Security Bulletin

Chaos and volume of holiday season sales make a perfect storm of threat opportunity. Companies need to prepare — and practice! — action plans, identify key stakeholders, and consider cyber insurance.

Here are three strategies that can help security teams prevent and mitigate the impact of a QR-code attack.

Nation-states were noted by Sen. Ron Wyden, D-Ore., to have been leveraging push notifications to enable surveillance on Apple and Google smartphones, according to TechCrunch.

Increasingly prevalent data privacy threats have prompted the Federal Communications Commission's Privacy and Data Protection Task Force to partner with attorneys general of New York, Connecticut, Pennsylvania, and Illinois in consolidating resources...

Data extortion has been increasingly leveraged by ransomware operations instead of data encryption, with the change in attack techniques fueled by improved ransomware detection systems and stronger law enforcement crackdowns on ransomware gangs...

Nissan has disclosed that its Australia- and New Zealand-based systems have been subjected to a cyberattack, according to The Record, a news site by cybersecurity firm Recorded Future.

BleepingComputer reports that Australian global shipbuilding firm Austal had its U.S. subsidiary impacted by a cyberattack, which the Hunters International ransomware operation has since taken responsibility for.

Inadvertent credential leakage from mobile password managers discovered TechCrunch reports that Android apps' autofill functionality has been impacted by a flaw that could result in the accidental exposure of credentials saved in mobile password...

Cloud accounts could be compromised to facilitate further malicious activity through the exploitation of the Amazon Web Services Security Token Service, according to The Hacker News.

Significantly increased prevalence of major data breaches and ransomware attacks in healthcare between 2018 and 2022 have prompted the Department of Health and Human Services to unveil a new cybersecurity strategy for the sector that involves...

Instead of fighting workarounds that compromise security, a human-centered system fixes the process issues that prompt people to work dangerously.