Infosecurity News

Ireland’s DPC Fines Meta €265m Following Large-Scale Data Leak
The fine followed an inquiry into data processing by Meta in response to a major data breach

Experts Find 16,000+ Scam FIFA World Cup Domains
Social media ads and accounts help to drive traffic

Web App and API Attacks Surge 257% in Financial Services
Data and credentials at risk in the vertical

Elon Musk Unveils End-to-End Encrypted DMs For Twitter 2.0
The E2EE feature was first spotted by mobile researcher Jane Manchun Wong earlier this month

Phishing Campaign Impersonating UAE Ministry of Human Resources Grows
New cluster of phishing domains registered using similar naming schemes discovered

Millions of Twitter Accounts Potentially Compromised
The breach affected any account with the "Let others find you by your phone" option enabled

Orange Cyberdefense Unveils Its Security Navigator With OT Hacking Demos
The cybersecurity arm of Orange Business Services (OBS) organized a launch event at its Lyon campus, in France, for its latest annual threat report

Belgian Police Under Fire After Major Ransomware Leak
Crime reports dating back 15 years are made public

Russian Sandworm Hackers Linked to New Ransomware Blitz
Ukrainian targets are on the receiving end of RansomBoggs variant

African Police Bust $800K Fraud Schemes
International operation lasted four months

ConnectWise Fixes XSS Vulnerability that Could Lead to Remote Code Execution
Threat actors could exploit the flaw to take complete control of the ConnectWise platform

Google Releases Chrome Patch to Fix New Zero-Day Vulnerability
The high-severity vulnerability refers to a heap buffer overflow in the GPU component

Remote Code Execution Vulnerability Found in Windows Internet Key Exchange
The discovered vulnerabilities could have been exploited to target almost 1000 systems

Experts Warn Remote Workers of Black Friday Security Threats
Shared devices can present corporate security risk

Experts Find 1600+ Malicious Docker Hub Images
Shared repository is also a hidden source of malware

Global Police Celebrate $130m Cyber Busts
Almost 1000 arrested in Haechi III operation

Bahamut Spyware Group Compromises Android Devices Via Fake VPN Apps
The app used as part of the campaign was a trojanized version of SoftVPN or OpenVPN

SharkBot Malware Found in Android File Manager Apps With Thousands of Downloads
The apps are no longer available on the Play Store, but can be found in third-party stores

Sonder confirms data breach, documents and other PII potentially compromised
The company reportedly learned of unauthorized access to one of its systems on November 14

Cyber Essentials Scheme Set for April 2023 Update
UK best practice security framework to offer new guidance



