SecurityWeek

The Crates.io Rust package registry was targeted in preparation of a malware attack aimed at developers, according to Phylum.

QakBot, SocGholish, and Raspberry Robin are the three most popular malware loaders, accounting for 80% of the observed incidents.

Polish police have arrested two men suspected of illegally hacking into the national railway's communications network, causing disruption to 20 trains.

Dutch cloud company Leaseweb shut down some critical systems last week due to a cyberattack.

Personal information stolen in ransomware attack at Ohio History Connection posted online after organization refuses to pay ransom.

Three bankrupt cryptocurrency companies — FTX, BlockFi and Genesis — suffered data breaches following a SIM swapping attack at Kroll. 

Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of August 21, 2023.

North Korea-linked Lazarus Group exploited a ManageEngine vulnerability to compromise an internet backbone infrastructure provider.

Israeli startup Cypago raises $13 million in funding and launches a governance, risk management and compliance (GRC) automation platform.

Congresswoman Nancy Mace has introduced a bill that would require federal contractors to have a Vulnerability Disclosure Policy (VDP).

The Digital Services Act aims to protect European users when it comes to privacy, transparency and removal of harmful or illegal content.

Google has announced new AI-powered zero trust, digital sovereignty, and threat defense controls for Workspace customers.

Nearly 1,000 organizations and 60 million individuals are impacted by the MOVEit hack, and the Cl0p ransomware gang is leaking stolen data.

Microsoft warns that Chinese spies are hacking into Taiwanese organizations with minimal use of malware and by abusing legitimate software.

University of Minnesota confirms data was stolen from its systems, says no malware infection or file encryption has been identified.

Cisco has released patches for three high-severity vulnerabilities in NX-OS and FXOS software that could lead to denial-of-service (DoS) conditions.

Mysterious Whiffy Recon malware scans for nearby Wi-Fi access points to obtain the location of the infected device.

The FBI says that the patches Barracuda released in May for an exploited ESG zero-day vulnerability (CVE-2023-2868) were not effective.

Rockwell Automation ThinManager ThinServer vulnerabilities could allow remote attackers to  take control of servers and hack HMIs. 

Account takeover and fraud protection firm SpyCloud has raised $110 million in a growth funding round led by Riverwood Capital.