Infosecurity News

Euro Authorities Warn World Cup Fans Over Qatari Apps
Security and privacy concerns mount for those attending matches

Most Neurodiverse Women in Tech Feel Unsupported: Study
Report suggests high demand for talent from security sector employers

LockBit Remains Most Prolific Ransomware in Q3
Phobos is a close second, according to Trellix

Billbug Targets Government Agencies in Multiple Asian Countries
According to Symantec, the targeting of a certificate authority was notable

Remote Code Execution Discovered in Spotify's Backstage
Spotify ranked the vulnerability as critical, with a CVSS score of 9.8

Lazarus Backdoor DTrack Evolves to Target Europe and Latin America
DTrack has not changed substantially, but Lazarus made some “interesting” modifications

China-Based Campaign Uses 42,000 Phishing Domains
Operation designed to spread malware and generate ad revenue

Police Celebrate Arrest of 59 Suspected Scammers
Month-long European operation focused on online fraudsters

Google to Pay $392m in Landmark Privacy Case
Multi-state settlement is largest in US history

GitHub Now Supports Private Vulnerability Reporting For Public Repositories
The feature needs to be manually enabled by repository maintainers

NSA Guide Helps Firms Protect Against Memory Safety Vulnerabilities
The document describes situations where cyber actors steal sensitive information and other negative impacts

Australia Considers Ban on Ransomware Payments After Medibank Breach
Home affairs minister Clare O'Neil made the announcement on ABC television on Sunday

Mass Email Extortion Campaign Claims Server Hack
Threat actors claim they’ll destroy victims' reputation if they don't pay

UK Shoppers Lost £15m+ to Scammers Last Winter
Cyber experts urge consumers to improve online safety

Ukrainian CERT Discloses New Data-Wiping Campaign
Somnia malware hijacks Telegram and VPN accounts

CISA Releases SSVC Guide to Help Companies Prioritize Vulnerabilities
Remediation efforts are prioritized based on exploitation status, safety impact and prevalence criteria

Man Arrested in Ontario For Alleged LockBit Ransomware Involvement
Mikhail Vasiliev was apprehended in Canada and is in custody awaiting extradition to the US

Twitter C-Level Resignations Continue As Blue Program Creates New Cyber-Risks
They left quoting concerns about the rollout of new features without an FTC consent decree

#IRISSCON: Social Engineering Testers Warned Not to Cross Ethical and Legal Boundaries
Sharon Conheady discusses the ethical and legal dilemmas often faced by social engineering testers

CISA Says Midterm Voting Uncompromised By Cyber-attacks
Election workers will continue to work in the days ahead to certify the election results



