CyberSec Junction

11/12/2022

https://www.bleepingcomputer.com/news/security/air-gapped-pcs-vulnerable-to-data-theft-via-power-supply-radiation/

A new attack method named COVID-bit uses electromagnetic waves to transmit data from air-gapped systems isolated from the internet over a distance of at least two meters (6.5 ft), where its captured by a receiver.

11/12/2022

https://thehackernews.com/2022/12/researchers-detail-new-attack-method-to.html?m=1

Researchers detail a new attack method that can be used to circumvent web application firewalls (WAFs) of various vendors and infiltrate systems.

17/11/2022

https://thehackernews.com/2022/11/fbi-wanted-leader-of-notorious-zeus.html

A Ukrainian hacker wanted by the U.S. for more than a decade has been arrested by Swiss authorities for his role in the notorious Zeus cybercrime ring

13/11/2022

https://www.europarl.europa.eu/news/cs/press-room/20221107IPR49608/cybersecurity-parliament-adopts-new-law-to-strengthen-eu-wide-resilience

Rules requiring EU countries to meet stricter supervisory and enforcement measures and harmonise their sanctions were approved by MEPs on Thursday.

13/11/2022

https://www.bitdefender.com/blog/hotforsecurity/alleged-lockbit-ransomware-operator-arrested-in-canada/

A man with dual Russian and Canadian nationality has been arrested in connection with his alleged part in the LockBit ransomware conspiracy that has demanded more than $100 million from its victims.

13/11/2022

https://www.coindesk.com/business/2022/11/12/ftx-crypto-wallets-see-mysterious-late-night-outflows-totalling-more-than-380m/

FTX officials appeared to confirm rumors of a hack on Telegram, instructing users to delete FTX apps and avoid its website.

13/11/2022

https://thehackernews.com/2022/11/experts-uncover-two-long-running.html?m=1

Two long-running surveillance campaigns have been discovered using Android spyware tools to monitor the Uyghur community in China and elsewhere.

13/11/2022

https://www-bbc-com.cdn.ampproject.org/c/s/www.bbc.com/news/uk-england-hereford-worcester-63590264.amp

Bishop of Hereford's Bluecoat School confirms its data was breached and published online.

13/11/2022

https://www.bleepingcomputer.com/news/security/phishing-drops-icexloader-malware-on-thousands-of-home-corporate-devices/amp/

A ongoing phishing campaign has infected thousands of home and corporate users with a new version of the 'IceXLoader' malware.

13/11/2022

https://www.insurancebusinessmag.com/uk/news/cyber/revealed--the-percentage-of-businesses-hit-by-a-cyber-attack-since-2019-427193.aspx

How are UK businesses faring compared to their US counterparts?

13/11/2022

https://thehackernews.com/2022/11/researchers-uncover-pypi-package-hiding.html?

Researchers have discovered a new malicious package on the PyPI repository that uses obfuscation to hide its malicious code.

13/11/2022

20% annual growth in global Cyber Insurance
https://www.swissre.com/institute/research/topics-and-risk-dialogues/digital-business-model-and-cyber-risk/cyber-insurance-strengthening-resilience.html

13/11/2022

What you can read in Russia:
Ministry of Foreign Affairs of the Russian Federation:
https://mid.ru/en/foreign_policy/news/1836804/

Interview by Acting Director of the Department of International Information Security of the Ministry of Foreign Affairs of the Russian Federation Artur Lyukmanov to the «Newsweek» magazine, November 3, 2022

Russian Foreign Ministry cyber chief Artur Lyukmanov warned Newsweek of "full-fledged interstate confrontation" with "the use of conventional means of warfare."

12/11/2022

What you can read in China:

One suspect was arrested when he went to collect money from an 88-year-old victim who already handed over HK$30,000.

12/11/2022

https://thehackernews.com/2022/11/apt29-exploited-windows-feature-to.html?m=1

Russia-linked APT29 hackers has been found leveraging a "lesser-known" Windows feature called "Credential Roaming" in attack on European diplomatic.

12/11/2022

12/11/2022

https://www.ncsc.gov.uk/news/most-hacked-passwords-revealed-as-uk-cyber-survey-exposes-gaps-in-online-security

The NCSC's first 'UK cyber survey' published alongside global password risk list

12/11/2022

https://thehackernews.com/2022/11/hacker-rewarded-70000-for-finding-way.html?m=1

Google has awarded a researcher $70,000 for reporting a security vulnerability that can be exploited to bypass the lock screen on all Pixel smartphone