Infosecurity News

ISACA: Ensuring Digital Trust Key to Digital Transformation Success
ISACA's State of Digital Trust 2022 report highlights increasing importance of digital trust across businesses

Vulnerabilities Found in Airplane WiFi Devices, Passengers' Data Exposed
The flaws affected the Flexlan FX3000 and FX2000 series wireless LAN devices made by Contec

SparklingGoblin APT Targeted Hong Kong University With New Linux Backdoor
Eset also said the same university was targeted during student protests in May 2020

FormBook Knocks Off Emotet As Most Used Malware in August
The report also suggested the Android spyware Joker took third place in the mobile index

Four-Fifths of Firms Hit by Critical Cloud Security Incident
Data leaks, breaches and intrusions caused headaches over past year

DDoS Attacks on UK Firms Surge During Ukraine War
Overall incidents fell in H1 2022, according to FOI data

Microsoft Fixes Two Zero-Days This Patch Tuesday
Redmond passes 1000 CVEs for the year already

iOS 16 Launches With Lockdown Mode, Spyware Protection, Safety Check
iOS 16 supports iPhone devices starting from the iPhone 8

ShadowPad-Associated Hackers Targeted Asian Governments
The attacks have been underway since early 2021 and appear focused on intelligence gathering

Hackers Steal Steam Credentials With 'Browser-in-the-Browser' Technique
Some of the Steam accounts stolen were reportedly valued between $100,000 and $300,000

Ransomware Gang Hacks VoIP for Initial Access
Mitel MiVoice appliance bug exploited in sophisticated attack

Iranian Hackers Launch Renewed Attack on Albania
Prime Minister warns of disruption at border crossings

Researchers Warn of 674% Surge in Deadbolt Ransomware
Malware continues to infect QNAP devices

US Treasury Sanctions Iranian Minister Over Hacking of Govt and Allies
Iran would have directed several networks of cyber threat actors in support of its political goals

High Severity Vulnerabilities Found in HP Enterprise Devices
The flaws affect HP EliteBook devices and have CVSS scores between 7.5 and 8.2

Oxeye Discovers Several High Severity IDOR Vulnerabilities in Harbor
The flaws were discovered despite Harbor having implemented RBAC on most HTTP endpoints

Cops Raid Suspected Fraudster Penthouses
Gang believed to have posed as UK financial regulator

Ransomware Actors Embrace Intermittent Encryption
New technique makes for faster encryption and improved evasion

ICO Slams Government Departments Over FOI Failings
Regulator takes a harder line on enforcement

North Korean Lazarus Group Hacked Energy Providers Worldwide
The campaign was disclosed by Symantec and AhnLab but Cisco Talos is now providing more details



