Infosecurity News
Rapid7 Has Good News for UK Security Posture
FTSE 350 firms on a par with global peers
CISA Updates Zero Trust Maturity Model With Public Feedback
The guidelines aim to further the US federal government's progress toward a zero trust approach
Lazarus Group's DeathNote Campaign Reveals Shift in Targets
Kaspersky uncovered a shift in the attack's targets and updated infection vectors in 2020
Emotet Climbs March 2023's Most Wanted Malware List With OneNote Campaign
The malicious software tool is now second on the list, one spot up from February's report
Researchers Uncover 7000 Malicious Open Source Packages
W4SP stealer copycats among the latest finds
New Zero-Click iOS Exploit Deploys Israeli Spyware
Researchers say exploit is delivered via iCloud calendar invitation
Ethical Hackers Could Earn up to $20,000 Uncovering ChatGPT Vulnerabilities
Following criticisms around ChatGPT’ security and privacy practices, OpenAI has launched a bug bounty program to help identify vulnerabilities across its systems and services
Microsoft Fixes Zero-Day Bug This Patch Tuesday
It is one of around 100 software flaws addressed this month
Malicious Android Apps Sold For Up to $20,000 on Darknet
Like on legitimate forums, Kaspersky explained there are various darknet offers for these apps
Apple Patches Two Zero-Days Exploited in the Wild
Vulnerabilities affect macOS Ventura 13.3.1 and iOS and iPadOS 16.4.1 devices
Eliminating 2% of Exposures Could Protect 90% of Critical Assets
The findings come from the latest report by XM Cyber and the Cyentia Institute
US Scrambles to Investigate Military Intel Leak
Publication of classified docs could help Russian war effort
KFC Owner Discloses Data Breach
Yum! Brands warns of fallout from January incident
Latitude Financial Refuses to Pay Ransom
Breached Aussie firm says it will only embolden extorters
Threat Actors Increasingly Use Telegram For Phishing Purposes
The findings come from cybersecurity experts at Kaspersky
Uber Drivers' Data Exposed in Breach of Law Firm's Servers
New Jersey-based Genova Burns disclosed the breach in an email to customers
Google Mandates Data Deletion Policy For Android Apps
Developers have until December 7 to submit answers to data deletion questions
Securing Medical Devices is a Matter of Life and Death
The cybersecurity challenges of the Internet of Medical Things (IoMT) are still largely unanswered
Prolific Spanish Teen Hacking Suspect Arrested
Jose Luis Huertas boasted of accessing 90% of Spaniards' info
Two-Fifths of IT Pros Told to Keep Breaches Quiet
The figure rises to 70% of those in the US
