Infosecurity News
CISA Updates Guidelines to Increase Resilience of Infrastructure Planning
They expand the framework's scope by adding new resources and tools to support SLTT partners
Meta Removes Pro-US Accounts in Middle East and Central Asia
The operation relied on many internet services, including Telegram, Twitter, YouTube and others
Qakbot Infections Linked to Black Basta Ransomware Campaign
Threat actors obtained admin access in two hours and then deployed ransomware in under 12 hours
Yanluowang Ransomware's Russian Links Laid Bare
Another dump of chat records provides insight into threat group
UK Privacy Tsar Defends Controversial Enforcement Strategy
Information commissioner wants to avoid "money-go-round" of government fines
Dozens of Russian Groups Steal 50 Million User Passwords
Info-stealing malware infected nearly one million devices in 2022
Ducktail Hacker Group Evolves, Targets Facebook Business Accounts
Activity observed since early September featured new avenues to spear-phish targets
US Takes Down Domains Used in 'Pig Butchering' Cryptocurrency Scheme
The US Attorney's Office for the Eastern District of Virginia made the announcement on Monday
Firms Spend $1197 Per Employee Yearly to Address Cyber-Attacks
The data excludes compliance fines, ransomware costs and losses from non-operational processes
Estonian Duo Arrested for Masterminding $575m Ponzi Scheme
US authorities unseal 18-count indictment
Experts Warn Threat Actors May Abuse Red Team Tool Nighthawk
C2 framework could be the next Cobalt Strike, says Proofpoint
Credential Stuffers Steal $300K from DraftKings Customers
Complaints about poor customer service flood Twitter
Google Wins Legal Battle Against Glupteba Botnet
The tech giant said the court's ruling against the botnet operators set a crucial legal precedent
Thousands of Algolia API Keys Could Expose Users' Data
The majority were from shopping, education, lifestyle, business and medical firms
Luna Moth Phishing Extortion Campaign Targets Businesses in Multiple Sectors
It leverages extortion without encryption and has cost victims hundreds of thousands of dollars
Private Equity Exposed by Cyber-Hygiene Shortcomings
Fifth of portfolio companies feature "zero tolerance findings"
New AXLocker Ransomware Steals Victims' Discord Tokens
Researchers also discover two additional new variants
Ten Charged in $11m Healthcare BEC Plots
Several of the men diverted funds intended for hospitals
CISA, NSA, ODNI Publish Software Supply Chain Guidelines For Customers
The come after the August release of guidance for developers and the October one for suppliers
Shoppers Warned Stay Alert this Black Friday as Hackers Renew Efforts
Cyber-criminals are exploiting the busy period during both purchase and delivery stages
