News

Club of rich countries wants to improve cross-border data flows

Squid is performing a concert in London in February.

If you don’t know what their music is like, try this or this or this.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Read my blog posting guidelines here.

There are these.

The most recent iPhone update—to version 16.1.2—patches a zero-day vulnerability that “may have been actively exploited against versions of iOS released before iOS 15.1.”

News:

Apple said security researchers at Google’s Threat Analysis Group, which investigates nation state-backed spyware, hacking and cyberattacks, discovered and reported the WebKit bug.

WebKit bugs are often exploited when a person visits a malicious domain in their browser (or via the in-app browser). It’s not uncommon for bad actors to find vulnerabilities that target WebKit as a way to break into the device’s operating system and the user’s private data. WebKit bugs can be “chained” to other vulnerabilities to break through multiple layers of a device’s defenses.

The bill still needs to receive approval from the US House of Representatives

Improper network slice management may enable attackers to access data from different network slices

Zimperium said the code was part of an existing campaign previously discovered by K7 Security Labs

Six also charged in connection with booter services

Zscaler reveals 20% increase in malicious use of encryption

NuGet, PyPi and npm inundated with malicious packages