Infosecurity News

US Authorities Seize $112m From "Pig Butchering" Scammers
Six crypto wallets now under government control

Crypto Firms Are Likely Target for 3CX Attacks
Kaspersky links campaign to Gopuram backdoor

US DoD Unveils Website For Hack the Pentagon Bug Bounty Program
It will be a resource for DoD organizations, vendors and security researchers

TikTok to Comply With US Law, Protect User Data From China
Erich Andersen, general counsel for TikTok, confirmed company will safeguard US user data from China

Unapproved Apps Used By 32% of Remote Workers
Latest Lookout report also suggested 46% of remote employees saved work files to personal devices

Dish Network Hit with Multiple Securities Class Action Lawsuits
Pay TV firm accused of misleading investors

Consumer Loans Firm TMX Reveals Major Data Breach
Nearly five million impacted by December 2022 incident

Outsourcer Capita Claims to Have Contained "Cyber Incident"
Firm has billions of pounds worth of government contracts

Italy's Privacy Watchdog Blocks ChatGPT Amid Privacy Concerns
GPDP probe is due to allegations that ChatGPT failed to comply with data collection rules

Modular "AlienFox" Toolkit Used to Steal Cloud Service Credentials
Harvesting API keys and secrets from AWS SES, Microsoft Office 365 and other services

New Azure Flaw "Super FabriXss" Enables Remote Code Execution Attacks
The cross-site scripting flaw affects SFX version 9.1.1436.9590 or earlier and has a CVSS of 8.2

UK Regulator: HIV Data Protection Must Improve
ICO issues call after reprimanding NHS Highland

GCHQ Updates Security Guidance for Boards
Agency wants business leaders to get serious about cyber

Ukrainian Police Bust Multimillion-Dollar Phishing Gang
More than 100 sites created to lure European victims

North Korean Hackers Use Trojanized 3CX DesktopApp in Supply Chain Attacks
Windows and Mac versions of the software were compromised to deliver infostealers

Over 70% of Employees Keep Work Passwords on Personal Devices
95% of security leaders are also concerned about phishing attacks via private messaging apps

FDA Protects Medical Devices Against Cyber-Threats With New Measures
New medical devices applications should "monitor, identify, and address" cybersecurity issues

Volume of HTTPS Phishing Sites Surges 56% Annually
Scammers are increasingly trying to legitimize their efforts

NCA Celebrates Multimillion-Pound Fraud Takedowns
Agency says it has seized hundreds of assets in month-long operation

Thieves Steal $9m from Crypto Liquidity Pool
SafeMoon claims exploited vulnerability was to blame



