Security News > 2022 > March

DDoS attacks becoming larger and more complex, finance most targeted sector
2022-03-31 04:30

Distributed Denial-of-service attacks decreased slightly in 2021 but are becoming larger and more complex in nature, an analysis from F5 has found. "The volume of DDoS attacks has fluctuated by quarter, but the unmistakable trend is that these attacks are getting larger," said David Warburton, Director of F5 Labs.

UK spy boss warns China hopes Russia will help it take over tech standards
2022-03-31 04:01

The director of UK intelligence agency Government Communications Headquarters, Sir Jeremy Fleming, has warned that China is trying to introduce "Undemocratic values as the default for vast swathes of future tech and the standards that govern it." China believes Russia will support its digital markets and technology plans.

Deploying pseudonymization techniques to protect health data
2022-03-31 04:00

A report of the European Union Agency for Cybersecurity explores how pseudonymization techniques can help increase the protection of health data. This is especially true since providing health services today implies an extended exchange of medical information and of health data among different healthcare service providers.

Why do organizations need to prioritize cyber resiliency?
2022-03-31 03:30

OpenText announced a report which provides in-depth analysis, market insights, trend data, and predictions for what lies ahead as organizations move toward strengthening their cyber resiliency posture in the face of ever-increasing cyberattacks and cyber warfare. Last year, phishing attacks escalated across email, text, and other communications platforms and new high-risk malicious URLs were found hiding behind proxy avoidance and anonymizers.

BYOD and enterprise mobility market to reach $157.3 billion by 2026
2022-03-31 03:00

Amid the COVID-19 crisis, the global market for BYOD and enterprise mobility estimated at $84.4 billion in the year 2022, is projected to reach a revised size of $157.3 billion by 2026, growing at a CAGR of 16.7% over the analysis period, according to Global Industry Analysts. The BYOD and enterprise mobility market in the U.S. and China.

Russia, Iran, Saudi Arabia are top sources of online misinformation
2022-03-31 02:30

Russia, Iran and Saudi Arabia are the top three proliferators of state-linked Twitter misinformation campaigns, according to a report released Wednesday by the Australian Strategic Policy Institute. The think tank's International Cyber Policy Centre report and corresponding website examined datasets in Twitter's Information Operations Archive to understand state willingness, capability and intent to drive disinformation campaigns.

Yale finance director stole $40m in computers to resell on the sly
2022-03-31 01:28

A now-former finance director stole tablet computers and other equipment worth $40 million from the Yale University School of Medicine, and resold them for a profit. Jamie Petrone, 42, on Monday pleaded guilty to one count of wire fraud and one count of filing a false tax return, crimes related to the theft of thousands of electronic devices from her former employer.

Zlib crash-an-app bug finally squashed, 17 years later
2022-03-30 23:33

The widely used Zlib data-compression library finally has a patch to close a vulnerability that could be exploited to crash applications and services - four years after the vulnerability was first discovered but effectively left unfixed. In short, this is a memory-corruption flaw: software that relies on zlib to compress user-supplied data can be made to crash and terminate, through an out-of-bounds write, if that data is specially formatted.

New Report on Okta Hack Reveals the Entire Episode LAPSUS$ Attack
2022-03-30 22:11

An independent security researcher has shared what's a detailed timeline of events that transpired as the notorious LAPSUS$ extortion gang broke into a third-party provider linked to the cyber incident at Okta in late January 2022. Sitel, through its acquisition of Sykes Enterprises in September 2021, is the third-party service provider that provides customer support on behalf of Okta.

“VMware Spring Cloud Function” Java bug gives instant remote code execution – update now!
2022-03-30 20:38

VMWare Spring is a open-source Java toolkit for building powerful Java apps, including cloud-based apps, without needing to write, manage, worry about, or even understand the "Server" part of the process yourself. You don't need to worry about, or even care, what sort of server your code is running on: it could be a server of your own, set up and managed by your colleagues in IT; or a cloud instance hosted and executing on a popular cloud service provider.