Category: Privacy/Governance Feed

A new phishing attack by UAC-0006 has been discovered targeting PrivatBank with malicious files in password-protected archives to evade detection – Read More  –  

Chainalysis found that ransomware payments fell significantly year-over-year despite a recorded increase in the number of ransomware events in 2024 – Read More  –  

Indian banking malware attack exposes 50,000 users, stealing financial data via SMS interception and phishing – Read More  –  

The UK and its Five Eyes partners have launched new security guidance for edge device manufacturers and network defenders – Read More  –  

Check Point has observed cybercriminals toy with Alibaba’s Qwen LLM to develop infostealers – Read More  –  

Contrast Security reveals a 12.5% annual increase in destructive cyber-attacks on banks – Read More  –  

In an increasingly data-driven world, organizations collect, process, and store vast amounts of personal data, raising significant concerns about… The post The Role of a Data Protection Officer: Virtual DPO vs. On-Site DPO appeared first on JISA Softech Pvt Ltd.  – Read More  – JISA Softech Pvt Ltd 

DaggerFly’s Lunar Peek campaign is using a new malware strain, identified by FortiGuard Labs, to compromise Linux networks – Read More  –  

Picus Security reports infostealer surge after revealing credentials appear in 29% of malware – Read More  –  

A sophisticated phishing campaign targeting Microsoft ADFS has been observed, affecting more than 150 organizations – Read More  –  

Check Point Research has found over 10 million stolen credentials associated with EMEA organizations exposed on cybercrime markets – Read More  –  

Jscambler claims at least 17 sites have been infected with web skimmers, including Casio’s – Read More  –  

CISA has identified a backdoor in Contec CMS8000 devices that could allow unauthorized access to patient data and disrupt monitoring functions – Read More  –  

Hackers hijack high-profile X accounts with phishing scams to steal credentials and promote fraudulent cryptocurrency schemes – Read More  –  

VulnCheck observed 768 public reports of CVEs exploited in the wild for the first time in 2024, a 20% rise compared to 2023 – Read More  –  

A new Europol report warns of major challenges accessing and analyzing data for cybercrime investigations – Read More  –  

The UK government has launched a new AI security code of practice it believes will become an ETSI standard – Read More  –  

Cisco Talos found that exploitation of public-facing applications made up 40% of incidents it observed in Q4 2024, marking a notable shift in initial access techniques – Read More  –  

The Indian tech giant temporarily suspended some of its IT services, which have now been restored – Read More  –  

Cyber reports exposed major security flaws in DeepSeek’s R1 LLM – Read More  –  

A global law enforcement operation has taken down infrastructure used by Cracked.io and Nulled.io, which provide cybercriminal tools and services – Read More  –  

Google Play blocked 2.36 million policy-violating apps and banned 158,000 harmful developer accounts in 2024 – Read More  –  

HTTP client tools used to compromise Microsoft 365 environments with 78% of tenants targeted in 2024 – Read More  –  

SquareX researchers warn that browser syncjacking could lead to full browser and device hijacking – Read More  –  

Researchers at Wiz uncovered a publicly accessible database belonging to Chinese GenAI provider DeepSeek that leaked sensitive data, including chat history – Read More  –  

New York Blood Center Enterprises revealed that it has been hit by a ransomware attack, disrupting activities and blood drives at its centers across the country – Read More  –  

UK organizations are significantly increasing cybersecurity budgets, with a projected 31% growth in the next year – Read More  –  

The UK’s National Cyber Security Centre has released a new paper making it easier to assess if a flaw is “unforgivable” – Read More  –