Security Strategy, Plan, Budget

Despite a surge in cybercrime, Visa reported record-lows in cyber fraud as the company has invested in security innovation and analytics.

SecurityWeek reports that Facebook parent firm Meta has expanded its bug bounty program to include rewards for flaws that could be abuse to evade Facebook integrity checks, including two-factor authentication for some business manager accounts, as well as the platform's feature restrictions and application verification processes.

The Hacker News reports that SonarSource has identified a high-severity vulnerability in the open-source RainLoop web-based email client which could be leveraged for email exfiltration.

Threat actors have been deploying phishing attacks with the more_eggs malware aimed at corporate hiring managers, according to The Hacker News.

More cybercriminals have been launching phishing campaigns spoofing credit unions for data and money theft.

Mandiant researchers said state-sponsored groups are the primary actors exploiting zero-day vulnerabilities, led by Chinese threat groups.

ALPHV, aka BlackCat, recently emerged as a large player in the ransomware marketplace using an updated version of BlackMatter/Darkside malware.