Infosecurity News

CommonMagic Malware Implants Linked to New CloudWizard Framework
Kaspersky researchers said sections of the CloudWizard code were identical to CommonMagic

Experts Warn of Voice Cloning-as-a-Service
Dark web offerings could commoditize deep fake technology

#CRESTCon: White House Shifts US Cybersecurity Strategy Towards International Cooperation
Andy Williams, CEO of Global Transatlantic Ltd, spoke at CRESTCon Europe about the new US National Cybersecurity Strategy

NCSC: It's Time for CISOs to Prioritize Accessibility
Doing so will make human errors and workarounds less likely

Teen Charged in DraftKings Credential Stuffing Case
Wisconsin man alleged to have stolen $600,000 from accounts

Cyber Warfare Escalates Amid China-Taiwan Tensions
Trellix report observed a surge in malicious emails targeting Taiwanese industries and government officials

Apple's App Store Blocks $2bn in Fraudulent Transactions
Firm also rejected 1.7 million apps for failing to meet privacy, security and content standards

Montana Signs Ban on TikTok Usage on Personal Devices
A TikTok spokesperson said the ban violates the First Amendment rights of Montana residents

ChatGPT Leveraged to Enhance Software Supply Chain Security
OX-GPT is designed to help quickly remediate security vulnerabilities during software development

Government Publishes Playbook to Enhance Smart City Security
Resources are designed to help local authorities mitigate risk

New Cloud Data Leak Adds to Capita's Woes
Colchester council says multiple local authorities are impacted

Identity Crimes Remain at All-Time High in 2022
Most reports related to Google Voice scams

Social Engineering Risks Found in Microsoft Teams
The abuse methods require pre-existing access to a compromised user account or Teams token

BatLoader Impersonates ChatGPT and Midjourney in Cyber-Attacks
eSentire recommended raising awareness of malware masquerading as legitimate applications

Energy Industry Faces Increasing Dark Web Cyber Threats
The claims come from the latest Searchlight Cyber threat intelligence report

Acronis Launches EDR Solution with Potential for AI Integration
Acronis EDR is integrated into its Cyber Protect Cloud solution along with backup and data recovery functionalities

Cyber-Resilience Programs Failing on Poor Visibility
Organizations need a better way to build and assess programs

US Offers $10m Reward For Alleged Prolific Ransomware Actor
Indictments claim Russian was involved in Babuk, Hive and LockBit

NSO Group Spends Millions Lobbying US Government
Spyware maker wants return to "business as usual"

Camaro Dragon APT Group Exploits TP-Link Routers With Custom Implant
The implant's components are designed to be compatible with different firmware from various vendors



