Infosecurity News
New DFSCoerce NTLM Relay Attack Enables Hackers to Perform Windows Domain Takeover
Assuming the identity of a domain, threat actors could then execute arbitrary commands
#InfosecurityEurope2022 Defense Looks to Bring Cyber Into the Mainstream
UK forces need talent and skills to allow the UK to counter cyber-threats and defend its interests
#InfosecurityEurope2022 Ransomware: Payment Decisions Finely Balanced
Firms need to weigh up operational, ethical and financial issues when deciding whether to pay ransomware, according to experts
Microsoft Out-of-Band Update Fixes Arm Device Issues
Some users could not sign-in using Azure Active Directory
US Bank Data Breach Impacts Over 1.5 Million Customers
Flagstar reveals details of December incident
Researchers Reveal 56 OT Bugs in "Icefall" Report
Forescout warns of widespread “insecure-by-design” practices
Google Chrome Extensions Could Be Used to Track Users Online
New website can check for installed Chrome extensions and generate a fingerprint of a visiting user
Former Amazon Worker Convicted of Capital One Data Breach
The software engineer mined stolen data and installed cryptocurrency miners on some AWS servers
BRATA Android Malware Group Now Classified As Advanced Persistent Threat
BRATA now targeting a specific financial institution at a time
Governance Gap Raises AI Security Concerns
Cyber now seen as most important component for adoption
QNAP Customers Hit by Double Ransomware Blitz
Taiwanese manufacturer braced for twin threat
Investigators Disrupt Giant RSocks Botnet
Russian cyber-criminals rented it out to other groups
Microsoft Addresses Wi-Fi Hotspots Issues in Latest Update
Host devices might lose connection to the internet after client device connects
US Man Sentenced to Nine Years in Prison for Hacking iCloud Accounts and Stealing Nudes
Hao Kuo Chi illegally obtained iCloud credentials of 4700 victims
WordPress Updates More Than a Million Sites to Fix Critical Ninja Forms Vulnerability
The code injection vulnerability allowed attackers to call methods in various Ninja Forms classes
Experts Discuss Next Steps in Trust, Privacy and Security
The complex interrelation between trust, privacy and cybersecurity was discussed by experts during Okta Forum 2022
UK Proposes Post-Brexit Data Laws to Boost Innovation
Proposals designed to unlock businesses' ability to use data and clamp down on nuisance calls and cookie pop-ups
Cybersecurity Researchers Find Several Google Play Store Apps Stealing User Data
Most dangerous are spyware tools capable of stealing information from other apps' notifications
NakedPages Phishing Toolkit is Now Available on Cybercrime Forums
The toolkit is reportedly fully automated and comes preloaded with more than 50 phishing templates and site projects
Office 365 Functionality Could Allow Ransomware to Hold Files Stored on SharePoint and OneDrive
Malicious actors could reduce versioning limit of files to a low number and encrypt them more times than versioning limit
