Infosecurity News
LastPass Reveals Another Customer Data Breach
Incident is second this year, although company says passwords are safe
Majority of US Defense Contractors Not Meeting Basic Cybersecurity Requirements
87% of DoD contractors are failing to meet the basic level of compliance ahead of CMMC coming into force next year
Australian Parliament Passes Privacy Penalty Bill
The higher penalties and extended powers will become effective after the bill receives royal assent
China-Based Hackers Target Southeast Asia With USB-Based Malware
UNC4191 operations have affected several entities in Southeast Asia but also in the US, Europe and Asia Pacific Japan
Zero-Day Flaw Discovered in Quarkus Java Framework
The flaw has a CVSS v3 base score rating of 9.8 and can be found in the Dev UI Config Editor
Businesses Increasing Cyber Spend Without Clear Strategy, Fastly Finds
As businesses aim to spend more on cybersecurity, Fastly warns that many do so without a clear strategy
Let's Encrypt Issues Three Billionth Certificate
Free certificate authority serves over 300 million websites
Most Small Biz IaaS Users Seeing Surge in Attacks
A further 67% were hit by ransomware in past year
New "Icefall" Bugs Include Critical DoS Flaw
Millions of OT devices may be affected
Oracle Fusion Middleware Vulnerability Actively Exploited in the Wild: CISA
The bug allows unauthenticated attackers with network access to compromise Oracle Access Manager
PII May Have Been Stolen in Virginia County Ransomware Attack
A W-2 form was reportedly published on a dark web forum with stolen, sensitive data
US Census Bureau Head Fends Off Critics of 'Differential Privacy' Tool
Santos defended differential privacy against prominent researchers
Police Shutter 13,000 Sites in Piracy Crackdown
Fourteen detained as part of Europol operation
Ireland’s DPC Fines Meta €265m Following Large-Scale Data Leak
The fine followed an inquiry into data processing by Meta in response to a major data breach
Experts Find 16,000+ Scam FIFA World Cup Domains
Social media ads and accounts help to drive traffic
Web App and API Attacks Surge 257% in Financial Services
Data and credentials at risk in the vertical
Elon Musk Unveils End-to-End Encrypted DMs For Twitter 2.0
The E2EE feature was first spotted by mobile researcher Jane Manchun Wong earlier this month
Phishing Campaign Impersonating UAE Ministry of Human Resources Grows
New cluster of phishing domains registered using similar naming schemes discovered
Millions of Twitter Accounts Potentially Compromised
The breach affected any account with the "Let others find you by your phone" option enabled
Orange Cyberdefense Unveils Its Security Navigator With OT Hacking Demos
The cybersecurity arm of Orange Business Services (OBS) organized a launch event at its Lyon campus, in France, for its latest annual threat report
