Infosecurity News

SEC Warning as Phishing and Vishing Attacks Mount
Regulator claims some scammers are using real identities of its staff

Wind Turbine Giant Offline After Cyber Incident
Vestas shuts IT systems in multiple locations

Sky Slow to Fix Bug in Routers
Entertainment company repeatedly pushed back updates after being notified of serious vulnerability

Brit Admits Role in International Movie Piracy Ring
Sparks Group member pleads guilty to illegally distributing movies and TV shows on the internet

US Charges Two Iranians with Cyber-based Electoral Interference
Hackers allegedly posed as Proud Boys to influence 2020 presidential election

#IRISSCON: 12 Ways to Defend and Respond to Cyber-Attacks Effectively
Brian Honan sets out a number of security strategies organizations should adopt to defend and respond effectively to cyber-attacks

#IRISSCON: Transition from Cybersecurity to Cyber-Immunity, Says Eugene Kaspersky
Eugene Kaspersky argues traditional approaches to cybersecurity are no longer sufficient for protecting critical infrastructure from cyber-attacks

Suspected EncroChat Drug Trafficker Faces Trial
Kalman Butt is said to have used the encrypted comms platform

Malicious PyPl Packages Downloaded 40,000+ Times
Threat actors go to great lengths to stay hidden on the repository

Less than Half of Consumers Change Passwords Post-Breach
A fifth took no action at all, according to non-profit study

North Korean Cyber-criminal Recycles Tactics and Targets
Researchers investigating the activities of TA406 are left with a prevailing sense of déjà vu

Man Charged with Impersonating Female Minnesota Student Online
Charges brought in cyberstalking case that forced victim to move house

Overworked CISOs are Skipping Family Vacations and Holidays
CISOs’ heavy workload is causing them to miss medical appointments and holidays

#IRISSCON: Understanding the Reality of Cyber Threats to Improve Defenses
Ciaran Martin sets out the reality of cyber harms, and argues this knowledge underpins strong cybersecurity

#IRISSCON: Security Industry Should Change the Rhetoric Around Cyber-Threats
Dr Victoria Baines believes the sector needs to avoid the use of dramatic language when describing cyber-threats to the public

China's APT41 Manages Library of Breached Certificates
Shared resource dramatically increases success rates for Winnti group

Russian Cybercrime Forums Open Doors to Chinese-Speakers
Researchers see east-west activity across Ramp and XSS

Threat Actors Discuss Leasing Zero-Day Exploits
Exploit-as-a-service model mooted in the cybercrime underground

NSA Grants Boost University's Cyber Academy
Cash injection funds expansion of University of North Georgia’s cybersecurity instruction program

New Partnership to Invest in Cybersecurity Startups
Geekdom teams up with gener8tor to help cybersecurity companies develop products



