Infosecurity News
Novel Open Source Supply Chain Attacks Target Banking Sector
Checkmarx has identified two distinct open-source software supply chain attacks targeting the financial sector for the first time
Booz Allen Pays $377m to Settle Government Fraud Case
Contractor was accused of violating False Claims Act
Thousands of Citrix Servers Exposed to Zero-Day Bug
Remote code execution attacks are ongoing
Clop Could Make $100m from MOVEit Campaign
Coveware claims small number of victims paid very high ransoms
US DoJ Announces Plan to Shakeup Cybercrime Investigations
In a speech, the DoJ’s Nicole M. Argentieri announced the merger of the NCET into the CCIPS
Plurilock Launches Generative AI 'Guardrails' Product for Workforces
PromptGuard is a new cloud access security broker (CASB) that supports employee AI use while ensuring that sensitive data is not released to AI systems
Russian Prosecutor Asks for 18 Years in Jail for Group-IB Founder
Ilya Sachkov, the founder of cybersecurity provider Group-IB, is accused of state treason
Chinese Hackers Breached Ambassador’s Email
Storm-0558 attack was revealed last week
Clop Drives Record Ransomware Activity in June
Scores of victims hit by MOVEit campaign
GitHub Warns Devs of North Korean Attacks
Social engineering campaign designed to deliver malicious npm packages
New Study Highlights Critical Infrastructure's Resilience
They exhibited a 20% higher threat detection behavior than the industry average
Zyxel Vulnerability Exploited by DDoS Botnets on Linux Systems
Fortinet discovered Multiple DDoS botnets, including Dark.IoT, a variant based on Mirai
Microsoft Strengthens Cloud Logging Against Nation-State Threats
The company said they collaborated closely with CISA to expand cloud logging
Old Roblox Data Leak Resurfaces, 4000 Users' Personal Information Exposed
Malicious actors have recently used an allegedly old data leak affecting Roblox developers
Half of AI Open Source Projects Reference Buggy Packages
Study also finds LLMs are poor at detecting malicious code
CNI Firms: Climate Tech is Increasing Cyber Risk
UK’s critical infrastructure sector concerned over expanding attack surface
Estee Lauder Breached by Two Ransomware Groups
Cosmetics giant confirms data was taken
Chinese APT41 Linked to WyrmSpy and DragonEgg Surveillanceware
Lookout attributed WyrmSpy and DragonEgg to APT41 due to overlapping Android signing certificates
Critical API Security Gaps Found in Financial Services
The Salt Security report also notes a 244% surge in unique attackers between H1 and H2 2022
How Cyber Threat Intelligence Practitioners Should Leverage Automation and AI
The Cyber Threat Intelligence Summit discussed how automation and generative AI could help CTI practitioners tackle the overload of data they have to process
