Category: Privacy/Governance Feed

Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited    – Read More  –  

The TA455 phishing campaign used fake job offers on LinkedIn to deploy malware    – Read More  –  

Panaseer claims 72% of security leaders are taking out personal indemnity insurance as board scrutiny increases    – Read More  –  

New phishing tool GoIssue targets GitHub, enabling mass phishing, and has been linked to the GitLoker extortion campaign    – Read More  –  

watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops    – Read More  –  

Jamf observed North Korean attackers embedding malware within Flutter applications to target macOS devices, potentially to test a new way of weaponizing malware    – Read More  –  

Halliburton has reported a $35m loss associated with an August ransomware breach    – Read More  –  

The World Economic Forum has shared recommendations on how to build on the success of existing partnerships to accelerate the disruption of cybercriminal activities    – Read More  –  

The new Remcos RAT variant identified in a new phishing campaign exploits CVE-2017-0199 via malicious Excel files    – Read More  –  

Researchers have uncovered a surge in phishing attacks using Visio .vsdx files to evade security scans    – Read More  –  

This year’s Blue OLEx cyber-attack drill was hosted in Italy and benefited from the new EU-CyCLONe for the first time    – Read More  –  

The UK Regional Organised Crime Unit (ROCU) Network has urged the elderly to be on the lookout for scam texts offering a winter fuel subsidy    – Read More  –  

Swedish-Russian national Roman Sterlingov has been jailed for 12 years and six months for operating notorious cryptocurrency mixer Bitcoin Fog    – Read More  –  

South Korea warned that pro-Russian groups have attacked government and private sector websites following the deployment of North Korean soldiers in Ukraine    – Read More  –  

International energy solution provider Newpark Resources has confirmed it was hit by a ransomware attack that disrupted critical systems    – Read More  –  

SentinelLabs observed the North Korean group BlueNoroff targeting crypto firms via a multi-stage malware campaign which utilizes a novel persistence mechanism    – Read More  –  

Interlock employs both “big-game hunting” and double extortion tactics against its victims    – Read More  –  

Androxgh0st botnet has expanded, integrating Mozi IoT payloads and targeting web server vulnerabilities    – Read More  –  

An ICO audit of AI recruitment tools found numerous data privacy issues that may lead to jobseekers being discriminated against and privacy compromised    – Read More  –  

The UK’s National Cyber Security Centre has released malvertising guidance for brands and their ad partners    – Read More  –  

TikTok Technology Canada, Inc, the subsidiary of Chinese group ByteDance, will have to cease its operations in Canada    – Read More  –  

CIISec report reveals the average wage for UK security professionals is now over £87,000    – Read More  –  

Trend Micro’s Robert McArdle says cybercriminals use of AI is far more limited than many realize, and pales in comparison to defenders’ use of the technology    – Read More  –  

A cyber-attack targeting telematics provider Microlise has disrupted tracking services for key clients like DHL and Serco    – Read More  –  

Organizations remain unprepared to defend against known and predictable attacks like ransomware    – Read More  –  

The Nigerian police have arrested 113 foreign individuals and their 17 Nigerian collaborators for their alleged involvement in high-level cybercrimes    – Read More  –  

Winos4.0 malware, derived from Gh0strat, targets Windows users via game-related applications, enabling remote control of affected systems    – Read More  –  

Google wants to ensure a smooth transition towards required MFA across all Google Cloud accounts with a phased rollout running throughout 2025    – Read More  –  

Interpol claims an international policing operation has shuttered 22,000 IPs connected with cybercrime    – Read More  –  

A man suspected of breaching hundreds of Snowflake accounts has been arrested    – Read More  –  

ToxicPanda malware targets banking apps on Android, spreading through Italy, Portugal and Spain    – Read More  –  

ClickFix exploits fake error messages across multiple platforms, such as Google Meet and Zoom    – Read More  –  

A joint US government advisory warned about increasing foreign influence efforts designed to undermine the legitimacy of the Presidential Election    – Read More  –