Infosecurity News

Privacy Watchdog Boosts Legal Funds by Keeping Millions in Fines
Information Commissioner’s Office says extra money is essential

Microsoft's Latest Patch Tuesday Fixes Follina Bug
Redmond giant will switch to Windows Autopatch service

New Syslogk Linux Kernel Rootkit Uses "Magic Packets" to Trigger Remote Backdoor Access
The malware can cloak a malicious payload that could be remotely controlled by an adversary

ClubCiso Report Shows Material Security Incidents Reduced by 54% Compared to Last Year
The survey analyzed the answers of more than 100 information security executives

HelloXD Ransomware Variants Found Installing Backdoor on Windows and Linux Machines
The backdoor allowed attackers to upload and download files, execute commands and remove their footprint

Iran Spear-Phishers Hijack Email Conversations in New Campaign
Sophisticated social engineering targets US and Israeli officials

Over Three-Quarters of UK Adults Hit by Online Scams
Attacks surged by 14% year-on-year, warns Citizens Advice

Attack on Kaiser Permanente Exposes Data on 70,000 Customers
Hacker compromised employee’s email

Apple CEO Tim Cook Pushes Senate For Privacy Legislation
The executive said the company will continue to innovate in the privacy space

FDNY Calls for Digital Firewall to Protect Rescue Workers From Cyber-Attacks
The request called for consultant services to address the cyber-threat of doxxing

#RSAC: World Economic Forum Cybercrime Atlas Effort Advances
Multiple stakeholders came together to help map out the state of global cybercrime

#RSAC: The Cybersecurity Maturity Model Certification Program is Coming
Every org doing business with US Department of Defense will soon comply with The Cybersecurity Maturity Model Certification

Googler Suspended After Claiming AI Became Sentient
Claims raise troubling ethical and cybersecurity considerations

Two Convicted in Major Drugs Bust After Cops Read Encrypted Chats
One of UK’s largest ever drugs labs has been closed down

Eight Zero Days Could Open Doors for Hackers
Trellix finds bugs in OT used for physical access controls

#RSAC: CISA Outlines Bad Practices Every Organization Should Avoid
Some IT practices are more dangerous than others, according to CISA

Southeast Asia and Australia Orgs Targeted by Aoqin Dragon Hackers for Ten Years
The hacking group has targeted government, education and telecom entities

#RSAC: The Privacy and Blockchain Paradox
At an RSA Conference session, experts discussed how blockchain isn't a good fit for privacy compliance frameworks

Vulnerabilities Targeting InfiRay Thermal Cameras May Result in Industrial Process Hacking
SEC Consult found a series of critical vulnerabilities affecting Infiray thermal cameras in Feb 2021

#RSAC: "Users Are Not Stupid, So Don't Treat Them Like They Are"
Julie Haney detailed eight cybersecurity pitfalls that organizations should avoid



