Infosecurity News
US Man Sentenced to Nine Years in Prison for Hacking iCloud Accounts and Stealing Nudes
Hao Kuo Chi illegally obtained iCloud credentials of 4700 victims
WordPress Updates More Than a Million Sites to Fix Critical Ninja Forms Vulnerability
The code injection vulnerability allowed attackers to call methods in various Ninja Forms classes
Experts Discuss Next Steps in Trust, Privacy and Security
The complex interrelation between trust, privacy and cybersecurity was discussed by experts during Okta Forum 2022
UK Proposes Post-Brexit Data Laws to Boost Innovation
Proposals designed to unlock businesses' ability to use data and clamp down on nuisance calls and cookie pop-ups
Cybersecurity Researchers Find Several Google Play Store Apps Stealing User Data
Most dangerous are spyware tools capable of stealing information from other apps' notifications
NakedPages Phishing Toolkit is Now Available on Cybercrime Forums
The toolkit is reportedly fully automated and comes preloaded with more than 50 phishing templates and site projects
Office 365 Functionality Could Allow Ransomware to Hold Files Stored on SharePoint and OneDrive
Malicious actors could reduce versioning limit of files to a low number and encrypt them more times than versioning limit
Cyber-Criminals Smuggle Ukrainian Men Across Border
Researchers also warn of surge in travel-related fraud
Global Police Arrest Thousands in Fraud Crackdown
Interpol claims to have intercepted $50m in illicit funds
Corporate Network Access Selling for Under $1000 on Dark Web
RDP is the main access vector for brokers
BeanVPN leaks 25 million user records
The cache of 18.5GB connection logs allegedly contained more than 25 million records
SAP Patches Critical NetWeaver and ABAP Platform Vulnerabilities
SAP confirmed most of the vulnerabilities have now available fixes, and advised companies to update their systems as soon as possible.
US Researchers Spot New Hertzbleed Flaw Affecting AMD and Intel CPUs
New side-channel attacks reportedly use frequency side channels to extract cryptographic keys
BNPL Fraud Alert as Account Takeovers Surge
Buy now, pay later services represent an increasingly attractive target
Privacy Watchdog Boosts Legal Funds by Keeping Millions in Fines
Information Commissioner’s Office says extra money is essential
Microsoft's Latest Patch Tuesday Fixes Follina Bug
Redmond giant will switch to Windows Autopatch service
New Syslogk Linux Kernel Rootkit Uses "Magic Packets" to Trigger Remote Backdoor Access
The malware can cloak a malicious payload that could be remotely controlled by an adversary
ClubCiso Report Shows Material Security Incidents Reduced by 54% Compared to Last Year
The survey analyzed the answers of more than 100 information security executives
HelloXD Ransomware Variants Found Installing Backdoor on Windows and Linux Machines
The backdoor allowed attackers to upload and download files, execute commands and remove their footprint
Iran Spear-Phishers Hijack Email Conversations in New Campaign
Sophisticated social engineering targets US and Israeli officials