Latest Cybersecurity News and Articles

---

Charming Kitten Targets Iranian Dissidents with Advanced Cyber Attacks

Germany's Federal Office for the Protection of the Constitution (BfV) has warned of cyber attacks targeting Iranian persons and organizations in the country since the end of 2022. "The cyber attacks were mainly directed against dissident organizations and individuals – such as lawyers, journalists, or human rights activists – inside and outside Iran," the agency said in an advisory. The

---

How Executives’ Personal Devices Threaten Business Security

While the cyber threat landscape has seen this major shift, security software to manage these direct personal risks has not kept up to protect public-facing individuals and leaders the way large enterprise organizations have.

---

New Financial Malware 'JanelaRAT' Targets Latin American Users

Users in Latin America (LATAM) are the target of a financial malware called JanelaRAT that's capable of capturing sensitive information from compromised Microsoft Windows systems. "JanelaRAT mainly targets financial and cryptocurrency data from LATAM bank and financial institutions," Zscaler ThreatLabz researchers Gaetano Pellegrino and Sudeep Singh said, adding it "abuses DLL side-loading

---

Update: UK Electoral Commission had Unpatched Vulnerability on Server

Last week, the election oversight body disclosed that its systems had been broken into, and the attackers had access to the servers that host the organization's email, as well as copies of the electoral registers for the entire UK.

---

Threat Intelligence’s Key Role in Mitigating Malware Threats

Threat actors leverage malware as an initial foothold to infiltrate targeted infrastructures and move laterally to gain long-term access, cause damage, or exfiltrate data and trade secrets.

---

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom's Zero Touch Provisioning (ZTP) that could be potentially exploited by a malicious attacker to conduct remote attacks.

---

Singapore Bank’s New App Security Feature Irks Customers

OCBC introduced a security feature that locks out access if it detects mobile apps downloaded from unofficial app stores on the user's phone. The bank cites the need to safeguard against malware, but is instead frustrating customers.

---

New Python URL Parsing Flaw Could Enable Command Execution Attacks

A high-severity security flaw disclosed in the Python URL parsing function could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, resulting in arbitrary file reads and command execution.

---

White House Wants Input on Open Source Security, Memory-Safe Languages

The White House ONCD released a request for information to get input from public and private sector stakeholders on key issues surrounding open-source security, a critical piece of the Biden administration’s national cybersecurity strategy.

---

Do You Speak Multiple Languages? Malware Does.

The malware is packed twice to evade detection, including the use of a Go crypter called ShellGo. The malware payload is a remote access trojan (RAT) called AsyncRAT, which is executed in memory through a complex sequence of function calls.

---

DHS Cyber Review Board to Examine China-Linked Cyberattacks of Microsoft

The Department of Homeland Security's Cyber Safety Review Board will conduct its next investigation on cloud security and examine a recent cyberattack that targeted government email accounts supplied through Microsoft software.

---

Dependency Confusion Attacks: New Research Into Which Businesses are At Risk

Dependency confusion attacks, involving malicious code injection into applications through vulnerable dependencies, pose a significant security risk to organizations, with a high percentage of applications and assets being vulnerable to such attacks.

---

TunnelCrack Attack May Cause Vulnerable VPNs to Leak Traffic

A couple of techniques collectively known as TunnelCrack can, in the right circumstances, be used by snoops to force victims' network traffic to go outside their encrypted VPNs, it was demonstrated last week.

---

India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users' Privacy First

The Indian President Droupadi Murmu on Friday granted assent to the Digital Personal Data Protection Bill (DPDPB) after it was unanimously passed by both houses of the parliament last week, marking a significant step towards securing people's information. "The Bill provides for the processing of digital personal data in a manner that recognizes both the rights of the individuals to protect their

---

Security’s Top 5 – July 2023

In this edition of Security’s Top 5, we showcase the top stories and new developments from across the security industry throughout July.

---

PSNI bosses’ blase attitude to data leak that has put my family at risk | Letter

A serving member of Police Service Northern Ireland on the sacrifices that have been made and the lack of support from the topI’m a serving officer with the Police Service of Northern Ireland, from a nationalist background in West Belfast. I couldn’t join the RUC because it would have been too dangerous because of who I was and where I was from. Nevertheless, I took the plunge and eventually joined the PSNI. My immediate family had to be schooled with an elaborate backstory. Wider family were not told – I made my siblings lie to their children for years because I couldn’t trust who they would tell.For 18 years I’ve relied on my family to help me protect my identity. I’ve denied myself a social life, and gave up sports I loved. I can’t stay in touch with old friends on social media as I need to avoid the footprint. Now this is all taken away at the click of a button (Northern Ireland police officers’ details exposed in ‘monumental’ breach, 8 August). I am worried terrorists will target my parents because it’ll be easier than getting at me. Continue reading...

---

Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk

Multiple security vulnerabilities impacting CyberPower's PowerPanel Enterprise Data Center Infrastructure Management (DCIM) platform and Dataprobe's iBoot Power Distribution Unit (PDU) could be potentially exploited to gain unauthenticated access to these systems and inflict catastrophic damage in target environments. The nine vulnerabilities, from CVE-2023-3259 through CVE-2023-3267, carry

---

PSNI data breach: 200 officers and staff not informed about theft for month

Police-issued laptop, radio and documents stolen from car in Northern Ireland on 6 July About 200 police officers and staff were not informed about the theft of devices and documents with data potentially affecting them for almost a month, the Police Service of Northern Ireland (PSNI) has confirmed.A police-issued laptop, radio and documents were stolen on 6 July from the car which is understood to belong to a superintendent. Continue reading...

---

AI could have bigger impact on UK than Industrial Revolution, says Dowden

Deputy PM says technology may aid faster government decisions – but warns of massive hacking risksArtificial intelligence could have a more significant impact on Britain than the Industrial Revolution, the deputy prime minister has said, but warned it could be used by hackers to access sensitive information from the government.Oliver Dowden said AI could speed up productivity and perform boring aspects of jobs. Continue reading...

---

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom's Zero Touch Provisioning (ZTP) that could be potentially exploited by a malicious attacker to conduct remote attacks. "An external attacker who leverages the vulnerabilities discovered in AudioCodes Ltd.'s desk phones and Zoom's Zero Touch Provisioning feature can gain full remote control of the devices,"