Cybercrime

Another relatively light Patch Tuesday drop from Microsoft addresses 55 vulnerabilities, two of them already being exploited

https://www.computerweekly.com/news/252509331/November-Patch-Tuesday-drop-fixes-bugs-in-Excel-Exchange-Server

US government puts up a $10m reward for information on the DarkSide ransomware gang, the group that attacked Colonial Pipeline six months ago

https://www.computerweekly.com/news/252509151/US-offers-10m-reward-for-intel-on-DarkSide-ransomware-gang

A botnet of "thousands of compromised GitLab instances" is reportedly launching powerful DDoS attacks through a known vulnerability that patched months ago, according to a Google security engineer.

https://searchsecurity.techtarget.com/news/252509093/DDoS-botnet-exploiting-known-GitLab-vulnerability

Businesses and governments have been put on alert to guard against Trojan Source hacking attacks

https://www.computerweekly.com/news/252508879/Businesses-and-governments-urged-to-take-action-over-Trojan-Source-supply-chain-attacks

A spate of high-profile cyber attacks has highlighted the criticality of supply chain security and put new pressures on security leaders. How can we ensure that cyber security remains robust down the full length of supply chains?

https://www.computerweekly.com/opinion/Supply-chain-cyber-security-is-only-as-strong-as-the-weakest-link

Sophos researchers share some of the more common tactics ransomware gangs use to pressurise their victims into paying up

https://www.computerweekly.com/news/252508752/How-ransomware-crews-pile-on-the-pressure-to-get-victims-to-pay

A coordinated operation by law enforcement has seen 150 taken into custody amid allegations of buying or selling illicit goods on the dark web

https://www.computerweekly.com/news/252508657/DarkMarket-takedown-results-in-150-arrests

A recent spate of attempted Nobelium cyber attacks were mostly unsuccessful, but serve as a reminder to pay attention to some more fundamental aspects of security

https://www.computerweekly.com/news/252508656/Cyber-experts-on-how-to-nobble-a-Nobelium-attack

Spending Review adds more than £750m of funding to improve cyber security resilience across government

https://www.computerweekly.com/news/252508704/Government-commits-millions-to-security-investment

New data from Arkose Labs, a fraud deterrence platform, has revealed that Europe is seeing a noticeable spike in human attacks as the impact of the pandemic and job losses continues to take its toll. The latest insights report, which analyses data from seven billion sessions, has discovered an enormous 77% increase in human attacks, a surprising change in approach for cybercriminals given the already prolific nature of automated botnets.

https://securitynewsdesk.com/arkose-labs-human-originated-cyber-attacks-on-the-rise/