Infosecurity News

NCSC: It's Time for CISOs to Prioritize Accessibility
Doing so will make human errors and workarounds less likely

Teen Charged in DraftKings Credential Stuffing Case
Wisconsin man alleged to have stolen $600,000 from accounts

Cyber Warfare Escalates Amid China-Taiwan Tensions
Trellix report observed a surge in malicious emails targeting Taiwanese industries and government officials

Apple's App Store Blocks $2bn in Fraudulent Transactions
Firm also rejected 1.7 million apps for failing to meet privacy, security and content standards

Montana Signs Ban on TikTok Usage on Personal Devices
A TikTok spokesperson said the ban violates the First Amendment rights of Montana residents

ChatGPT Leveraged to Enhance Software Supply Chain Security
OX-GPT is designed to help quickly remediate security vulnerabilities during software development

Government Publishes Playbook to Enhance Smart City Security
Resources are designed to help local authorities mitigate risk

New Cloud Data Leak Adds to Capita's Woes
Colchester council says multiple local authorities are impacted

Identity Crimes Remain at All-Time High in 2022
Most reports related to Google Voice scams

Social Engineering Risks Found in Microsoft Teams
The abuse methods require pre-existing access to a compromised user account or Teams token

BatLoader Impersonates ChatGPT and Midjourney in Cyber-Attacks
eSentire recommended raising awareness of malware masquerading as legitimate applications

Energy Industry Faces Increasing Dark Web Cyber Threats
The claims come from the latest Searchlight Cyber threat intelligence report

Acronis Launches EDR Solution with Potential for AI Integration
Acronis EDR is integrated into its Cyber Protect Cloud solution along with backup and data recovery functionalities

Cyber-Resilience Programs Failing on Poor Visibility
Organizations need a better way to build and assess programs

US Offers $10m Reward For Alleged Prolific Ransomware Actor
Indictments claim Russian was involved in Babuk, Hive and LockBit

NSO Group Spends Millions Lobbying US Government
Spyware maker wants return to "business as usual"

Camaro Dragon APT Group Exploits TP-Link Routers With Custom Implant
The implant's components are designed to be compatible with different firmware from various vendors

Lacroix Shuts Three Factories For a Week After Cyber-Attack
The targeted cyber-attack hit activity sites in France, Germany and Tunisia

Infostealer Malware Surges: Stolen Logs Up 670% on Russian Market
The findings come from Secureworks' Counter Threat Unit

BEC Attackers Spoof CC'd Execs to Force Payment
Armorblox uncovers another new tactic used by email fraudsters



