Critical Infrastructure Security, Vulnerability Management

UK nuclear waste firm thwarts cyberattack

UK government-owned nuclear waste company Radioactive Waste Management has disclosed successfully averting an attempted cyberattack through LinkedIn, The Guardian reports. Cyberattacks, especially those using LinkedIn as a primary vector, have increased following RWM's merger with two other nuclear entities to form Nuclear Waste Services, according to NWS CEO Corhyn Parr, who emphasized that there has been no significant impact from any of the said intrusions. "NWS has seen, like many other UK businesses, that LinkedIn has been used as a source to identify the people who work within our business. These attempts were detected and denied through our multi-layered defenses," said a spokesperson. Such an incident comes amid cybersecurity experts' warnings of the use of social media sites to facilitate social engineering attacks against organizations that involve fraudulent business accounts, lures to obtain sensitive information, and user credential theft efforts.

Related

Details on 2021 Chemonics hack remain scant

International development firm Chemonics, which mainly caters to the United States Agency of International Development, has not yet provided more extensive information regarding a cyberattack that compromised more than 6,000 individuals initially reported in July 2021, reports FedScoop.

Media, think tank, service spoofing conducted in APT42 cyberespionage operations

Iranian state-backed hacking operation APT42 — also known as Mint Sandstorm, Mint Phosphorous, Charming Kitten, and TA453 — has spoofed major news organizations, including The Washington Post, think tanks, such as the McCain Institute, and internet services, such as Gmail, YouTube, and Google Drive, as part of cyberespionage campaigns against journalists and human rights activists, reports CyberScoop.

Feds warn of new Kimsuky phishing attack techniques

The U.S. State Department, National Security Agency, and the FBI have issued a joint advisory warning organizations across the country, especially educational entities, non-profits, and think tanks, regarding the increasingly advanced phishing techniques leveraged by North Korean state-backed hacking group Kimsuky, also known as APT43, Emerald Sleet, and Velvet Chollima, Nextgov reports.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.