compromised Via Supplier
Aflac and Zurich reveal major breaches this week

The Guardian Confirms UK Staff Data Was Accessed in Ransomware Attack
The updates come from The Guardian's CEO Anna Bateson and its editor-in-chief Katharine Viner

Telegram Bot Abuse For Phishing Increased By 800% in 2022
The growth is associated with using HTML attachments as a delivery method in credential phishing

Cyber-Threat Actors Tailoring Attacks to Key Sectors
Darktrace’s latest report analyses findings from the energy, retail and healthcare sectors

Google Chrome 'SymStealer' Vulnerability Could Affect 2.5 Billion Users
The warning comes from Imperva's security researcher Ron Masas

Quarter of UK SMBs Hit by Ransomware in 2022
War in Ukraine is making firms more anxious

Twitter: Leak of 200 Million Accounts Not Due to Historic Bug
Social media firm claims its systems were not compromised

Royal Mail Halts International Deliveries After Cyber-Incident
It's still unclear whether customer data has been compromised

New APT Dark Pink Hits Asia-Pacific, Europe With Spear Phishing Tactics
The group began operations as early as mid-2021, but its activity increased in mid-to-late 2022

Multiple Danish Banks Disrupted By DDoS Cyber-Attack
The attack also affected IT financial industry solutions developer Bankdata

Sensitive Files From San Francisco Transit Police Allegedly Leaked
The leaked files include some 120,000 files, with specific allegations of child abuse

Customer and Employee Data the Top Prize for Hackers – Imperva
Customer and employee data accounts for almost half all stolen data while credit cards and password see a decline

Applications Five Years or Older Likely to have Security Flaws
Veracode’s 2023 State of Software Security Report is focused on flaw introduction

Over 100 CVEs Addressed in First Patch Tuesday of 2023
Microsoft's January Patch Tuesday resolved over 100 CVEs, including an actively exploited zero day

US Supreme Court Allows WhatsApp to Sue NSO Group
WhatsApp can now sue for damages ensued by the installation of the Pegasus spyware

Researchers Find Security Flaw in JsonWebToken Library Used By 20,000+ Projects
An attacker could perform RCE on a server verifying a maliciously crafted JWT request

GitHub Adds Features to Automate Vulnerability Code Scanning
Called “default setup,” the novel capability simplifies starting code scanning on repositories

UK Charities Offered Free Cyber Essentials Support
The NCSC’s new Funded Cyber Essentials Programme will support SMEs as well as charities



