Infosecurity News
Iranian Group TA453 Launches Phishing Attacks with BlackSmith
TA453, also known as Charming Kitten, launched a targeted phishing attack using PowerShell malware BlackSmith
Vermin Cyber-Attacks Target Ukraine, Exploiting Kursk Battle
Ukraine detected cyber-attacks using malicious emails containing photos of alleged prisoners of war from the Kursk direction
Iran Behind Trump Campaign Hack, US Government Confirms
The ODNI, FBI and CISA confirmed Iran was behind a reported hack of a Trump campaign website as part of efforts to stoke discord and undermine the US elections
Former Congressman Santos Admits Identity Theft and Fraud
Former US Representative George Santos pleads guilty to multiple fraud and identity theft charges
Jewish Home Lifecare Notifies 100,000 Victims of Ransomware Breach
Healthcare organization Jewish Home Lifecare has revealed that a 2024 data breach hit over 100,000 customers
FBI and CISA Assure Public on Election Ransomware Security
The FBI and CISA said ransomware on local networks may cause delays but won't impact voting system integrity
New Tool Xeon Sender Enables Large-Scale SMS Spam Attacks
Xeon Sender features SMS spam via APIs, Nexmo/Twilio credentials validation and phone number generation
Microsoft Apps for macOS Exposed to Library Injection Attacks
Cisco Talos researchers found a flaw in eight Microsoft apps for macOS that could enable library injection attacks, putting sensitive data at risk
Ransomware Resilience Drives Down Cyber Insurance Claims
Cyber insurance claims in the UK have fallen by over a third between 2022 and 2024 as businesses refuse ransom payments
NCSC Opens Cyber Resilience Audit Scheme to Applicants
The UK’s National Cyber Security Centre wants prospective auditors to check compliance with its Cyber Assessment Framework
Unicoin Staff Locked Out of G-Suite in Mystery Attack
Employees at crypto firm Unicoin couldn’t access Google services for four days during a recent breach
US Bipartisan Committee Urges Investigation Into Chinese Wi-Fi Routers
Two Congressmen fear that the Chinese government might use TP-Link Wi-Fi routers to deploy hacking and espionage campaigns in the US
Microsoft Mandates MFA for All Azure Sign-Ins
Microsoft is mandating MFA for all Azure sign-ins, with customers given 60-day advance notices to start implementation
Florida-Based National Public Data Confirms Data Breach
The US data broker did not address the threat actor’s claim that the breach concerns 2.9 billion records
Geopolitical Tensions Drive Explosion in DDoS Attacks
Radware found that Web DDoS attacks rose by 265% in H1 2024, driven by hacktivist groups amid rising geopolitical tensions
Cyber-criminals Exploited Paris Olympics With Fake Domains
166 Olympics-related domains displayed signs of DNS abuse like keyword stuffing and typosquatting
Advanced ValleyRAT Campaign Hits Windows Users in China
Discovered by FortiGuard Labs, the ValleyRAT campaign targets Chinese Windows systems
Russia's FSB Behind Massive Phishing Espionage Campaign
Citizen Lab attributed the campaign to Coldriver, a notorious FSB subordinate team, and Coldwastrel, a new, Russian-aligned group
Another Record Year For Ransomware Beckons as Crypto Profits Hit $460m
Ransom payments in the first half of 2024 hit $460m, according to Chainalysis
Google Warns of Iranian Cyber-Attacks on Presidential Campaigns
Google has highlighted sophisticated spearphishing attacks by Iranian state actor APT42 targeting individuals associated with the US Presidential campaign
