Infosecurity News
Microsoft Warns of Increase in Business Email Compromise Attacks
The company's systems currently detect and investigate an average of 156,000 BEC attacks daily
KeePass Flaw Exposes Master Passwords
The vulnerability (CVE-2023-32784) was discovered by security researcher Dominik Reichl
CommonMagic Malware Implants Linked to New CloudWizard Framework
Kaspersky researchers said sections of the CloudWizard code were identical to CommonMagic
Experts Warn of Voice Cloning-as-a-Service
Dark web offerings could commoditize deep fake technology
#CRESTCon: White House Shifts US Cybersecurity Strategy Towards International Cooperation
Andy Williams, CEO of Global Transatlantic Ltd, spoke at CRESTCon Europe about the new US National Cybersecurity Strategy
NCSC: It's Time for CISOs to Prioritize Accessibility
Doing so will make human errors and workarounds less likely
Teen Charged in DraftKings Credential Stuffing Case
Wisconsin man alleged to have stolen $600,000 from accounts
Cyber Warfare Escalates Amid China-Taiwan Tensions
Trellix report observed a surge in malicious emails targeting Taiwanese industries and government officials
Apple's App Store Blocks $2bn in Fraudulent Transactions
Firm also rejected 1.7 million apps for failing to meet privacy, security and content standards
Montana Signs Ban on TikTok Usage on Personal Devices
A TikTok spokesperson said the ban violates the First Amendment rights of Montana residents
ChatGPT Leveraged to Enhance Software Supply Chain Security
OX-GPT is designed to help quickly remediate security vulnerabilities during software development
Government Publishes Playbook to Enhance Smart City Security
Resources are designed to help local authorities mitigate risk
New Cloud Data Leak Adds to Capita's Woes
Colchester council says multiple local authorities are impacted
Identity Crimes Remain at All-Time High in 2022
Most reports related to Google Voice scams
Social Engineering Risks Found in Microsoft Teams
The abuse methods require pre-existing access to a compromised user account or Teams token
BatLoader Impersonates ChatGPT and Midjourney in Cyber-Attacks
eSentire recommended raising awareness of malware masquerading as legitimate applications
Energy Industry Faces Increasing Dark Web Cyber Threats
The claims come from the latest Searchlight Cyber threat intelligence report
Acronis Launches EDR Solution with Potential for AI Integration
Acronis EDR is integrated into its Cyber Protect Cloud solution along with backup and data recovery functionalities
Cyber-Resilience Programs Failing on Poor Visibility
Organizations need a better way to build and assess programs
US Offers $10m Reward For Alleged Prolific Ransomware Actor
Indictments claim Russian was involved in Babuk, Hive and LockBit
