Plaintext: A Week in Review

Cybersecurity doesn’t take a break. Everyday there is something new: new attacks, new research, new threats. In this issue of Dark Reading in Plaintext, we pull together news reports from around the industry that you may have missed.

Dark Reading is debuting a weekly "in case you missed it" (ICYMI)?digest, rounding up important news from the week that our editors just didn't have time to cover:

First up -- A cyberattack against Florida-based Geographic Solutions has shut down state websites providing services such as unemployment benefits and job-seeking programs over the past week. Geographic Solutions (GSI) was forced to shut down state labor exchanges and unemployment claims systems, and as many as 40 states and Washington DC, all of which rely on GSI's services, could be affected. The company has not disclosed the nature of the attack at this time, other than to say it is working with a third-party firm to resume operations.

• Lazarus Group Likely Behind $100M Crypto-Heist: The $100 million hack of the Horizon Bridge cryptocurrency exchange on June 24 is likely the work of Lazarus, according to Elliptic.
• 8220 Gang Adds Atlassian Bug to Active Attack Chain: The Chinese-speaking 8220 Gang is actively exploiting the vulnerability in Atlassian Confluence Server and Data Center, according to Microsoft’s Security Intelligence Centre.
• Hacker Impersonates TrustWallet in Crypto Phishing Scam: More than 50,000 phishing emails sent from a malicious Zendesk account attempted to take over TrustWallet accounts and still funds, according to Vade.
• Cookie-Stealing YTStealer Takes Over YouTube Accounts: The malware steals YouTube authentication cookies from content creators to give cybercriminals access to legitimate accounts, according to analysis from Intezer.
• Follina Used to Spread XFiles Spyware: The Follina vulnerability recently patched by Microsoft is already being exploited in attacks. Several XFiles stealer campaigns are exploiting Follina as part of the delivery phase, according to a Cyberint Research Team report.

Headlines on Tap

With the quarter ending on June 30, there were quite a few last-minute funding announcements this week:

• Infrastructure-as-Code startup oak9 raised $8 million in a new funding round. The company plans to launch a next-gen Security-as-code offering.
• Opaque Systems raised $22 million to bring multi-party analytics and AI to confidential computing.
• Data-first cloud security platform Normalyze raised $22.2 million in Series A funding. The platform helps organizations manage sensitive data and attack paths to data.
• Vulnerability detection platform Inspectiv raised $8.6 million in Series A funding. The platform combines intelligence from crowdsourced security testing and proprietary vulnerability scanning.

On That Note

Are you with a startup of fewer than 50 employees? Do you want to show off your technology at Black Hat?

Submit your application for the Black Hat Innovation Spotlight competition!

Source: David von Diemar via Unsplash.com

The top four finalists will be invited to exhibit in the Start-Up area at Black Hat USA 2022 and present their product live to a panel of judges during the conference.?Video applications must be in by July 6 to be considered for the the first-ever Black Hat Innovation Spotlight competition. Details here.