Infosecurity News
New Report: Over 40% of Google Drive Files Contain Sensitive Info
The Metomic research also suggested 34.2% of the files were shared with external contacts
UK Government Warns of Russian Cyber Campaigns Against Democracy
The NCSC identified the threat group responsible as Star Blizzard, linked to Russia’s FSB Center 18
Cyber-Attacks More Likely Than Fire or Theft, Aviva Research Finds
YouGov and Aviva research finds that UK businesses are almost five times as likely to have experienced a cyber-attack as a fire
Liability Fears Damaging CISO Role, Says Former Uber CISO
Former Uber CISO Joe Sullivan says CISOs are thinking about themselves rather than the bigger picture due to the risk of personal liability
Ninety Percent of Energy Companies Suffer Supplier Data Breach
Forty-three of the world’s 48 largest energy companies were hit by a third-party data breach over the past year
Governments Spying on Apple and Google Users, Says Senator
Secret government requests for Android and iOS push notification data should be made public, argues Ron Wyden
Cambridge Hospitals Admit Two Excel-Based Data Breaches
Information on cancer and maternity patients was accidentally disclosed by Cambridge University Hospitals NHS Foundation Trust
78% of CISOs Concerned About AppSec Manageability
The Cycode report draws from a survey of 500 US CISOs, AppSec Directors and DevSecOps team members
Trojan-Proxy Threat Expands Across macOS, Android and Windows
Kaspersky found multiple variants, but none are being marked as malicious by anti-malware vendors
LockBit Remains Top Global Ransomware Threat
The strain was responsible for over a quarter of global ransomware attacks between January 2022 and September 2023
Deutsche Wohnen Ruling Set to Drive Up GDPR Fines
Legal experts claim that landmark ECJ ruling will make it easier for authorities to sanction organizations infringing the GDPR
Police Arrest 1000 Suspected Money Mules
Global police arrest 1000 money mule suspects and identify thousands more in a major crackdown on money laundering
UK FCA Warns of Christmas Loan Fee Fraud Surge
Financial Conduct Authority claims economic hardship is making consumers more vulnerable to loan fee fraud
Disney+ Cyber Scheme Exposes New Impersonation Attack Tactics
Abnormal Security said the attackers used advanced customization techniques to deceive victims
SpyLoan Scams Target Android Users With Deceptive Apps
ESET said these apps request sensitive user information, exfiltrating it to attackers’ servers
US Federal Agencies Miss Deadline for Incident Response Requirements
20 government agencies have failed to reach the incident response maturity level required by law, the GAO found in a new report
Russian APT28 Exploits Outlook Bug to Access Exchange
Notorious Russian APT28 group is actively exploiting CVE-2023-23397 to hijack Exchange email accounts
Porn Age Checks Threaten Security and Privacy, Report Warns
Online Safety Act’s mandate for age verification to access pornography could be a security and privacy disaster, think tanks warn
Sellafield Accused of Covering Up Major Cyber Breaches
Europe’s largest nuclear site, Sellafield, is accused of consistent security failings
Cybercriminals Escalate Microsoft Office Attacks By 53% in 2023
The Kaspersky report also revealed an average detection of 411,000 malicious files per day
