Troy Hunt

APRIL 15, 2023

A bit late this week as I've prioritised time out with the family doing as many New Zealand adventure things as we can. And we've seriously maxed out the time, as you can see via the FB link below. But that hasn't stopped a couple of new data breaches flowing into HIBP nor me having some pretty direct thoughts on the premise that the vast bulk of IT pros are being told not to report data breaches.

Data breaches 251

Data breaches Accountability 251

Bleeping Computer

APRIL 15, 2023

A new Android malware named 'Goldoson' has infiltrated the platform's official app store, Google Play, through 60 apps that collectively have 100 million downloads. [.

Malware 100

Malware 100

WIRED Threat Level

APRIL 15, 2023

If you’re worried that one of Apple’s trackers is following you without consent, try these tips.

100

100

Security Affairs

APRIL 15, 2023

A new Android malware named Goldoson was distributed through 60 legitimate apps on the official Google Play store. The Goldoson library was discovered by researchers from McAfee’s Mobile Research Team, it collects lists of applications installed on a device, and a history of Wi-Fi and Bluetooth devices information, including nearby GPS locations. The third-party library can perform ad fraud by clicking advertisements in the background without the user’s consent.

Data collection 98

Data collection Mobile Malware Education 98

Speaker: Erroll Amacker

Automation is transforming finance but without strong financial oversight it can introduce more risk than reward. From missed discrepancies to strained vendor relationships, accounts payable automation needs a human touch to deliver lasting value. This session is your playbook to get automation right. We’ll explore how to balance speed with control, boost decision-making through human-machine collaboration, and unlock ROI with fewer errors, stronger fraud prevention, and smoother operations.

Risk

WIRED Threat Level

APRIL 15, 2023

Plus: Hackers claim to have stolen 10 TB from Western Digital, a new spyware has emerged, and WhatsApp gets a fresh security feature.

Spyware 97

Spyware Surveillance Risk Hacking 97

Security Affairs

APRIL 15, 2023

The Brazilian retail arm of car manufacturing giant Volvo leaked sensitive files, putting its clientele in the vast South American country in peril. Volvo’s retailer in Brazil, Dimas Volvo, leaked sensitive files through its website. The leaked files could have served malicious actors in various ways, including hijacking official communication channels and infiltrating the company’s systems.

Retail 98

Retail Manufacturing Passwords Accountability 98

Security Affairs

APRIL 15, 2023

Siemens Metaverse, a virtual space built to mirror real machines, factories, and other highly complex systems, has exposed sensitive data, including the company’s office plans and internet of things (IoT) devices. While metaverse is no longer a buzzword, amid the sudden popularity of ChatGPT and similar AI tools, those virtual worlds are still here, presenting exciting opportunities for companies, users, and, unfortunately, threat actors.

Manufacturing 98

Manufacturing IoT Technology Authentication 98

Bleeping Computer

APRIL 15, 2023

Security researchers are warning that cybercriminals are increasingly using the Action1 remote access software for persistence on compromised networks and to execute commands, scripts, and binaries. [.

Ransomware 85

Ransomware Software 85

Security Affairs

APRIL 15, 2023

US Cybersecurity and Infrastructure Security Agency (CISA) added Android and Novi Survey flaws to its Known Exploited Vulnerabilities catalog. U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the following five new issues to its Known Exploited Vulnerabilities Catalog : CVE-2023-20963 – Android Framework Privilege Escalation Vulnerability.

Education 98

Education Accountability Media Hacking 98

Security Boulevard

APRIL 15, 2023

Why should cybersecurity be a top priority for small businesses? Why should cybersecurity be a top priority for small businesses? Introduction Introduction Cybersecurity is the new normal. Small businesses will need to compete against large corporations. Governments, hackers, and malicious actors build teams and resources to target small businesses.

Small Business 83

Small Business Cybersecurity Data privacy Government 83

Advertisement

Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.

Cyber threats

Security Boulevard

APRIL 15, 2023

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Security ’22 – Sebastian Angel, Andrew J. Blumberg, Eleftherios Ioannidis, Jess Woods – Efficient Representation of Numerical Optimization Problems for SNARKs appeared first on Security Boulevard.

Education 52

Education InfoSec Cybersecurity 52