Malwarebytes Newsletter

"iPhone users targeted in phone AND data theft campaign."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 07 March 2023, 0222 UTC.  Content provided by email subscription to "Malwarebytes Newsletter,"

Source:  https://mail.google.com/mail/u/0/#inbox/FMfcgzGrcrvhSbmLDRfRbwbpppZfCQbb ("Malwarebytes Newsletter").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).

View in browser

BIG NEWS iPhone users targeted in phone AND data theft campaign When is an iPhone theft not just an iPhone theft? When the user's Apple ID, and more, goes with it. Fighting online censorship, or, encryption's latest surprise use-case: Podcast This week on Lock and Code, host David Ruiz speaks with Mallory Knodel about the stories that countries tell their people to fear encryption, and why the most recent threats to encryption are different. LastPass was undone by an attack on a remote employee LastPass has said the attackers responsible for its breach compromised a remote worker's computer in order to get inside the network. AI voice cracks telephone banking voice recognition Now we have freely-available AI happily replicating people’s voices, could it be a security risk? Recent research suggests that it could. DID YOU KNOW? You can try Malwarebytes Privacy VPN for free for 7 days. Get Malwarebytes Privacy VPN before you head out for your vacations or while you stay in and relax with your family. Whether you've got one or many new devices to protect, we've got you covered with one easy solution for Windows, Mac, iOS and Android. Secure your Wi-Fi connection - whether you're at the airport, on vacation, or simply at home, setting up your shiny new device. Take back your privacy, relax, and happy holidays! MALWAREBYTES BROWSER GUARD Malwarebytes Browser Guard crushes unwanted and unsafe content, giving you a safer and faster browsing experience. Malwarebytes Browser Guard Filters out annoying ads, scams, and trackers QUICK LINKS Lock and Code Podcast Our Blog Cybersecurity Basics Subscribe to our Business Newsletter

© 2023 Malwarebytes 3979 Freedom Circle, 12th Floor, Santa Clara, CA 95054 Share this Privacy Policy  |  Terms of Service  |  Unsubscribe

DarkReading.com

"EV charging Infrastructure offers an Electric Cyberattack opportunity."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 06 March 2023, 1310 UTC.  Content provided by "DarkReading.com."

Source: https://www.darkreading.com/ (Latest cybersecurity news from "Dark Reading.com").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).

Latest News

EV Charging Infrastructure Offers an Electric Cyberattack Opportunity

Attackers have already targeted electric vehicle (EV) charging stations, and experts are calling for cybersecurity standards to protect this necessary component of the electrified future.

by Robert Lemos, Contributing Writer, Dark Reading

Mar 03, 2023

ICS/OT SECURITY

4 MIN READ

ARTICLE

---

Indigo Books Refuses LockBit Ransomware Demand

Canada's largest bookseller rejected the pressure of the ransomware gang's countdown timer, despite data threats.

by Dark Reading Staff, Dark Reading

Mar 03, 2023

RISK

1 MIN READ

ARTICLE

---

---

Polish Politician's Phone Patrolled by Pegasus

A mayor backing Polish opposition elections in parliament has been targeted by special services with Pegasus spyware.

by Dark Reading Staff, Dark Reading

Mar 03, 2023

ENDPOINT

1 MIN READ

ARTICLE

---

Chick-fil-A Customers Have a Bone to Pick After Account Takeovers

A two-month-long automated credential-stuffing campaign exposed personal information of Chick-fil-A customers, including birthdays, phone numbers, and membership details.

by Nathan Eddy, Contributing Writer, Dark Reading

Mar 03, 2023

ENDPOINT

3 MIN READ

ARTICLE

---

CISA, MITRE Look to Take ATT&CK Framework Out of the Weeds

The Decider tool is designed to make the ATT&CK framework more accessible and usable for security analysts of every level, with an intuitive interface and simplified language.

by Tara Seals, Managing Editor, News, Dark Reading

Mar 02, 2023

THREAT INTELLIGENCE

5 MIN READ

ARTICLE

---

Biden's Cybersecurity Strategy Calls for Software Liability, Tighter Critical Infrastructure Security

The new White House plan outlines proposed minimum security requirements in critical infrastructure — and for shifting liability for software products to vendors.

by Jai Vijayan, Contributing Writer, Dark Reading

Mar 02, 2023

ICS/OT SECURITY

6 MIN READ

ARTICLE

---

BlackLotus Bookit Found Targeting Windows 11

Sold for around $5,000 in hacking forums, the BlackLotus UEFI bootkit is capable of targeting even updated systems, researchers find.

by Dark Reading Staff, Dark Reading

Mar 02, 2023

ENDPOINT

1 MIN READ

ARTICLE

---

What GoDaddy's Years-Long Breach Means for Millions of Clients

The same "sophisticated" threat actor has pummeled the domain host on an ongoing basis since 2020, making off with customer logins, source code, and more. Here's what to do.

by Nate Nelson, Contributing Writer, Dark Reading

Mar 02, 2023

RISK

4 MIN READ

ARTICLE

---

MORE NEWS

Latest Commentary

It's Time to Assess the Potential Dangers of an Increasingly Connected World

With critical infrastructures ever more dependent on the cloud connectivity, the world needs a more stable infrastructure to avoid a crippling cyberattack.

by Jackie McGuire, Senior Market Strategy Manager, Cribl

Mar 03, 2023

---

Everybody Wants Least Privilege, So Why Isn't Anyone Achieving It?

Overcoming the obstacles of this security principle can mitigate the damages of an attack.

by Tarun Thakur, CEO & Co-Founder, Veza

Mar 02, 2023

---

---

On Shaky Ground: Why Dependencies Will Be Your Downfall

There's never enough time or staff to scan code repositories. To avoid dependency confusion attacks, use automated CI/CD tools to make fixes in hard-to-manage software dependencies.

by Nicholas Lang, Threat Research Engineer, Sysdig

Mar 02, 2023

---

The Importance of Recession-Proofing Security Operations

Make sure cybersecurity is taken seriously and consistently across the board. Educate the ecosystem beyond your own organization to mitigate security risks for everyone.

by Leonid Belkind, Co-Founder & CTO, Torq

Mar 01, 2023

---

Without FIDO2, MFA Falls Short

The open authentication standard addresses existing multifactor authentication security vulnerabilities.

by Tony Lauro, Director of Security Technology & Strategy, Akamai

Mar 01, 2023

---

MORE COMMENTARY