Infosecurity News

  1. FormBook Tops Check Point's Most Wanted Malware List For September

    Vidar, an infostealer, has entered the top 10 list in eighth place for the first time

  2. Microsoft October 2022 Patch Tuesday Fixes 84 Flaws, Including Zero-Day

    Thirteen of the 84 vulnerabilities fixed in yesterday’s update are classified as 'Critical'

  3. Singtel's Australian IT Firm Dialog Suffers Data Breach

    The breach affected around 20 clients and 1000 current and/or former Dialog employees

  4. Claroty Found Hardcoded Cryptographic Keys in Siemens PLCs Using RCE

    The vulnerability has been assigned a CVE – Siemens has already updated affected systems and published recommendations for mitigating the risk

  5. Polonium Uses Seven Backdoor Variants to Spy on Israeli Organizations

    Researchers at ESET found evidence of previously undocumented custom tools used by the hackers

  6. #ISC2Congress: US Government is Embracing 'Collective Defense'

    We are all in it together, says the DoE's chief information officer

  7. Google Unifies Recent Acquisitions Under New Cloud Security Offering

    Google embeds in cloud security market with new software suite

  8. Toyota Reveals Data Leak of 300,000 Customers

    The leak was caused by an access key being made publicly available on GitHub for almost five years

  9. A New Wave of PayPal Invoice Scams Using Crypto Disguise

    Trend Micro found evidence of new PayPal scammers impersonating crypto-related businesses

  10. #ISC2Congress: Cybersecurity Pros Must Prepare for Emerging Deepfake Threats

    The security risks posed by deepfake technology are increasing

  11. Calls for Better Microsoft Teams Backup as Confidential Info Sent on the Platform

    Many admitted to sending messages on Teams they should not have

  12. Pro-Russian Group KillNet Claims Responsibility for 14 US Airport DDoS Attacks

    The websites of several major US airports were disrupted on October 10, 2022

  13. Ukraine Enhances Cooperation With EU Cybersecurity Agencies

    Ukraine looks to enhance European integration with ENISA special partner status

  14. Intel Confirms Source Code Leak

    Cyber-criminals could use the leaked source code to help launch attacks

  15. ThermoSecure: Cracking Passwords Using Finger Heat on Keyboards is Now Possible

    A group of researchers have guessed 100% of six-character passwords using this attack

  16. German Cybersecurity Chief Faces Sacking Over Possible Russia Ties

    Schoenbohm accused of having maintained contacts with people involved with Russian security services

  17. Facebook Login Details at Risk as Meta Identifies Over 400 Malicious Apps

    Some of the malicious apps are able to evade detection and continue to make it onto legitimate app stores

  18. 91% of Cyber Pros Experience Mental Health Challenges at Work

    Factors contributing to mental health challenges included poor culture and the stressful nature of the work

  19. LofyGang Group Linked to Recent Software Supply Chain Attacks

    The group focuses on utilizing open-source software for malicious purposes

  20. RCE on Log4j Among Top CVEs Exploited By Chinese-Backed Hackers

    In a joint advisory, three US agencies, NSA, CISA and FBI, warned about Chinese threat actors

Why Not Watch?

  1. What to Fix First: A Practical Guide to Risk-Based Remediation

  2. Who Authorized That Agent? Enforcing AI Authority Before the Action

  3. How to Detect Insider Threats Without a Security Team

  4. From AI Assumptions to an AI Security Architecture: Lessons From a Real Enterprise

What’s Hot on Infosecurity Magazine?