Infosecurity News
Canon Inkjet Printers Expose Wi-Fi Threat
The printers retained various information after re-initialization, including SSIDs and passwords
Cloud Tech Debt Puts Millions of Apps at Risk, Says New Report
Published by Qualys, the document draws from anonymized global cloud scans conducted in April 2023
New Infostealer Uncovered in Phishing Scam Targeting Facebook Business Accounts
Unit 42 researchers detail a campaign that aimed to instal an infostealer variant capable of taking over Facebook business accounts
NHS Staff Reprimanded For WhatsApp Data Sharing
Patients’ personal data was shared on the app for years
Capita Boss to Step Down
Outsourcer suffered major cyber incident several months ago
New WikiLoader Malware Goes to Extreme Lengths to Hide
Its authors are actively and rapidly developing it
SpyNote Android Spyware Strikes Financial Institutions
Cleafy said the malware exploits Accessibility services to conduct multiple malicious activities
APT31 Implants Target Industrial Organizations
The attackers established a channel for data exfiltration, including from air-gapped systems
Biden Announces National Cyber Workforce and Education Strategy
The White House says that filling cyber job vacancies is a national security imperative
UK Military Embraces Security by Design
The initiative is designed to transform how cybersecurity is addressed in capability programs across the MoD
Ongoing STARK#MULE Attack Campaign Discovered
The campaign appears directed at Korean-speaking victims, indicating an origin in North Korea
Global Lawyers Unveil Cyber Best Practices for Execs
International Bar Association offers practical policy recommendations
Think Tank: Insurers Not Fuelling Ransomware Market
RUSI report makes recommendations for the industry
CISA: New Submarine Backdoor Used in Barracuda Campaign
Chinese threat actor used malware in attacks
Security Serious Unsung Heroes Awards 2023 Open for Nominations
Nominations are open for the eighth annual Security Serious Unsung Heroes Awards.
UK MoD Error Sends Emails to Russia’s Ally Instead of US
The MoD clarified that the incident involved fewer than 20 emails and none were top secret
New Study Reveals Forged Certificate Attack Risks
Attempts can lead to unauthorized access to important company resources
40% of Ubuntu Cloud Workloads Vulnerable to Exploits
Wiz Research said the vulnerabilities were discovered in the Linux filesystem, OverlayFS
Microsoft Accused of Negligence in Recent Email Compromise
In an open letter, Senator Ron Wyden urged federal agencies to investigate Microsoft following a Chinese campaign that compromised US government emails
Australia and US Issue Warning About Web App Threats
The advisory issues recommendations for developers and end users on reducing the prevalence of access control vulnerabilities
