Infosecurity News

Majority of Companies Reduce Cybersecurity Staff Over Holidays
Cybereason’s latest report is based on a survey of more than 1200 cybersecurity professionals

Botnets, Trojans, DDoS From Ukraine and Russia Have Increased Since Invasion
The news comes from a report by Top10VPN and is based on data by the Shadowserver Foundation

State-Backed APT Group Activity Continuing Apace
The report outlines recent APT group activity from Russia, China, Iran and North Korea

Euro Authorities Warn World Cup Fans Over Qatari Apps
Security and privacy concerns mount for those attending matches

Most Neurodiverse Women in Tech Feel Unsupported: Study
Report suggests high demand for talent from security sector employers

LockBit Remains Most Prolific Ransomware in Q3
Phobos is a close second, according to Trellix

Billbug Targets Government Agencies in Multiple Asian Countries
According to Symantec, the targeting of a certificate authority was notable

Remote Code Execution Discovered in Spotify's Backstage
Spotify ranked the vulnerability as critical, with a CVSS score of 9.8

Lazarus Backdoor DTrack Evolves to Target Europe and Latin America
DTrack has not changed substantially, but Lazarus made some “interesting” modifications

China-Based Campaign Uses 42,000 Phishing Domains
Operation designed to spread malware and generate ad revenue

Police Celebrate Arrest of 59 Suspected Scammers
Month-long European operation focused on online fraudsters

Google to Pay $392m in Landmark Privacy Case
Multi-state settlement is largest in US history

GitHub Now Supports Private Vulnerability Reporting For Public Repositories
The feature needs to be manually enabled by repository maintainers

NSA Guide Helps Firms Protect Against Memory Safety Vulnerabilities
The document describes situations where cyber actors steal sensitive information and other negative impacts

Australia Considers Ban on Ransomware Payments After Medibank Breach
Home affairs minister Clare O'Neil made the announcement on ABC television on Sunday

Mass Email Extortion Campaign Claims Server Hack
Threat actors claim they’ll destroy victims' reputation if they don't pay

UK Shoppers Lost £15m+ to Scammers Last Winter
Cyber experts urge consumers to improve online safety

Ukrainian CERT Discloses New Data-Wiping Campaign
Somnia malware hijacks Telegram and VPN accounts

CISA Releases SSVC Guide to Help Companies Prioritize Vulnerabilities
Remediation efforts are prioritized based on exploitation status, safety impact and prevalence criteria

Man Arrested in Ontario For Alleged LockBit Ransomware Involvement
Mikhail Vasiliev was apprehended in Canada and is in custody awaiting extradition to the US



