Ghana Official to Head Africa's New Cybersecurity Authority

ANCA comprises 17 members, representing less than half of the countries in Africa.


https://www.darkreading.com/cybersecurit...ural-chair

Convincing LinkedIn 'Profiles' Target Saudi Workers for Information Leakage

Social engineering attacks in the Kingdom collect information on professionals — and offer fake profiles for sale.


https://www.darkreading.com/cloud-securi...on-leakage

Fortress Information Security & CodeSecure Team Up to Analyze SBOMs & Remediate Crit

Partnership expands comprehensive approach to software supply chain security.


https://www.darkreading.com/application-...rabilities

Cybercrime Orgs Increasingly Use Human Trafficking to Staff Scam Mills

Interpol breaks up Southeast Asian cybercrime rings, rescuing 149 victims of human trafficking, but the agency warns the human cost of cybercrime is mounting across the globe.


https://www.darkreading.com/cybersecurit...scam-mills

Ex-Uber CISO Advocates 'Personal Incident Response Plan' for Security Execs

Why Joe Sullivan feels paying off attackers was a way of solving the problem.


https://www.darkreading.com/cyberattacks...legal-case

Data's Perilous Journey & Lessons Not Learned From the Target Breach

A decade after Target suffered a major security breach, are we still disregarding the gaping holes in our cyber fortifications?


https://www.darkreading.com/vulnerabilit...get-breach

Critical WordPress Plug-in RCE Bug Exposes Reams of Websites to Takeover

Attackers can inject and execute arbitrary PHP code using a flaw in Backup Migration, which has been downloaded more than 90K times.


https://www.darkreading.com/cloud-securi...s-takeover

50K WordPress sites exposed to RCE attacks by critical bug in backup plugin


A critical severity vulnerability in a WordPress plugin with more than 90,000 installs can let attackers gain remote code execution to fully compromise vulnerable websites. [...]


https://www.bleepingcomputer.com/news/se...up-plugin/

Over 1,450 pfSense servers exposed to RCE attacks via bug chain


Roughly 1,450 pfSense instances exposed online are vulnerable to command injection and cross-site scripting flaws that, if chained, could enable attackers to perform remote code execution on the appliance. [...]


https://www.bleepingcomputer.com/news/se...bug-chain/

Cloud engineer gets 2 years for wiping ex-employer’s code repos


Miklos Daniel Brody, a cloud engineer, was sentenced to two years in prison and a restitution of $529,000 for wiping the code repositories of his former employer in retaliation for being fired by the company.  [...]


https://www.bleepingcomputer.com/news/se...ode-repos/