Tag: http://www.infosecurity-magazine.com/rss/news/76/application-security/

Refund and Invoice Scams Surge in Q4

Avast also warns of increase in tech support fraud This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Refund and Invoice Scams Surge in Q4

#SOOCon23: Open Source Tools can Automate SBOM Requirements

Open source enterprise software users presented tools to automate SBOMs during the State of Open Con 23 conference in London This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: #SOOCon23: Open Source Tools can Automate SBOM Requirements

US and UK Sanction Seven Russian Cyber-Criminals

The seven Russian nationals are members of the notorious Trickbot malware gang This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: US and UK Sanction Seven Russian Cyber-Criminals

Dark Web Market Revenues Sink 50% in 2022

Closure of Hydra has major impact on underground sales This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Dark Web Market Revenues Sink 50% in 2022

Trio Arrested in COVID PPE Fraud Probe

UK company set up to illegally profit from trade in protective equipment This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Trio Arrested in COVID PPE Fraud Probe

UK Politician’s Email Hacked by Suspected Russian Threat Actors

The SNP MP revealed details of the incident, in which he clicked on a malicious file purportedly about the military situation in Ukraine This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: UK Politician’s Email Hacked by Suspected…

#SOOCon23: UK Government Urges Industry Input on Software Security Policy

A UK government official asks the cyber industry, including the open software community, to help shape software security policies This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: #SOOCon23: UK Government Urges Industry Input on Software Security Policy

BEC Attacks Surge 81% in 2022

Open rates for emails hit 28% This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: BEC Attacks Surge 81% in 2022

Regulator Halts AI Chatbot Over GDPR Concerns

Replika accused of posing risk to children This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Regulator Halts AI Chatbot Over GDPR Concerns

Cyber Insurance, A Must-Have for Small Businesses

With $10m in seed funding, Guardz looks to tackle cyber insurance for small businesses This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Cyber Insurance, A Must-Have for Small Businesses

UK Metal Engineering Firm Vesuvius Hit by Cyber-Attack

The engineering firm has started an investigation “to identify the extent of the issue” This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: UK Metal Engineering Firm Vesuvius Hit by Cyber-Attack

Drugs Labs Busted After Encrypted Chat App Takedown

Dutch and German police team up to take down Exclu This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Drugs Labs Busted After Encrypted Chat App Takedown

UK Banks Still Failing on Digital Security – Report

Which? study finds many fail to provide basic online protection This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: UK Banks Still Failing on Digital Security – Report

Novel Banking Trojan ‘PixPirate’ Targets Brazil

Scripts could interact with the device’s UI and enter text, simulate touch events, etc. This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Novel Banking Trojan ‘PixPirate’ Targets Brazil

Stalkerware Developer Hit with $400K Fine

New York attorney general says software facilitates domestic abuse This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Stalkerware Developer Hit with $400K Fine

Scam Alert for Dingo Token That Charges 99% Fee

Crypto has a market cap of close to $11m This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Scam Alert for Dingo Token That Charges 99% Fee

Threat Actors Use ClickFunnels to Bypass Security Services

They created pages with malicious links and ultimately conducted credential-harvesting attacks This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Threat Actors Use ClickFunnels to Bypass Security Services

Arnold Clark Confirms Customer Data Compromised in Breach

Affected data includes names, contact details, vehicle details and ID documents, among others This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Arnold Clark Confirms Customer Data Compromised in Breach

Record $3.8bn Stolen Via Crypto in 2022

North Korean hackers were a major cause This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Record $3.8bn Stolen Via Crypto in 2022

Atlassian Patches Critical Authentication Flaw in Jira Software

The Jira versions affected by the vulnerability are 5.3.0, 5.3.1, 5.3.2, 5.4.0, 5.4.1 and 5.5.0 This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Atlassian Patches Critical Authentication Flaw in Jira Software

ICO Relaxes Breach Reporting for Comms Providers

New rules are designed to reduce regulatory burden This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: ICO Relaxes Breach Reporting for Comms Providers

US Man Charged in $110m Crypto Trading Scheme

Individual accused of draining funds from trading platform Mango Markets This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: US Man Charged in $110m Crypto Trading Scheme

Quarter of CFOs Have Suffered $1m+ Breaches

Similar number expect surge in cyber-attacks this year This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Quarter of CFOs Have Suffered $1m+ Breaches

IT Leaders Reveal Cyber Fears Around ChatGPT

A BlackBerry survey reveals 51% of security leaders expect ChatGPT to be at the heart of a successful cyber-attack within a year This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: IT Leaders Reveal Cyber Fears Around ChatGPT

Threat Actors Use ClickFunnels to Bypass Security Services

They created pages with malicious links and ultimately conducted credential-harvesting attacks This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Threat Actors Use ClickFunnels to Bypass Security Services

Arnold Clark Confirms Customer Data Compromised in Breach

Affected data includes names, contact details, vehicle details and ID documents, among others This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Arnold Clark Confirms Customer Data Compromised in Breach

Record $3.8bn Stolen Via Crypto in 2022

North Korean hackers were a major cause This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Record $3.8bn Stolen Via Crypto in 2022

Ransomware Attack Forces Closure of Nantucket Schools

The district’s superintendent Elizabeth Hallett announced the decision in an email to parents This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Ransomware Attack Forces Closure of Nantucket Schools

Google Fi Confirms Data Breach, Hints At Link to T-Mobile Hack

The company uses a combination of T-Mobile and US Cellular for network connectivity This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Google Fi Confirms Data Breach, Hints At Link to T-Mobile Hack

Almost all Organizations are Working with Recently Breached Vendors

The latest supply chain security report from SecurityScorecard and the Cyentia Institute shows worrying findings This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Almost all Organizations are Working with Recently Breached Vendors

Thriving Dark Web Trade in Fake Security Certifications

Exam cheats, course leaks and fake certs offer career shortcuts This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Thriving Dark Web Trade in Fake Security Certifications

Nearly 30,000 QNAP Devices Exposed Via New Bug

Vulnerability could be exploited by ransomware groups This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Nearly 30,000 QNAP Devices Exposed Via New Bug

Killnet Attackers DDoS US and Dutch Hospitals

Retaliatory Russian attacks latest response to geopolitical moves This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Killnet Attackers DDoS US and Dutch Hospitals

Two US Doctors Convicted of $30m Medicare Fraud

Claims submitted for medical equipment not needed by patients This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Two US Doctors Convicted of $30m Medicare Fraud

QNAP: Patch Critical Remote Code Injection Bug

Vulnerability affects QTS and QuTS Hero firmware This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: QNAP: Patch Critical Remote Code Injection Bug

JD Sports Confirms Breach Affected 10 Million Customers

The cyber-attack hit the company between November 2018 and October 2020 This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: JD Sports Confirms Breach Affected 10 Million Customers

Five Data Wipers Attack Ukrainian News Agency

Russia’s Sandworm group suspected of destructive attack This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Five Data Wipers Attack Ukrainian News Agency

Multiple Vulnerabilities Found In Healthcare Software OpenEMR

Two of these vulnerabilities combined could lead to unauthenticated remote code execution This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Multiple Vulnerabilities Found In Healthcare Software OpenEMR

Global Action “Dismantles” Hive Ransomware Group

FBI distributes hundreds of decryption keys to victims This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Global Action “Dismantles” Hive Ransomware Group

Microsoft: Update On-Premises Exchange Server Now

Attacks are not going away, tech giant warns This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Microsoft: Update On-Premises Exchange Server Now

CISA Warns Against Malicious Use of Legitimate RMM Software

The document mentions an October 2022 cyber campaign involving the malicious use of RMM solutions This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: CISA Warns Against Malicious Use of Legitimate RMM Software

Dark Web Posts Advertising Counterfeit Cash Surge 90%

Physical currency remains a big draw for cyber-criminals This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Dark Web Posts Advertising Counterfeit Cash Surge 90%

Near-Record Year for US Data Breaches in 2022

Breach notices are increasingly opaque, warns non-profit This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Near-Record Year for US Data Breaches in 2022

Lloyds Bank Warns of 80% Surge in Advance Fee Scams

Fake ads for loans, jobs and properties are on the rise This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Lloyds Bank Warns of 80% Surge in Advance Fee Scams

Yahoo Overtakes DHL As Most Impersonated Brand in Q4 2022

DHL came in second place, with 16% of all brand phishing attempts, and Microsoft followed with 11% This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Yahoo Overtakes DHL As Most Impersonated Brand in Q4 2022

Ticketmaster Claims Bot Attack Disrupted Taylor Swift Tour Sales

Joe Berchtold, president of Live Nation, made the claims at a congressional committee Tuesday This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Ticketmaster Claims Bot Attack Disrupted Taylor Swift Tour Sales

New Cheats May Emerge After Riot Games Hack

Ransomware actors stole source code, company reveals This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: New Cheats May Emerge After Riot Games Hack

FBI Confirms Lazarus Group Was Behind $100m Harmony Hack

The North Korean cyber actors laundered over $60m worth of Ethereum stolen during the heist This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: FBI Confirms Lazarus Group Was Behind $100m Harmony Hack

Gartner: Zero Trust Won’t Mitigate Over Half of Attacks

Analyst claims only 10% of firms will have a program in place by 2026 This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Gartner: Zero Trust Won’t Mitigate Over Half of Attacks

ICO Offers Data Protection Advice to SMBs

Regulator also has words of caution for emerging tech providers This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: ICO Offers Data Protection Advice to SMBs

Two Vulnerabilities Found in Galaxy App Store

Both issues reportedly affected only Samsung devices running Android 12 and below This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Two Vulnerabilities Found in Galaxy App Store

Ad Fraud Scheme Tops 12 Billion Daily Bid Requests

Vastflux operation injected obfuscated JavaScript into ads This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Ad Fraud Scheme Tops 12 Billion Daily Bid Requests

Riot Games Halts Work After Cyber-Attack

Compromise impacts developer’s ability to release updates This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Riot Games Halts Work After Cyber-Attack

WhatsApp Hit with €5.5m fine for GDPR Violations

The case raised disagreements between Ireland’s DPC and the European Data Protection Board This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: WhatsApp Hit with €5.5m fine for GDPR Violations

“Workarounds” Helped Royal Mail Resume Shipping After Ransomware Attack

Thanks to technical “workarounds,” Royal Mail has been able to resume “limited” export services one week after being hit by cyber-attack This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: “Workarounds” Helped Royal Mail Resume Shipping After Ransomware…