Infosecurity News
CISA Directive Improves Asset Visibility, Vulnerability Detection on Federal Networks
It requires some federal agencies to perform automated asset discovery every seven days
Optus Confirms Hack Exposed Data of Nearly 2.1 Million Australians
The company confirmed it has employed Deloitte to lead a forensic review of the cyber-attack
Malicious Tor Browser Installers Spread Via Darknet Video on YouTube
The malicious variant distributed spyware to collect personal data and send it to the hacker
Bug Exploitation Now Top Ransomware Access Vector
Secureworks also warns of rise of info-stealers
Russian Hackers Take Aim at Kremlin Targets: Report
National Republican Army wants to overthrow Putin regime
Kardashian Charged by SEC After Crypto Post
Star failed to disclose payment for promotional content
Ex-NSA Employee Charged For Trying to Sell US Secrets
Dalke reportedly requested $85,000 in return for additional information in his possession
Phishing Campaigns Target KFC, McDonald's in Saudi Arabia, UAE, Singapore
Payment details of some of the victims were successfully stolen by the attackers
Lazarus Group Exploits Dell Driver Vulnerability to Bypass Windows Security
ESET said the vulnerability was exploited at least twice via a specific user-mode module
ICO Fines Four "Predatory" Privacy-Invading Firms
Marketers made over 820,000 illegal calls
LA Unified School District: Hackers Have Posted Stolen Data Online
School district is investigating authenticity of the trove
Healthcare Company Owners Get Jail Time for $7m Fraud Scheme
Duo paid bribes and kickbacks to patient marketers
Hackers Hide Malware in Windows Logo, Target Middle East Governments
The group continued to use the LookBack backdoor, but also several new types of malware
Hackers Backdoor Pirated Windows OS With Cryptominer and Xtreme RAT
The behavior of the actors was reportedly identical to what was described by Minerva Labs in 2021
Lazarus-Associated Hackers Weaponize Open-Source Tools Against Several Countries
The advisory suggests Zinc has targeted media, defense and aerospace, and IT services
Microsoft Confirms Two Exchange Zero-Day Vulnerabilities
The vulnerabilities were first discovered by Vietnamese cybersecurity firm GTSC
NCSC: UK Organizations Can Learn from Ukraine's Impressive Cyber Defenses
NCSC CEO, Lindy Cameron, outlines the UK's observations of the cyber dimension of the Russia-Ukraine conflict
Manufacturers Failing to Address Cybersecurity Vulnerabilities Liable Under New European Rules
The liability rules allow for compensation for damage when manufacturers fail to address cybersecurity vulnerabilities
Researchers Discover Chaos, a Golang Multipurpose Botnet
The tool was written in Chinese and seemed China-based due to its C2 infrastructure
Government, Union-Themed Lures Used to Deliver Cobalt Strike Payloads
Cisco Talos discovered the malicious campaign in August 2022
