IoT manufacturers, retailers and importers must comply with new security legislation, the PSTI act, from today This article has been indexed from www.infosecurity-magazine.com Read the original article: New UK Smart Device Security Law Comes into Force
Category: www.infosecurity-magazine.com
New UK Smart Device Security Law Comes into Force Today
IoT manufacturers, retailers and importers must comply with new security legislation, the PSTI act, from today This article has been indexed from www.infosecurity-magazine.com Read the original article: New UK Smart Device Security Law Comes into Force Today
Okta Warns Customers of Credential Stuffing Barrage
Okta has issued customers with new advice on how to block mounting credential stuffing attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: Okta Warns Customers of Credential Stuffing Barrage
Over 850 Vulnerable Devices Secured Through CISA Ransomware Program
CISA’s RVWP program sent 1754 ransomware vulnerability notifications to government and critical infrastructure entities in 2023, leading to 852 devices being secured This article has been indexed from www.infosecurity-magazine.com Read the original article: Over 850 Vulnerable Devices Secured Through CISA…
Ring to Pay Out $5.6m in Refunds After Customer Privacy Breach
The US Federal Trade Commission will send $5.6m worth of refunds to the spied-on customers of the Amazon-owned home camera company This article has been indexed from www.infosecurity-magazine.com Read the original article: Ring to Pay Out $5.6m in Refunds After…
US Takes Down Illegal Cryptocurrency Mixing Service Samourai Wallet
The two founders of Samourai Wallet have been charged with money laundering and unlicensed money-transmitting offenses This article has been indexed from www.infosecurity-magazine.com Read the original article: US Takes Down Illegal Cryptocurrency Mixing Service Samourai Wallet
State-Sponsored Espionage Campaign Exploits Cisco Vulnerabilities
An advisory from Cisco Talos has highlighted a sophisticated cyber-espionage campaign targeting government networks globally This article has been indexed from www.infosecurity-magazine.com Read the original article: State-Sponsored Espionage Campaign Exploits Cisco Vulnerabilities
DragonForce Ransomware Group Uses LockBit’s Leaked Builder
Cyber threat intelligence provider Cyble found that DragonForce was using a ransomware binary based on LockBit Black’s builder This article has been indexed from www.infosecurity-magazine.com Read the original article: DragonForce Ransomware Group Uses LockBit’s Leaked Builder
11% of Cybersecurity Teams Have Zero Women
A new ISC2 study highlights the lack of diversity in cybersecurity with only 4% of teams having a majority of women, while 11% have none at all This article has been indexed from www.infosecurity-magazine.com Read the original article: 11% of…
Online Banking Security Still Not Up to Par, Says Which?
Consumer rights group Which? has found more security gaps in UK banking sites and apps This article has been indexed from www.infosecurity-magazine.com Read the original article: Online Banking Security Still Not Up to Par, Says Which?
BEC and Fund Transfer Fraud Top Insurance Claims
Email-borne fraud accounted for more insurance claims than any other category in 2023, says Coalition This article has been indexed from www.infosecurity-magazine.com Read the original article: BEC and Fund Transfer Fraud Top Insurance Claims
High Performance Podcast Duo to Unveil Secrets of Success at Infosecurity Europe 2024
Jake Humphrey and Professor Damian Hughes, the minds behind the High Performance Podcast, share their top non-negotiable behaviours for success in cybersecurity This article has been indexed from www.infosecurity-magazine.com Read the original article: High Performance Podcast Duo to Unveil Secrets…
US Congress Passes Bill to Ban TikTok
The bill that could see TikTok banned in the US has been approved by the House of Representatives and the Senate This article has been indexed from www.infosecurity-magazine.com Read the original article: US Congress Passes Bill to Ban TikTok
US Sanctions Iranian “Fronts” for Cyber-Attacks on American Entities
The US Treasury announced sanctions on two companies and four individuals for cyber campaigns conducted on behalf of the Iranian government This article has been indexed from www.infosecurity-magazine.com Read the original article: US Sanctions Iranian “Fronts” for Cyber-Attacks on American…
Leeds Talent Pool Attracts BlueVoyant’s First UK Security Operations Center
The proximity of organizations’ headquarters, like Asda’s and NHS England’s, prompted BlueVoyant to choose Leeds as the location for its first UK SOC This article has been indexed from www.infosecurity-magazine.com Read the original article: Leeds Talent Pool Attracts BlueVoyant’s First…
Security Leaders Braced for Daily AI-Driven Attacks by Year-End
Netacea research found that 93% of security leaders expect to face daily AI-driven attacks by the end of 2024, with 65% predicting that offensive AI will be the norm for cybercriminals This article has been indexed from www.infosecurity-magazine.com Read the…
Fifth of CISOs Admit Staff Leaked Data Via GenAI
One in five UK organizations have had corporate data exposed via generative AI, says RiverSafe This article has been indexed from www.infosecurity-magazine.com Read the original article: Fifth of CISOs Admit Staff Leaked Data Via GenAI
North Korean Hackers Target Dozens of Defense Companies
North Korean hackers ran a year-long cyber-espionage campaign against South Korean defense companies This article has been indexed from www.infosecurity-magazine.com Read the original article: North Korean Hackers Target Dozens of Defense Companies
US Imposes Visa Restrictions on Alleged Spyware Figures
The move is reportedly part of a broader effort to counter the misuse of surveillance technology This article has been indexed from www.infosecurity-magazine.com Read the original article: US Imposes Visa Restrictions on Alleged Spyware Figures
End-to-End Encryption Sparks Concerns Among EU Law Enforcement
The call comes amid the rollout of end-to-end encryption on Meta’s Messenger platform This article has been indexed from www.infosecurity-magazine.com Read the original article: End-to-End Encryption Sparks Concerns Among EU Law Enforcement
Millions of Americans’ Data Potentially Exposed in Change Healthcare Hack
Millions of Americans may be impacted by the Change Healthcare data breach as UnitedHealth confirms exposed data includes personal and health information This article has been indexed from www.infosecurity-magazine.com Read the original article: Millions of Americans’ Data Potentially Exposed in…
Vulnerability Exploitation on the Rise as Attackers Ditch Phishing
Mandiant’s latest M-Trends report found that vulnerability exploitation was the most common initial infection vector in 2023, making up 38% of intrusions This article has been indexed from www.infosecurity-magazine.com Read the original article: Vulnerability Exploitation on the Rise as Attackers…
Vulnerability Exploitation on the Rise as Attacker Ditch Phishing
Mandiant’s latest M-Trends report found that vulnerability exploitation was the most common initial infection vector in 2023, making up 38% of intrusions This article has been indexed from www.infosecurity-magazine.com Read the original article: Vulnerability Exploitation on the Rise as Attacker…
Russian Sandworm Group Hit 20 Ukrainian Energy and Water Sites
Notorious APT44 group Sandworm launched a major campaign against Ukrainian critical infrastructure in March This article has been indexed from www.infosecurity-magazine.com Read the original article: Russian Sandworm Group Hit 20 Ukrainian Energy and Water Sites
Russian APT28 Group in New “GooseEgg” Hacking Campaign
Microsoft has warned of a long-running credential stealing campaign from Russia’s APT28 This article has been indexed from www.infosecurity-magazine.com Read the original article: Russian APT28 Group in New “GooseEgg” Hacking Campaign
Fraudsters Exploit Telegram’s Popularity For Toncoin Scam
The scheme was uncovered by Kaspersky and has been operational since November 2023 This article has been indexed from www.infosecurity-magazine.com Read the original article: Fraudsters Exploit Telegram’s Popularity For Toncoin Scam
Dependency Confusion Vulnerability Found in Apache Project
This occurs when a private package fetches a similar public one, leading to exploit due to misconfigurations in package managers This article has been indexed from www.infosecurity-magazine.com Read the original article: Dependency Confusion Vulnerability Found in Apache Project
CrushFTP File Transfer Vulnerability Lets Attackers Download System Files
CrushFTP is urging customers to download v11 of its file transfer platform, with attackers actively exploiting a vulnerability that allows them to download system files This article has been indexed from www.infosecurity-magazine.com Read the original article: CrushFTP File Transfer Vulnerability…
NSA Launches Guidance for Secure AI Deployment
The new document is the first release from NSA’s Artificial Intelligence Security Center (AISC), in partnership with other government agencies in the US and other Five Eyes countries This article has been indexed from www.infosecurity-magazine.com Read the original article: NSA…
NCSC Announces PwC’s Richard Horne as New CEO
The UK’s National Cyber Security Centre will see Richard Horne take over as its new boss in the autumn This article has been indexed from www.infosecurity-magazine.com Read the original article: NCSC Announces PwC’s Richard Horne as New CEO
MITRE Reveals Ivanti Breach By Nation State Actor
Non-profit MITRE says a sophisticated state group breached its network via two chained Ivanti zero-days This article has been indexed from www.infosecurity-magazine.com Read the original article: MITRE Reveals Ivanti Breach By Nation State Actor
Alarming Decline in Cybersecurity Job Postings in the US
This drop represents a direct threat to US national cybersecurity infrastructure, said CyberSN representatives in their report This article has been indexed from www.infosecurity-magazine.com Read the original article: Alarming Decline in Cybersecurity Job Postings in the US
Akira Ransomware Group Rakes in $42m, 250 Organizations Impacted
A joint advisory from Europol and US and Dutch government agencies estimated that Akira made around $42m in ransomware proceeds from March 2023 to January 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Akira Ransomware Group…
Quishing Attacks Jump Tenfold, Attachment Payloads Halve
The figures come from Egress’s latest report, which also suggests secure email gateways lag behind tech advancements This article has been indexed from www.infosecurity-magazine.com Read the original article: Quishing Attacks Jump Tenfold, Attachment Payloads Halve
Russia’s Sandworm Upgraded to APT44 by Google’s Mandiant
Mandiant has confirmed that Sandworm is responsible for many cyber-attacks against Ukraine has close ties with a Russian hacktivist group This article has been indexed from www.infosecurity-magazine.com Read the original article: Russia’s Sandworm Upgraded to APT44 by Google’s Mandiant
New Cyber-Threat MadMxShell Exploits Typosquatting and Google Ads
Zscaler also confirmed MadMxShell uses DLL sideloading and DNS tunneling for C2 communication This article has been indexed from www.infosecurity-magazine.com Read the original article: New Cyber-Threat MadMxShell Exploits Typosquatting and Google Ads
US Election Officials Told to Prepare for Nation-State Influence Campaigns
A US government advisory sets out actions election officials need to take to mitigate the impact of nation-state influence campaigns ahead of the November elections This article has been indexed from www.infosecurity-magazine.com Read the original article: US Election Officials Told…
Trust in Cyber Takes a Knock as CNI Budgets Flatline
Bridewell report reveals critical infrastructure firms are losing faith in their defensive tooling This article has been indexed from www.infosecurity-magazine.com Read the original article: Trust in Cyber Takes a Knock as CNI Budgets Flatline
UK Police Lead Disruption of £1m Phishing-as-a-Service Site LabHost
The Metropolitan Police and partners have disrupted the prolific LabHost phishing-as-a-service platform This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Police Lead Disruption of £1m Phishing-as-a-Service Site LabHost
Linux Cerber Ransomware Variant Exploits Atlassian Servers
The attacks exploit CVE-2023-22518, a critical flaw in Atlassian Confluence Data Center and Server This article has been indexed from www.infosecurity-magazine.com Read the original article: Linux Cerber Ransomware Variant Exploits Atlassian Servers
North Korean Group Kimsuky Exploits DMARC and Web Beacons
Proofpoint confirmed Kimsuky has directly contacted foreign policy experts since 2023 through seemingly benign email conversations This article has been indexed from www.infosecurity-magazine.com Read the original article: North Korean Group Kimsuky Exploits DMARC and Web Beacons
US Government and OpenSSF Partner on New SBOM Management Tool
OpenSSF, in collaboration with the US Government, has developed Protobom, a open source tool designed to simplify SBOM management for organizations This article has been indexed from www.infosecurity-magazine.com Read the original article: US Government and OpenSSF Partner on New SBOM…
EU Elections: Pro-Russian Propaganda Exploits Meta’s Failure to Moderate Political Ads
This year’s EU elections will be a stress test to see whether the newly adopted Digital Services Act can efficiently mitigate misinformation threats This article has been indexed from www.infosecurity-magazine.com Read the original article: EU Elections: Pro-Russian Propaganda Exploits Meta’s…
Ivanti Patches Two Critical Avalanche Flaws in Major Update
Ivanti has fixed two critical vulnerabilities in its Avalanche MDM product which could lead to remote code execution This article has been indexed from www.infosecurity-magazine.com Read the original article: Ivanti Patches Two Critical Avalanche Flaws in Major Update
Insider Threats Surge 14% Annually as Cost-of-Living Crisis Bites
Cifas reveals 14% rise in dishonest employees, driven mainly by financial necessity last year This article has been indexed from www.infosecurity-magazine.com Read the original article: Insider Threats Surge 14% Annually as Cost-of-Living Crisis Bites
Russian Sandworm Group Using Novel Backdoor to Target Ukraine and Allies
WithSecure researchers said it is likely Russian state group Sandworm has added a novel backdoor dubbed ‘Kapeka’ to its arsenal This article has been indexed from www.infosecurity-magazine.com Read the original article: Russian Sandworm Group Using Novel Backdoor to Target Ukraine…
Report Suggests 93% of Breaches Lead to Downtime and Data Loss
According to Pentera, firms are allocating 13% of their total IT security budgets to pentesting This article has been indexed from www.infosecurity-magazine.com Read the original article: Report Suggests 93% of Breaches Lead to Downtime and Data Loss
LeakyCLI Flaw Exposes AWS and Google Cloud Credentials
Orca Security said the issue mirrors a previously identified vulnerability in Azure CLI This article has been indexed from www.infosecurity-magazine.com Read the original article: LeakyCLI Flaw Exposes AWS and Google Cloud Credentials
Cybersecurity Pros Urge US Congress to Help NIST Restore NVD Operation
An open letter signed by 50 cybersecurity practitioners requires the US Congress to support NIST in restoring operations at the National Vulnerability Database This article has been indexed from www.infosecurity-magazine.com Read the original article: Cybersecurity Pros Urge US Congress to…
Microsoft Most Impersonated Brand in Phishing Scams
New Check Point data found Microsoft was impersonated in 38% of all brand phishing attacks in Q1 2024, up from 33% in Q4 2024 This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Most Impersonated Brand in…
Open Source Leaders Warn of XZ Utils-Like Takeover Attempts
Two open source organizations have revealed attempts to socially engineer project takeovers This article has been indexed from www.infosecurity-magazine.com Read the original article: Open Source Leaders Warn of XZ Utils-Like Takeover Attempts
Bad Bots Drive 10% Annual Surge in Account Takeover Attacks
Malicious bots now represent a third of all internet traffic, says Imperva This article has been indexed from www.infosecurity-magazine.com Read the original article: Bad Bots Drive 10% Annual Surge in Account Takeover Attacks
Russia and Ukraine Top Inaugural World Cybercrime Index
An international team of researchers published the first-ever index ranking countries by cybercrime threat level This article has been indexed from www.infosecurity-magazine.com Read the original article: Russia and Ukraine Top Inaugural World Cybercrime Index
New LockBit Variant Exploits Self-Spreading Features
Kaspersky also uncovered the use of the SessionGopher script to extract saved passwords This article has been indexed from www.infosecurity-magazine.com Read the original article: New LockBit Variant Exploits Self-Spreading Features
Palo Alto Networks Zero-Day Flaw Exploited in Targeted Attacks
Designated CVE-2024-3400 and with a CVSS score of 10.0, the flaw enables unauthorized actors to execute arbitrary code on affected firewalls This article has been indexed from www.infosecurity-magazine.com Read the original article: Palo Alto Networks Zero-Day Flaw Exploited in Targeted…
Chipmaker Giant Nexperia Confirms Cyber-Attack Amid Ransomware Group Claims
Nexperia confirmed its IT servers were accessed by attackers, with the Dunghill ransomware group claiming to have stolen chip designs and other sensitive documents This article has been indexed from www.infosecurity-magazine.com Read the original article: Chipmaker Giant Nexperia Confirms Cyber-Attack…
FBI Warns of Massive Toll Services Smishing Scam
The Feds have received thousands of complaints about phishing texts from fake road toll collection services This article has been indexed from www.infosecurity-magazine.com Read the original article: FBI Warns of Massive Toll Services Smishing Scam
Police Swoop on €645m Cannabis Investment Fraud Gang
Nine arrests and millions of euros seized in bid to bust JuicyFields investment scammers This article has been indexed from www.infosecurity-magazine.com Read the original article: Police Swoop on €645m Cannabis Investment Fraud Gang
CISA Urges Immediate Credential Reset After Sisense Breach
The breach affecting business analytics provider Sisense could lead to a wide-scale supply chain attack This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Urges Immediate Credential Reset After Sisense Breach
Palo Alto Networks Warns About Critical Zero-Day in PAN-OS
A fix for CVE-2024-3400 is scheduled on April 4, Palo Alto Networks announced This article has been indexed from www.infosecurity-magazine.com Read the original article: Palo Alto Networks Warns About Critical Zero-Day in PAN-OS
Apple Boosts Spyware Alerts For Mercenary Attacks
The revision points out companies like NSO Group, known for surveillance tools like Pegasus This article has been indexed from www.infosecurity-magazine.com Read the original article: Apple Boosts Spyware Alerts For Mercenary Attacks
Data Breach Exposes 300k Taxi Passengers’ Information
These records belonged to Dublin-based iCabbi, a dispatch and fleet management technology provider This article has been indexed from www.infosecurity-magazine.com Read the original article: Data Breach Exposes 300k Taxi Passengers’ Information
New Android Espionage Campaign Spotted in India and Pakistan
A new cyber espionage campaign, called ‘eXotic Visit,’ targeted Android users in South Asia via seemingly legitimate messaging apps This article has been indexed from www.infosecurity-magazine.com Read the original article: New Android Espionage Campaign Spotted in India and Pakistan
Raspberry Robin Distributed Through Windows Script Files
Distribution vectors of the Raspberry Robin worm now include Windows Script Files (WSF) alongside other methods like USB drives This article has been indexed from www.infosecurity-magazine.com Read the original article: Raspberry Robin Distributed Through Windows Script Files
Threat Actors Game GitHub Search to Spread Malware
Checkmarx warns of GitHub search result manipulation designed to promote malicious repositories This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actors Game GitHub Search to Spread Malware
US Data Breach Reports Surge 90% Annually in Q1
The number of publicly reported data breaches and leaks grew 90% in the first three months of the year This article has been indexed from www.infosecurity-magazine.com Read the original article: US Data Breach Reports Surge 90% Annually in Q1
Rhadamanthys Malware Deployed By TA547 Against German Targets
Proofpoint said it is the first time this threat actor has been seen using LLM-generated PowerShell scripts This article has been indexed from www.infosecurity-magazine.com Read the original article: Rhadamanthys Malware Deployed By TA547 Against German Targets
LG TV Vulnerabilities Expose 91,000 Devices
The issues identified permit unauthorized access to the TV’s root system by bypassing authorization mechanisms This article has been indexed from www.infosecurity-magazine.com Read the original article: LG TV Vulnerabilities Expose 91,000 Devices
Women Experience Exclusion Twice as Often as Men in Cybersecurity
A WiCyS report detailed the causes of disparities in the experiences of women working in cybersecurity compared to men, including respect and exclusion This article has been indexed from www.infosecurity-magazine.com Read the original article: Women Experience Exclusion Twice as Often…
Windows: New ‘BatBadBut’ Rust Vulnerability Given Highest Severity Score
A flaw in the Rust standard library exposes Windows systems to command injection attacks This article has been indexed from www.infosecurity-magazine.com Read the original article: Windows: New ‘BatBadBut’ Rust Vulnerability Given Highest Severity Score
US Claims to Have Recovered $1.4bn in COVID Fraud
The DoJ says it has seized $1.4bn and charged 3500 defendants in COVID fraud cases since 2021 This article has been indexed from www.infosecurity-magazine.com Read the original article: US Claims to Have Recovered $1.4bn in COVID Fraud
Microsoft Patches 150 Flaws Including Two Zero-Days
April’s Patch Tuesday saw fixes for 150 CVEs, including two being actively exploited in the wild This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Patches 150 Flaws Including Two Zero-Days
Half of UK Businesses Hit by Cyber-Incident in Past Year, UK Government Finds
The UK Government’s latest Cyber Security Breaches Survey found a large increase in the proportion of businesses impacted by a cyber-attack or breach in the past 12 months This article has been indexed from www.infosecurity-magazine.com Read the original article: Half…
Hackers Use Malware to Hunt Software Vulnerabilities
Palo Alto Networks observed growing malware-initiated vulnerability scanning activity This article has been indexed from www.infosecurity-magazine.com Read the original article: Hackers Use Malware to Hunt Software Vulnerabilities
Change Healthcare Hit By Cyber Extortion Again
RansomHub has surfaced threatening to expose stolen data unless another ransom is paid This article has been indexed from www.infosecurity-magazine.com Read the original article: Change Healthcare Hit By Cyber Extortion Again
Research Unearths RUBYCARP’s Multi-Miner Assault on Crypto
Sysdig stated that by deploying multiple miners, the group decreased attack time and detection risk This article has been indexed from www.infosecurity-magazine.com Read the original article: Research Unearths RUBYCARP’s Multi-Miner Assault on Crypto
Foreign Interference Drives Record Surge in IP Theft
DTEX claims industrial espionage and IP theft are at an all-time high thanks to malicious insiders This article has been indexed from www.infosecurity-magazine.com Read the original article: Foreign Interference Drives Record Surge in IP Theft
Over 90,000 D-Link NAS Devices Are Under Attack
Threat actors are targeting a high severity vulnerability in close to 100,000 legacy D-Link devices This article has been indexed from www.infosecurity-magazine.com Read the original article: Over 90,000 D-Link NAS Devices Are Under Attack
Why Identity Management is Key in a Cyber Resilience Strategy
For the fourth edition of Identity Management Day, the Identity Defined Security Alliance shared staggering numbers on the boom of identity-related cyber incidents This article has been indexed from www.infosecurity-magazine.com Read the original article: Why Identity Management is Key in…
US Federal Data Privacy Law Introduced by Legislators
Two US lawmakers have published a draft federal data privacy law, dubbed the American Privacy Rights Act, which aims to provide protections for the personal information of all US citizens This article has been indexed from www.infosecurity-magazine.com Read the original…
New Malware “Latrodectus” Linked to IcedID
The malware, discovered by Proofpoint and Team Cymru, was mainly utilized by initial access brokers This article has been indexed from www.infosecurity-magazine.com Read the original article: New Malware “Latrodectus” Linked to IcedID
Byakugan Infostealer Capabilities Revealed
Fortinet said the malware functions identified include screen monitoring, screen capturing, cryptomining and more This article has been indexed from www.infosecurity-magazine.com Read the original article: Byakugan Infostealer Capabilities Revealed
Famous YouTube Channels Hacked to Distribute Infostealers
The AhnLab Security Intelligence Center discovered new infostealer distribution campaigns leveraging legitimate YouTube channels This article has been indexed from www.infosecurity-magazine.com Read the original article: Famous YouTube Channels Hacked to Distribute Infostealers
UK Retailers Lost £11.3bn to Fraud in 2023
Research from Ayden and the CEBR found that 35% of UK retailers fell victim to fraudulent activity, cyber-attacks or data leaks over the past 12 months This article has been indexed from www.infosecurity-magazine.com Read the original article: UK Retailers Lost…
Hospital IT Helpdesks Targeted By Voice Fraudsters, Warns HHS
Threat actors are socially engineering healthcare IT helpdesk staff to steal money, the government has warned This article has been indexed from www.infosecurity-magazine.com Read the original article: Hospital IT Helpdesks Targeted By Voice Fraudsters, Warns HHS
Veterinary Giant CVS Reveals Major Cyber-Attack
Veterinary services provider CVS Group today notified markets of a security breach last week This article has been indexed from www.infosecurity-magazine.com Read the original article: Veterinary Giant CVS Reveals Major Cyber-Attack
Chinese Threat Actors Deploy New TTPs to Exploit Ivanti Vulnerabilities
Mandiant research details how Chinese espionage groups are deploying new tools post-exploitation of recently patched Ivanti vulnerabilities This article has been indexed from www.infosecurity-magazine.com Read the original article: Chinese Threat Actors Deploy New TTPs to Exploit Ivanti Vulnerabilities
Wiz Discovers Flaws in GenAI Models Enabling Customer Data Theft
Wiz researchers found architecture flaws in generative AI models available on the AI hub Hugging Face This article has been indexed from www.infosecurity-magazine.com Read the original article: Wiz Discovers Flaws in GenAI Models Enabling Customer Data Theft
China Using AI-Generated Content to Sow Division in US, Microsoft Finds
A Microsoft report found that China-affiliated actors are publishing AI-generated content on social media to amplify controversial domestic issues in the US This article has been indexed from www.infosecurity-magazine.com Read the original article: China Using AI-Generated Content to Sow Division…
LockBit Scrambles After Takedown, Repopulates Leak Site with Old Breaches
A Trend Micro report shows a clear drop in the number of actual infections associated with the LockBit ransomware following Operation Cronos This article has been indexed from www.infosecurity-magazine.com Read the original article: LockBit Scrambles After Takedown, Repopulates Leak Site…
Jackson County IT Systems Hit By Ransomware Attack
A state of emergency was declared, caused by operational inconsistencies across digital infrastructure This article has been indexed from www.infosecurity-magazine.com Read the original article: Jackson County IT Systems Hit By Ransomware Attack
New JSOutProx Malware Targets Financial Firms in APAC, MENA
First found in 2019, JSOutProx combines JavaScript and .NET functionalities to infiltrate systems This article has been indexed from www.infosecurity-magazine.com Read the original article: New JSOutProx Malware Targets Financial Firms in APAC, MENA
Leicester Council Confirms Confidential Documents Leaked in Ransomware Attack
Leicester City Council confirmed around 25 sensitive documents have been leaked online, including personal ID information, following claims by the Inc Ransom gang This article has been indexed from www.infosecurity-magazine.com Read the original article: Leicester Council Confirms Confidential Documents Leaked…
Deepfake Expert Henry Ajder to Keynote Infosecurity Europe 2024 on AI Challenges
Infosecurity Europe 2024 will feature a keynote presentation by deepfake expert Henry Ajder, exploring the implications of generative AI on cybersecurity This article has been indexed from www.infosecurity-magazine.com Read the original article: Deepfake Expert Henry Ajder to Keynote Infosecurity Europe…
Threat Actor Claims Classified Five Eyes Data Theft
Threat actor IntelBroker claims to have classified intelligence stolen from US government tech supplier Acuity This article has been indexed from www.infosecurity-magazine.com Read the original article: Threat Actor Claims Classified Five Eyes Data Theft
Firms Must Work Harder to Guard Children’s Privacy, Says UK ICO
UK privacy regulator, the ICO, urges social media and video sharing firms to do more to protect children’s data This article has been indexed from www.infosecurity-magazine.com Read the original article: Firms Must Work Harder to Guard Children’s Privacy, Says UK…
Cyber Safety Review Board Report Slams Microsoft Security Failures in Government Email Breach
A report has highlighted multiple security failings by Microsoft that allowed Chinese threat actors to access US government officials’ email accounts in the Summer of 2023 This article has been indexed from www.infosecurity-magazine.com Read the original article: Cyber Safety Review…
Prudential Financial Notifies 36,000 Individuals of Data Breach
The compromised data includes names or other identifying information in combination with driver’s license numbers This article has been indexed from www.infosecurity-magazine.com Read the original article: Prudential Financial Notifies 36,000 Individuals of Data Breach
Infostealers Prevalent in Retail Sector Cybercrime Trends
The findings from Netskope also show a shift in the retail sector’s use of cloud applications This article has been indexed from www.infosecurity-magazine.com Read the original article: Infostealers Prevalent in Retail Sector Cybercrime Trends
UK and US to Build Common Approach on AI Safety
The UK and the US have signed a partnership to coordinate the work of their respective AI Safety Institutes This article has been indexed from www.infosecurity-magazine.com Read the original article: UK and US to Build Common Approach on AI Safety