Infosecurity News

#DataPrivacyWeek: ICO Offers Data Protection Advice to SMBs
Regulator also has words of caution for emerging tech providers

Record-Breaking Year for DDoS Attacks Targeting Russia
ISP Rostelecom says longest attack lasted three months

Hackers Deploy Open-Source Tool Sliver C2, Replacing Cobalt Strike, Metasploit
Sliver is gaining popularity due to its modular capabilities and cross-platform support

Two Vulnerabilities Found in Galaxy App Store
Both issues reportedly affected only Samsung devices running Android 12 and below

Most Federal Agencies Ignored GAO's Cybersecurity Recommendations
Out of the 335 public recommendations issued since 2010, 190 still needed to be implemented

Ad Fraud Scheme Tops 12 Billion Daily Bid Requests
Vastflux operation injected obfuscated JavaScript into ads

Riot Games Halts Work After Cyber-Attack
Compromise impacts developer's ability to release updates

New Government Cyber Advice for £100bn UK Charity Sector
NCSC report warns of surging threat to the third sector

WhatsApp Hit with €5.5m fine for GDPR Violations
The case raised disagreements between Ireland's DPC and the European Data Protection Board

"Workarounds" Helped Royal Mail Resume Shipping After Ransomware Attack
Thanks to technical “workarounds,” Royal Mail has been able to resume “limited” export services one week after being hit by cyber-attack

Phishers Use Blank Images to Disguise Malicious Attachments
Researchers see another sophisticated attempt to obfuscate links

API Attacker Steals Data on 37 Million T-Mobile Customers
Carrier says attack began in November 2022

Massive Credential Stuffing Campaign Hits 35,000 PayPal Users
Payments giant says attacks happened in early December

Roaming Mantis' Hacking Campaign Adds DNS Changer to Mobile App
The new feature can infiltrate WiFi routers and undertake DNS hijacking

ThreatModeler Makes DevSecOps More Accessible With New Marketplace
The store includes pre-built threat models that can be integrated into a development pipeline

Mailchimp Hit By Another Data Breach Following Employee Hack
According to the company, the incident was limited to 133 accounts

Ransomware Payments Fall by 40% in 2022
The Chainalysis report found that victim organizations are increasingly reluctant to pay ransom demands

Over a Third of Recent ICS Bugs Still Have No Vendor Patch
News comes as thousands of critical infrastructure attacks are detected

FTX: Over $400m Stolen from Bankrupt Exchange
FTX founder already charged with fraud and money laundering

Crypto-Exchange Used to Launder Ransomware Transactions Dismantled
The US Justice Department arrested Russian national named Anatoly Legkodymov, the alleged owner of the China-based underground platform Bitzlato



