Infosecurity News

Flaw Found in Biometric ID Devices
Vulnerability in access control devices allows attackers to unlock doors and enter protected areas

Ukrainian Government Websites Forced Offline in "Massive" Cyber-Attack
More than a dozen Ukrainian government have been forced offline amid heightened tensions with Russia

North Korean Hackers Stole $400m in Cryptocurrency Last Year
The funds were extracted following at least seven attacks on cryptocurrency platforms

AWS Patches Glue Bug That Put Customer Data at Risk
Superglue vulnerability was enabled by internal misconfiguration

Ukrainian Cops Bust Suspected $1m Cybercrime Ring
Suspects allegedly sold IP-spoofing services and launched ransomware

Tech Giants to Team-Up on Open Source Security After White House Meet
Participants will find better ways to prevent and fix bugs like Log4j

Vice Principal Charged with Cyber-Stalking
Assistant head of Florida high school arrested over alleged stalking of former romantic partner

Pennsylvania Welcomes New Cybersecurity Center
Facility aims to help people enter the cybersecurity industry

FCC Proposes Stricter Data Breach Reporting Requirements
Commission wants companies to notify customers of “inadvertent” breaches

New "Undetected" Backdoor Runs Across Three OS Platforms
SysJoker is designed to target Mac, Windows and Linux

US: MuddyWater is Iranian State-Backed Group
US Cyber Command reveals open source tooling used by APT actors

Report Identifies Weaknesses in Online Banking Security
Consumer group points to vulnerable subdomains and insecure authentication

Clinical Review Vendor Reports Data Breach
Nearly 135K individuals impacted by cyber-attack on Medical Review Institute of America

Teen Makes Tesla Hacking Claim
German hacker says he has full remote control of more than 25 Tesla cars in 13 countries

Phishers Take Over FIFA 22 Accounts
Electronic Arts confirms high-profile player accounts are being targeted by cyber-criminals

European Union to Launch Supply Chain Attack Simulation
The drill is designed to test member states’ preparedness for an attack affecting the continent’s distribution networks

UK Launches Initiative to Develop Global AI Standards
The AI Standard Hub is designed to improve AI governance as use of these technologies surge

Two Years for Man Who Used RATs to Spy on Women and Children
Nottingham cyber-voyeur deployed crypters to bypass AV tools

Microsoft Starts 2022 with 97 CVEs in January Patch Tuesday
Plenty for organizations to work on as they continue fixing Log4j

Europol Ordered to Delete Vast Trove of Personal Information
EU’s privacy tsar says many innocent people have been swept up in dragnet



