Security Bulletin

People want to get rich, and people want to fall in love — and these are the two motivations behind the growing number of so-called "pig butchering" fraud scams occurring online.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

While authorizations of cloud services under the Federal Risk and Authorization Management Program have risen by almost 60% from July 2019 to April 2023, numerous agencies continued to leverage services that were not approved under FedRAMP despite...

TechCrunch reports that Texas-based data broker InMarket has been banned by the Federal Trade Commission from engaging in the sale of precise consumer location data days after the same prohibition was imposed upon fellow data broker Outlogic...

U.S. payments processing firm Payoneer has disclosed that some of its customer accounts were compromised as a result of a phishing campaign following reports from several users noting account breaches, password replacements, and fund exfiltration...

Numerous companies, universities, colleges, government agencies, and municipalities across Sweden have been impacted by outages after Finnish IT services and enterprise cloud hosting firm Tietoevry had one of its Sweden-based data centers compromised...

Massachusetts-based Anna Jaques Hospital was admitted to be compromised by the Money Message ransomware gang in a Christmas Day attack, which it claims resulted in the exfiltration of 600GB of data, as well as information from Beth Israel Lahey...

BleepingComputer reports that the recently discovered 3AM ransomware operation, also known as ThreeAM, has been found to be associated with the Conti and Royal ransomware gangs.

Widespread phishing campaign deployed by reemerging TA866 Threat operation TA866 has reemerged with a new massive phishing campaign aimed at North America after being absent from the threat landscape for nine months, The Hacker News reports.

Attacks exploiting a critical out-of-bounds write zero-day vulnerability in VMware Center Server, tracked as CVE-2023-34048, have been deployed by Chinese cyberespionage operation UNC3886 since 2021, two years before the flaw was identified and...

Over 500 military bases across Russia and Russia-occupied regions in Ukraine, including the Russian Army's military headquarters, had their maps and construction plans exfiltrated following a cyberattack by Ukrainian hacking operation Blackjack...