Infosecurity News

US and Australia Enter CLOUD Act Agreement
Australia and the United States agree to share electronic data in serious crime investigations

France Orders Clearview AI to Delete Data
CNIL commands facial recognition software maker to erase images gathered online without people’s consent

60% of UK Workers Have Been Victim of a Cyber-Attack, Yet Awareness Remains Low
The nationwide survey found that only around a quarter (27%) of UK workers are aware of the associated cyber risks

Online Shoppers Could Face Eight Million Credential Stuffing Attacks Per Day Over Christmas
Over two billion credential stuffing attacks took place in the UK from October 2020 to September 2021

All Change at the Top as New Ransomware Groups Emerge
Ransomware as a Service ecosystem continues to evolve

Regulator: Venues Must Protect User Privacy During #COVID19 Checks
ICO offers advice for nightclubs and large event organizers

Experts: All Breach Victims Should Freeze Credit
Non-profit argues lack of understanding is putting consumers at risk

Virginia Reeling from Ransomware
Virginia health department and state legislature impacted by two ransomware attacks

FBI Recovers Oregonians' Stolen Data
Health information of 750,000 patients recovered from account belonging to HelloKitty

DHS Launches Bug Bounty Program
Cybersecurity researchers invited to “Hack DHS” and earn money in exchange for detecting vulnerabilities

Grindr Fined €6.5m for Selling User Data Without Explicit Consent
The penalty was issued for sharing users' special category data with third parties without their explicit consent

UK's New Cyber Strategy Designed to Boost Position as "Global Cyber Power"
The new strategy aims to bolster the UK's defensive and offensive cyber capabilities

Web App Attacks Surge 251% in Two Years
Imperva warns of pre-Christmas surge

Government Experts in Last Minute Seasonal Scam Warning
Online shoppers urged not to fall for phishing lures and fake stores

Log4j Looms Large Over Patch Tuesday
IT teams are now also scrambling to fix six Microsoft zero-days

Cyber-Attack on Financial Apps
Hundreds of financial applications targeted by new Anubis malware campaign

LastPass to Become Standalone Company
LogMeIn to set up password manager LastPass as an independent business

TAG to Open New Global Headquarters
Cybersecurity research and advisory firm to open new global headquarters in New York City

Significant Disconnect Between SOC Leaders and Staff
More than 40% of SOC staff said lack of leadership or executive level support was a major barrier to success

Experts: Log4j Bug Could Be Exploited for “Years”
Vulnerability could remain stubbornly difficult to find and patch



