Infosecurity News
Consumer Loans Firm TMX Reveals Major Data Breach
Nearly five million impacted by December 2022 incident
Outsourcer Capita Claims to Have Contained "Cyber Incident"
Firm has billions of pounds worth of government contracts
Italy's Privacy Watchdog Blocks ChatGPT Amid Privacy Concerns
GPDP probe is due to allegations that ChatGPT failed to comply with data collection rules
Modular "AlienFox" Toolkit Used to Steal Cloud Service Credentials
Harvesting API keys and secrets from AWS SES, Microsoft Office 365 and other services
New Azure Flaw "Super FabriXss" Enables Remote Code Execution Attacks
The cross-site scripting flaw affects SFX version 9.1.1436.9590 or earlier and has a CVSS of 8.2
UK Regulator: HIV Data Protection Must Improve
ICO issues call after reprimanding NHS Highland
GCHQ Updates Security Guidance for Boards
Agency wants business leaders to get serious about cyber
Ukrainian Police Bust Multimillion-Dollar Phishing Gang
More than 100 sites created to lure European victims
North Korean Hackers Use Trojanized 3CX DesktopApp in Supply Chain Attacks
Windows and Mac versions of the software were compromised to deliver infostealers
Over 70% of Employees Keep Work Passwords on Personal Devices
95% of security leaders are also concerned about phishing attacks via private messaging apps
FDA Protects Medical Devices Against Cyber-Threats With New Measures
New medical devices applications should "monitor, identify, and address" cybersecurity issues
Volume of HTTPS Phishing Sites Surges 56% Annually
Scammers are increasingly trying to legitimize their efforts
NCA Celebrates Multimillion-Pound Fraud Takedowns
Agency says it has seized hundreds of assets in month-long operation
Thieves Steal $9m from Crypto Liquidity Pool
SafeMoon claims exploited vulnerability was to blame
Google Warns Against Commercial Spyware Exploiting Zero-Days
Spyware vendors facilitated the spread of malware by government-backed threat actors
Clop Ransomware Group Exploits GoAnywhere MFT Flaw
The vulnerability has a CVSS score of 7.2 and was exploited against several companies in the US
Attacks Targeting APIs Increased By 400% in Last Six Months
The new Salt Security report found that 80% of attacks happened over authenticated APIs
ChatGPT Vulnerability May Have Exposed Users’ Payment Information
The breach was caused by a bug in an open-source library
Tech Industry Bids to Tackle Cyber-Mercenary Epidemic
New principles designed to disrupt and limit a rapidly growing market
Just 1% of Cloud Permissions Are Actively Used
Microsoft warns of "permissions gap" security threat
