SecurityWeek's cybersecurity roundup provides a concise compilation of noteworthy stories that might have slipped under the radar.
Each week, we curate and present a collection of noteworthy developments, ranging from the latest vulnerability discoveries and emerging attack techniques to significant policy changes and industry reports.
An underground service called OnlyFake allegedly uses neural networks to generate realistic photos of fake IDs for just $15. 404 Media has tested the service and reported that it produces fake IDs nearly instantly, and warned that it could streamline bank fraud and the laundering of stolen funds.
Deepfake CFO tricks finance worker into sending $25 million to fraudsters.
A finance worker in Hong Kong was tricked into making a $25 million payment to fraudsters posing as his company's chief financial officer on a video call using deepfake AI technology.
The Black Hunt ransomware, which recently hit roughly 300 companies in Paraguay, appears based on leaked LockBit code, Rapid7 says.
Black Hunt disables Windows security measures, limiting user control, deletes shadow copies, and attempts to spread to network shares.
Pennsylvania Courts website disrupted by cyberattack.
The Pennsylvania Courts' website fell victim to a denial-of-service attack, rendering parts of it unavailable.
DataTribe's cybersecurity funding insights report for the fourth quarter of 2023 shows that $89 billion were invested across approximately 6,400 deals last year, the lowest figures in the past five years.
Google agrees to $350 million settlement in Google+ data leak lawsuit.
Google has agreed to pay $350 million to settle a shareholder lawsuit related to a 2018 Google+ bug exposing private data associated with as many as 500,000 accounts.
As part of the settlement, Google denied any wrongdoing and highlighted finding no evidence that the exposed data was misused.
Internet-exposed Confluence server numbers skewed by honeypots.
Only approximately 4,000 instances are real Confluence servers.
OpenSSF and CISA provide framework for package repository security.
OpenSSF and CISA have teamed up to create a framework for package repository security.
Nozomi Networks has published a report assessing the OT/IoT threat landscape in the second half of 2023.
The report looks at reported vulnerabilities, malware and other types of intrusions, as well as botnets.
VMware has addressed five vulnerabilities in Aria Operations for Networks, including privilege escalation and XSS bugs.
This Cyber News was published on www.securityweek.com. Publication date: Fri, 09 Feb 2024 16:43:05 +0000