Infosecurity News
CISA Warns of Hackers Exploiting Multiple Vulnerabilities in the Zimbra Collaboration Suite
The advisory was compiled by CISA with the Multi-State Information Sharing & Analysis Center
RubyGems Mandates MFA for Top-100 Package Maintainers
The package manager started enforcing MFA on owners of gems with over 180 million total downloads
Organizations Struggle to Fend Off Cloud and Web Attacks
The study queries more than 950 IT and security professionals across the Americas, EMEA and APAC
Identity Scams Soar to Make 2021 a Record Year
Non-profit says Google Voice scams were the most reported threat
USBs Still a Major OT Infection Vector
Manufacturing was most exposed to OT threats in 2021
Bug Bounty Giant Slams Quality of Vendor Patching
Zero Day Initiative says incomplete or faulty patches now commonplace
Two Additional Malicious Python Libraries Found on PyPI Repository
The new packages were masquerading as one of the most popular open-source packages on PyPI
Healthcare Provider Issues Warning After Tracking Pixels Leak Patient Data
The leak was caused by incorrect configurations of an online tracking tool from Meta
New Attack Weaponizes PLCs to Hack Enterprise and OT Networks
The research resulted in proof-of-concept exploits against seven market-leading automation firms
#DEFCON: Electrovolt Exploits Against Electron Desktop Apps Exposed
Electron-based desktop application including Discord, Microsoft Teams and VScode were at risk from a series of vulnerabilities
#DEFCON: How US Teen RickRolled His High School District
American teenager explains how he was able to hack his local high school district
Hybrid Vishing Attacks Soar 625% in Q2
Agari warns of multi-stage phishing threat
Microsoft Disrupts Russian Cyber-Espionage Group Seaborgium
APT group focused on classic data theft via email accounts
Water Company Says Supply Safe After Ransom Group Claims
South Staffordshire Water admits it was compromised
Software Patches Flaw on macOS Could Let Hackers Bypass All Security Levels
After deploying the initial attack, the researcher was able to escape the macOS sandbox
Luckymouse Uses Compromised MiMi Chat App to Target Windows and Linux Systems
The news comes from two different security reports published by SEKOIA and Trend Micro
Dutch Authorities Arrest Tornado Cash Developer Following US Sanctions on Crypto Mixer Firm
The Financial Advanced Cyber Team of the FIOD started the criminal investigation in June
#DEFCON: How Sanctions Impact Internet Operators
Following government sanctions against Russia, Internet providers have had to learn how to implement actions
#DEFCON: CISA Director Praises Congress and International Cybersecurity Cooperation
Jen Easterly discusses the progress and challenges at CISA
Three Extradited from UK to US on $5m BEC Charges
Nigerian nationals accused of targeting US universities
