Infosecurity News

EncroChat Bust Leads to 6500 Arrests in Three Years
Encrypted comms platform was used by organized criminals

Experts Unconvinced by Upskill in UK Cyber Program
Its 3600 applicants will barely make a dent in overall skills shortages

Anatsa Banking Trojan Targets Banks in US, UK and DACH Region
ThreatFabric said the ongoing campaign started in March and has witnessed over 30,000 installations

Third-Party Vendor Hack Exposes Data at American, Southwest Airlines
American Airlines reported 5745 pilots and applicants affected, Southwest Airlines reported 3009

Study Reveals Alarming Gap in SIEM Detection of Adversary Techniques
CardinalOps examined 4000 detection rules, one million log sources and many unique log source types

Submarine Cables at Growing Risk of Cyber-Attacks
A report from Recorded Future highlights how digital cable management systems are vulnerable to nation-state attacks

Over Half of UK Banks Are Exposing Customers to Email Fraud
Recommended DMARC policy only implemented by a minority

NCSC Launches Cyber Risk Management Toolbox
Security agency’s latest guidance refresh makes best practices more accessible

Payments Lobby: Anti-APP Fraud Policies Could Increase Scams
Payments Association wants social media firms to play role in crackdown

Are GPT-Based Models the Right Fit for AI-Powered Cybersecurity?
Many cybersecurity vendors are integrating general-purpose large language models into their solutions. However, some experts argue that these are not the best AI algorithms for security

Umbral Stealer Discovered in Trojanized Super Mario Installer
The discovery comes from security researchers at Cyble Research and Intelligence Labs

Millions Face RepoJacking Risk on GitHub Repositories
Aqua identified numerous high-profile targets, including organizations such as Google and Lyft

NSA Releases Guide to Mitigate BlackLotus Bootkit Infections
Microsoft patched exploited boot loader flaw but did not revoke trust in unpatched loaders

Companies Call for Changes to UK’s Cyber Essentials Scheme
Concerns over cost and one-size-fits-all approach

US Authorities Seize BreachForums Domain
Questions still to be answered over why it took so long

Twitter Celeb Hacker Jailed For Five Years
Joseph O'Connor hijacked over 100 accounts in bitcoin scam

US Military Personnel Warned of Malicious Smartwatches
The smartwatches have Wi-Fi auto-connect features and possibly contain malware

OpenSSH Trojan Campaign Targets IoT and Linux Systems
Microsoft said attackers used a patched version of OpenSSH to gain control of compromised devices

USB Drives Used as Trojan Horses By Camaro Dragon
The malicious software tools were discovered by Check Point Research

BlackBerry Cybersecurity President Warns Against Heavy-Handed AI Regulation
BlackBerry president John Giamatteo acknowledged that governments should intervene to mitigate AI risks – and his company is willing to help them



