Infosecurity News
Chinese Spyware Discovered on Google Play Store
Each application sends the stolen data to China over a hundred times
Twitter User Exposes Nickelodeon Data Leak
Social media reports suggest an individual allegedly dumped approximately 500GB of animation files
New Campaigns Use Malicious npm Packages to Support Phishing Kits
ReversingLabs discovered more than a dozen malicious npm packages between May 11 and June 13
ENISA: Ransomware Makes Up Over Half of Healthcare Cyber-Threats
The report revealed that patient data is the most targeted asset by ransomware actors
US and Canadian Authorities Warn of Increased Truebot Activity
The joint advisory reveals that threat actors are leveraging new techniques to deliver the botnet
HSBC Joins Quantum-Secure Network
The banking giant is trialling the QKD-secured network as it seeks to future-proof its global operations against quantum-enabled cyber-threats
Ongoing Incident Prompts JumpCloud to Reset API Keys
To assist customers in the process, JumpCloud provided a guide for resetting affected API keys
Cisco Enterprise Switch Flaw Exposes Encrypted Traffic
The vulnerability affects Cisco Nexus 9000 Series Fabric Switches
Unpatched SolarView Systems Vulnerable to Exploits
VulnCheck exposed the flaws, following a Palo Alto Networks’ Unit 42 publication
Human Error the Leading Cause of Cloud Data Breaches
The report also found a significant rise in sensitive data being stored in the cloud and a continued surge in multicloud adoption
Experts Warn of Impending TeamTNT Docker Attacks
Infrastructure being built to support new cloud-native campaign
Police Arrest Suspected OPERA1ER Cybercrime Kingpin
Individual is thought to be key figure in $30m gang
Suspicious Email Reports Up a Third as NCSC Hails Active Defense
GCHQ offshoot trumpets “whole-of-society” approach
Nagoya Port Faces Disruption After Ransomware Attack
Container import and export operations via trailer transportation have been temporarily halted
High-Severity Flaws Fixed in Firefox 115 Update
One of them, CVE-2023-37201, involved a use-after-free issue in WebRTC certificate generation
Sophisticated Email Attacks Target Cryptocurrency Wallets
Discovered by Kaspersky, the campaign delivered 85,000 scam emails during the spring of 2023
UK Citizens Wary of NHS AI Use, Citing Privacy Concerns
In a survey, over half of UK citizens expressed privacy and security concerns over AI being used to analyze patient data
European Commission to Tweak GDPR For Cross-Border Cases
Rules will streamline cooperation between data protection authorities
New Tool Helps Devs Check For Manifest Confusion Mismatches
Python script could minimize risk until a formal solution is developed
Security Experts Raise Major Concerns With Online Safety Bill
Open letter signed by 68 leading security and privacy researchers
