News

Web attacks also surge in financial services, although not in UK

Alert follows advisory about Kremlin hackers targeting Cisco routers

EFF has a good explainer on the problems with the new UN Cybercrime Treaty, currently being negotiated in Vienna.

The draft treaty has the potential to rewrite criminal laws around the world, possibly adding over 30 criminal offenses and new expansive police powers for both domestic and international criminal investigations.

[…]

While we don’t think the U.N. Cybercrime Treaty is necessary, we’ve been closely scrutinizing the process and providing constructive analysis. We’ve made clear that human rights must be baked into the proposed treaty so that it doesn’t become a tool to stifle freedom of expression, infringe on privacy and data protection, or endanger vulnerable people and communities.

The malicious software library can collect installed app lists, Wi-Fi and Bluetooth data, and more

A new advisory by Group-IB suggests the software used as part of these attacks is not compromised

The findings by Jamf suggest the observed attacks are highly targeted

Mandiant’s latest M-Trends report shows that organizations only needed a median time of 16 days to detect an intrusion in 2022 – the lowest dwell time ever recorded by the firm

The UK Government OSB undermines end-to-end encrypted communications and must be reconsidered according to an open letter signed by Signal and WhatsApp

Palo Alto report warns of an expanding cloud attack surface

Pig butchering and similar scams could soon be AI-driven