Infosecurity News

US Healthcare Sector Breaches 342m+ Records Since 2009
Biggest year so far was 2020

NCSC Shares Guidance to Help Secure Large Construction Projects
The guide includes input from firms with experience in joint ventures, including major infrastructure contracts such as HS2 and Crossrail

Ex-Security Chief Accuses Twitter of Cybersecurity Negligence
Peiter Zatko admitted that he “reasonably feared Twitter could suffer an Equifax-level hack”

CISA Adds Palo Alto Networks' PAN-OS Vulnerability to Catalog
The flaw would allow a network-based unauthenticated threat actor to perform DoS attacks

Air-Gap Attack Exploits Gyroscope Ultrasonic Covert Channel to Leak Data
Gairoscope is a covert ultrasonic channel that does not require a microphone on the receiving side

Counterfeit Android Devices Revealed to Contain Backdoor Designed to Hack WhatsApp
At least four different smartphones affected: ‘P48pro’, ‘radmi note 8’, ‘Note30u’ and ‘Mate40’

Media Firms Twice as Vulnerable as Cross-Sector Average
Nearly a third have internet-facing bugs, says BlueVoyant

Configuration Errors to Blame for 80% of Ransomware
Microsoft urges better attack surface management

FBI: Beware Residential IPs Hiding Credential Stuffing
Feds warn of various tactics hackers use to hijack accounts

CEO of Blacklisted Israeli Spyware Maker NSO Steps Down
The resignation of CEO Shalev Hulio will see COO Yaron Shohat take the helm

Escanor RAT Malware Deployed Via Microsoft Office and PDF Documents
The malware was first released for sale on January 26, 2022 as an HVNC implant, but later evolved

Threat Actor Deploys Raven Storm Tool to Perform DDoS Attacks
The malware is reportedly capable of server takedown, Wi-Fi attacks and application layer attacks

DDoS Protection Weaponized to Deliver RATs
New campaign disguised as fake Cloudflare pop-up

Hackers Target ATM Maker for Bitcoins
General Bytes confirms serious attack last week

Car Dealership Hit by Major Ransomware Attack
Holdcroft Motor Group says most systems back online now

China-backed APT41 Group Hacked at Least 13 Victims in 2021
The majority of the attacks spotted relied primarily on SQL injections on targeted domains

Microsoft: Cryptojackers Continue to Evolve to Be Stealthier and Spread Faster
Cryptojackers take advantage of legitimate system binaries on more than 200,000 devices daily

Apple Warns of Critical Security Risk in Safari For iPhones, iPads and Macs
The vulnerability gave hackers the ability to infiltrate WebKit, the engine that powers Safari

Businesses Found to Neglect Cybersecurity Until it is Too Late
The UK government report found that many leaders only review cybersecurity practices following an incident

Estonia Repels Biggest Cyber-Attack Since 2007
Tiny Baltic nation riles Russia by removing monuments



