The scheme was uncovered by Kaspersky and has been operational since November 2023 This article has been indexed from www.infosecurity-magazine.com Read the original article: Fraudsters Exploit Telegram’s Popularity for Toncoin Scam
Category: www.infosecurity-magazine.com
Dependency Confusion Vulnerability Found in Apache Project
This occurs when a private package fetches a similar public one, leading to exploit due to misconfigurations in package managers This article has been indexed from www.infosecurity-magazine.com Read the original article: Dependency Confusion Vulnerability Found in Apache Project
CrushFTP File Transfer Vulnerability Lets Attackers Download System Files
CrushFTP is urging customers to download v11 of its file transfer platform, with attackers actively exploiting a vulnerability that allows them to download system files This article has been indexed from www.infosecurity-magazine.com Read the original article: CrushFTP File Transfer Vulnerability…
NSA Launches Guidance for Secure AI Deployment
The new document is the first release from NSA’s Artificial Intelligence Security Center (AISC), in partnership with other government agencies in the US and other Five Eyes countries This article has been indexed from www.infosecurity-magazine.com Read the original article: NSA…
NCSC Announces PwC’s Richard Horne as New CEO
The UK’s National Cyber Security Centre will see Richard Horne take over as its new boss in the autumn This article has been indexed from www.infosecurity-magazine.com Read the original article: NCSC Announces PwC’s Richard Horne as New CEO
MITRE Reveals Ivanti Breach By Nation State Actor
Non-profit MITRE says a sophisticated state group breached its network via two chained Ivanti zero-days This article has been indexed from www.infosecurity-magazine.com Read the original article: MITRE Reveals Ivanti Breach By Nation State Actor
Alarming Decline in Cybersecurity Job Postings in the US
This drop represents a direct threat to US national cybersecurity infrastructure, said CyberSN representatives in their report This article has been indexed from www.infosecurity-magazine.com Read the original article: Alarming Decline in Cybersecurity Job Postings in the US
Akira Ransomware Group Rakes in $42m, 250 Organizations Impacted
A joint advisory from Europol and US and Dutch government agencies estimated that Akira made around $42m in ransomware proceeds from March 2023 to January 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Akira Ransomware Group…
Quishing Attacks Jump Tenfold, Attachment Payloads Halve
The figures come from Egress’s latest report, which also suggests secure email gateways lag behind tech advancements This article has been indexed from www.infosecurity-magazine.com Read the original article: Quishing Attacks Jump Tenfold, Attachment Payloads Halve
Russia’s Sandworm Upgraded to APT44 by Google’s Mandiant
Mandiant has confirmed that Sandworm is responsible for many cyber-attacks against Ukraine has close ties with a Russian hacktivist group This article has been indexed from www.infosecurity-magazine.com Read the original article: Russia’s Sandworm Upgraded to APT44 by Google’s Mandiant
New Cyber-Threat MadMxShell Exploits Typosquatting and Google Ads
Zscaler also confirmed MadMxShell uses DLL sideloading and DNS tunneling for C2 communication This article has been indexed from www.infosecurity-magazine.com Read the original article: New Cyber-Threat MadMxShell Exploits Typosquatting and Google Ads
US Election Officials Told to Prepare for Nation-State Influence Campaigns
A US government advisory sets out actions election officials need to take to mitigate the impact of nation-state influence campaigns ahead of the November elections This article has been indexed from www.infosecurity-magazine.com Read the original article: US Election Officials Told…
Trust in Cyber Takes a Knock as CNI Budgets Flatline
Bridewell report reveals critical infrastructure firms are losing faith in their defensive tooling This article has been indexed from www.infosecurity-magazine.com Read the original article: Trust in Cyber Takes a Knock as CNI Budgets Flatline
UK Police Lead Disruption of £1m Phishing-as-a-Service Site LabHost
The Metropolitan Police and partners have disrupted the prolific LabHost phishing-as-a-service platform This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Police Lead Disruption of £1m Phishing-as-a-Service Site LabHost
Linux Cerber Ransomware Variant Exploits Atlassian Servers
The attacks exploit CVE-2023-22518, a critical flaw in Atlassian Confluence Data Center and Server This article has been indexed from www.infosecurity-magazine.com Read the original article: Linux Cerber Ransomware Variant Exploits Atlassian Servers
North Korean Group Kimsuky Exploits DMARC and Web Beacons
Proofpoint confirmed Kimsuky has directly contacted foreign policy experts since 2023 through seemingly benign email conversations This article has been indexed from www.infosecurity-magazine.com Read the original article: North Korean Group Kimsuky Exploits DMARC and Web Beacons
US Government and OpenSSF Partner on New SBOM Management Tool
OpenSSF, in collaboration with the US Government, has developed Protobom, a open source tool designed to simplify SBOM management for organizations This article has been indexed from www.infosecurity-magazine.com Read the original article: US Government and OpenSSF Partner on New SBOM…
EU Elections: Pro-Russian Propaganda Exploits Meta’s Failure to Moderate Political Ads
This year’s EU elections will be a stress test to see whether the newly adopted Digital Services Act can efficiently mitigate misinformation threats This article has been indexed from www.infosecurity-magazine.com Read the original article: EU Elections: Pro-Russian Propaganda Exploits Meta’s…
Ivanti Patches Two Critical Avalanche Flaws in Major Update
Ivanti has fixed two critical vulnerabilities in its Avalanche MDM product which could lead to remote code execution This article has been indexed from www.infosecurity-magazine.com Read the original article: Ivanti Patches Two Critical Avalanche Flaws in Major Update
Insider Threats Surge 14% Annually as Cost-of-Living Crisis Bites
Cifas reveals 14% rise in dishonest employees, driven mainly by financial necessity last year This article has been indexed from www.infosecurity-magazine.com Read the original article: Insider Threats Surge 14% Annually as Cost-of-Living Crisis Bites