Report suggests a never before seen case of one supply chain attack being directly leveraged into another, as the 3CX breach has been traced back to a compromised trading software.
The security-by-design guidance shows that governments are increasingly expecting manufacturers and developers to have their products reasonably locked down when they ship, and to be configured for updates that allow new vulnerabilities to be addressed.
Cyber crime groups of all sizes are putting around 80% of their operating expenses toward paying their workforce. The situation reflects an increasing adoption of a professional corporate-modeled structure among cyber crime groups.
Attackers would have been able to change the top Bing search results to whatever they like for any particular keyword or phrase that users might search. This could have been used to unwittingly redirect searchers to attack sites.
While ChatGPT may be a productivity enhancer, organizations need to carefully consider the situations in which it is used. Samsung has learned this lesson the hard way as employees unwittingly fed sensitive data into its training model while doing code reviews and preparing internal presentations.
Citizen Lab says that the UAE, Hungary and Mexico are “countries of concern” and notes that the QuaDream spyware has been sold to Saudi Arabia and Ghana among other nations. Spyware has at least one zero-click exploit in its arsenal.
Supply chain attack traces back to suspected North Korea state-backed hackers exploiting an open source vulnerability that allowed malware to be inserted into legitimate software updates (signed with valid 3CX certificates).
One of the biggest dark web markets for trading in stolen identity information is now offline thanks to an international law enforcement operation that involved hundreds of raids across 17 countries.
Data breach at Nebu, a piece of marketing software used by numerous Dutch market research firms for creating surveys and maintaining contact information, impacted at least two million residents including Netherlands national railway and VodafoneZiggo.
Vulkan Files provided insight into Russian cyberwar activities including government disinformation campaigns on social media, domestic surveillance and attacks on the critical infrastructure of foreign countries.