Infosecurity News
Critical Infrastructure Firms Concerned Over Insider Threat
Financial services sector is particularly badly impacted
Small Business Interest in Cyber-Hygiene is Waning
UK government survey finds they are prioritizing other things
Iranian Nation-State Actor "Mint Sandstorm" Weaponizes N-day Flaws
Since 2023, Microsoft observed a decrease in the time required for the group to adopt public POCs
#CYBERUK23: Threat Posed by 'Irresponsible' Use of Commercial Hacking Tools Increasing, NCSC Warns
Spyware and hackers-for-hire will almost certainly expand in the next five years, warned the British cybersecurity agency
Raspberry Robin Adopts Unique Evasion Techniques
Security researchers at Check Point published a new advisory on Tuesday describing the new malware
Nurse Call Systems, Infusion Pumps Riskiest Connected Medical Devices
The findings come from a new report by asset visibility and security company Armis
#CYBERUK23: NCSC Urges International Collaboration to Build Cyber Resilience
The NCSC’s CEO, Lindy Cameron, urges the UK to cooperate more with its allies in combating cyber threats
Police Escape $1.2m Fine For Secretly Recording Phone Calls
Surrey and Sussex police forces reprimanded after recording 200,000 calls
Triple-digit Increase in API and App Attacks on Tech and Retail
Web attacks also surge in financial services, although not in UK
NCSC Warns of Destructive Russian Attacks on Critical Infrastructure
Alert follows advisory about Kremlin hackers targeting Cisco routers
Goldoson Malware Found in Dozens of Google Play Store Apps
The malicious software library can collect installed app lists, Wi-Fi and Bluetooth data, and more
MuddyWater Uses SimpleHelp to Target Critical Infrastructure Firms
A new advisory by Group-IB suggests the software used as part of these attacks is not compromised
NSO Group's Pegasus Spyware Found on High-Risk iPhones
The findings by Jamf suggest the observed attacks are highly targeted
Cyber Intrusion Detection Time at an All-Time Low
Mandiant’s latest M-Trends report shows that organizations only needed a median time of 16 days to detect an intrusion in 2022 – the lowest dwell time ever recorded by the firm
WhatsApp, Signal Claim Online Safety Bill Threatens User Privacy and Safety
The UK Government OSB undermines end-to-end encrypted communications and must be reconsidered according to an open letter signed by Signal and WhatsApp
Cloud Security Alerts Take Six Days to Resolve
Palo Alto report warns of an expanding cloud attack surface
Conversational Attacks Fastest Growing Mobile Threat
Pig butchering and similar scams could soon be AI-driven
UK's SMEs to Benefit From New Cyber Advisors
Accredited consultants will drive Cyber Essentials take-up
Phishing Attacks Surge as Threat Actors Leverage New AI Tools
Large language models like ChatGPT and phishing kits have significantly contributed to the growth of phishing, Zscaler’s 2023 ThreatLabz Phishing Report claims
Montana Becomes First US State to Pass TikTok Ban
The ban needs to be signed into law by Republican Governor Greg Gianforte
