Category: Privacy/Governance Feed

As we move into the era of quantum computing, businesses and governments worldwide are grappling with its implications for… The post Data Privacy in the Age of Quantum Computing: Is India Ready?  appeared first on JISA Softech Pvt Ltd.  – Read More  – JISA Softech Pvt Ltd 

Fake job ads target freelance developers, spreading malware via GitHub – Read More  –  

Mobile phishing attacks surged in 2024, with 16% of all incidents occurring in the US, according to a new Zimperium report – Read More  –  

A survey by IANS and Artico found significant regional variation in cybersecurity salary levels across North America – Read More  –  

Kela researchers 330 million compromised credentials to infostealer activity on over four million machines in 2024 – Read More  –  

CISA and the FBI have released a joint advisory detailing the activity of China’s Ghost ransomware – Read More  –  

A flaw in the Jupiter X Core plugin has been identified, allowing upload of malicious SVG files and remote code execution on vulnerable servers – Read More  –  

Finastra notifies customers of data breach that took place more than three months ago, impacting sensitive financial information – Read More  –  

Australia-based Genea said it is investigating the cyber incident to determine whether any personal data was accessed by an unauthorized third party – Read More  –  

The head of the Australian Security Intelligence Organisation gave his Annual Threat Assessment for the year ahead – Read More  –  

Venture capital firm Insight Partners, which counts Recorded Future, SentinelOne and Wiz in its portfolio, confirmed an intrusion into its systems via a social engineering attack – Read More  –  

Google has warned that Russian state-backed hackers are targeting Signal to eavesdrop on persons of interest in Ukraine – Read More  –  

Hudson Rock has found evidence that infostealers have compromised hundreds of US military and defense contractor credentials – Read More  –  

Significant OpenSSH flaws are exposing systems to man-in-the-middle and denial-of service attacks – Read More  –  

Trend Micro found that Chinese espionage group Mustang Panda is deploying malware via legitimate Microsoft tools, enabling it to bypass ESET antivirus applications – Read More  –  

A new Snake Keylogger variant, responsible for over 280 million blocked infection attempts worldwide, has been identified targeting Windows users – Read More  –  

The BlackLock or Eldorado ransomware gang could be the year’s fastest-growing ransomware-as-a-service group – Read More  –  

Proofpoint also identified two new threat actors operating components of web inject campaigns, TA2726 and TA2727 – Read More  –  

A threat actor claims to have hacked and published data on 12 million Zacks Investment Research accounts – Read More  –  

Pro-Russia hackers NoName057(16) has targeted Italian banks, airports and ports in a series of DDoS attacks – Read More  –  

Microsoft has observed a new variant of XCSSET, a sophisticated macOS malware that infects Xcode projects – Read More  –  

South Korea’s Personal Information Protection Commission is blocking DeepSeek AI downloads over privacy concerns – Read More  –  

A Golang backdoor is using Telegram as its command and control (C2) channel, an approach that makes detection harder for defenders, according to Netskope researchers – Read More  –  

Vulnerabilities in firewalls from Palo Alto Networks and SonicWall are currently under active exploitation – Read More  –  

Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts – Read More  –  

The organization becomes the AI Security Institute as the UK shifts its focus to tackling AI risks to national security – Read More  –  

Symantec found that tools previously only used by Chinese nation-state espionage actors were deployed in a ransomware attack – Read More  –  

US agencies have issued a new alert to eliminate buffer overflow vulnerabilities, urging memory-safe programming for secure-by-design software development – Read More  –  

Astaroth is an advanced phishing kit using real-time credential and session cookie capture to compromise Gmail, Yahoo and Office 365 accounts – Read More  –  

Ahead of Valentine’s Day, Chainalysis figures reveal 40% increase in losses to pig butchering, or romance baiting, scams – Read More  –  

Microsoft found that Russian state actor Seashell Blizzard has deployed an initial access subgroup to gain persistent access in a range of high-value global targets – Read More  –  

The Electronic Frontier Foundation has requested a US federal court to block Elon Musk’s DOGE access to US Office of Personnel Management Data – Read More  –  

SecurityScorecard has uncovered a sophisticated campaign linked to North Korea’s Lazarus Group, distributing crypto-stealing malware – Read More  –  

Romance scams cost Americans $697.3m in 2024, with crypto fraud schemes on the rise – Read More  –  

NCSC CTO Ollie Whitehouse discussed a UK government-backed project designed to secure underlying computer hardware, preventing most vulnerabilities from occurring – Read More  –  

Massive IoT data breach exposed 2.7 billion records including Wi-Fi credentials – Read More  –  

A new Everfox survey shows a growing consensus among regulated organizations in favor of a strategic shift away from detecting cyber threats to preventing them – Read More  –  

February Patch Tuesday sees Microsoft fix four zero-days, including two under active exploitation – Read More  –  

The US and its allies have sanctioned Russian bulletproof hoster Zservers for abetting ransomware attacks – Read More  –  

An Alabama man has admitted hacking into the US Security and Exchange Commission’s X account using SIM swap fraud to gain access – Read More  –  

Chinese hackers are infiltrating the networks of suppliers of “sensitive” manufacturers, according to a Check Point report to be published in the coming weeks – Read More  –  

Gcore reported a 56% year-over-year rise in DDoS attacks in H2 2024, highlighting a steep long-term growth tend for the attack technique – Read More  –  

Ransomware groups are adopting agile techniques in a quantity-over-quality approach, according to a new report from Huntress – Read More  –  

Four Europeans were arrested in Phuket, believed to be members of the Phobos ransomware group – Read More  –  

Apple has patched a zero-day vulnerability being exploited in targeted attacks – Read More  –  

Kela researchers explain that infostealers are to blame for compromised OpenAI logins – Read More  –  

Trend Micro uncovers BadIIS malware exploiting IIS servers for SEO fraud and malicious redirects – Read More  –  

A US resident based in Indiana was charged with cyber intrusion and cryptocurrency theft conspiracies – Read More  –