Infosecurity News

Highline Public Schools Forced to Close By Cyber-Attack
Highline Public Schools in Washington State have now been closed for two days following the incident

China-Linked Threat Actors Target Taiwan Military Industry
TIDRONE group targets military, drone and satellite industries in Taiwan

DoJ Distributes $18.5m to Western Union Fraud Victims
The Justice Department has begun the latest round of fraud reimbursement from the Western Union Remission Fund

Critical SonicWall SSLVPN Bug Exploited By Ransomware Actors
Researchers have warned that a critical SonicWall vulnerability is being exploited in ransomware attacks

Technology Causes “Digital Entropy” as Firms Struggle With Governance
Increasingly complex regulations are stretching governance and compliance in organizations, warns the IAPP

DDoS Attacks Double With Governments Most Targeted
Distributed denial of service attacks continue to increase, with government the most targeted vertical

Cyber-Attack on Payment Gateway Exposes 1.7 Million Credit Card Details
A cyber-attack on Slim CD, which handles electronic payments for US and Canadian-based merchants, has potentially exposed the credit card details of 1.7 million people

Man Charged in AI-Generated Music Fraud on Spotify and Apple Music
A North Carolina resident made over $10m in unlawful royalty payments by producing hundreds of thousands of fake songs listened to by bots using AI

Car Giant Avis Reveals Breach Impacted 300,000 Customers
Rental hire company Avis has notified 300,000 customers of a data breach

TfL Admits Some Services Are Down Following Cyber-Attack
Transport for London has revealed several digital services are suspended after a cyber-attack last week

Spyware Vendors' Nebulous Ecosystem Helps Them Evade Sanctions
The secret web of at least 435 entities across 42 countries making up the spyware landscape facilitates unpunished security and human rights violations, the Atlantic Council found

US and Allies Accuse Russian Military of Destructive Cyber-Attacks
The joint government advisory highlighted the cyber activities of Unit 29155, which has launched destructive cyber-attacks against critical infrastructure globally

PyPI Revival Hijack Puts Thousands of Applications at Risk
Revival Hijack Python Package Index supply chain attack threatens 22,000 packages through malicious downloads

Security Budgets Come Under Pressure as “Hypergrowth” Ends
Despite rising threats researchers find a third of firms see flat or falling security budgets and hiring slows

UK Signs Council of Europe AI Convention
The first legally binding international treaty on AI was adopted by all 46 Council of Europe member states in May 2024

Cisco Warns of Critical Vulnerabilities in Smart Licensing Utility
Cisco has urged customers to apply software updates to fix the critical vulnerabilities, which could allow attackers to collect sensitive data or administer services

Researcher Finds Unfixable Yet Tricky to Exploit Flaw in Yubikeys
A security flaw exploiting side channel attacks means some Yubikeys can be cloned

OnlyFans Hackers Targeted With Infostealer Malware
Hackers interested in targeting OnlyFans users have themselves been singled out by an infostealing campaign

Russian Blamed For Mass Disinformation Campaign Ahead of US Election
The DoJ says Russia paid a US company $10m to post disinformation that attracted millions of views online

US Government Set Out to Improve Internet Routing Security
The US White House Office of the National Cyber Director proposes improving internet security by protecting the Border Gateway Protocol



