The 3 Most Prevalent Cyber Threats of the Holidays

Chaos and volume of holiday season sales make a perfect storm of threat opportunity. Companies need to prepare — and practice! — action plans, identify key stakeholders, and consider cyber insurance.


https://www.darkreading.com/vulnerabilit...s-holidays

Kenyan Digital Identity System Shelved Over Data Protection Concerns

Privacy concerns see the proposed digital identity system paused until February.


https://www.darkreading.com/data-privacy...n-concerns

UK and allies expose Russian FSB hacking group, sanction members


The UK National Cyber Security Centre (NCSC) and Microsoft warn that the Russian state-backed actor "Callisto Group" (aka "Seaborgium" or "Star Blizzard") is targeting organizations worldwide with spear-phishing campaigns used to steal account credentials and data. [...]


https://www.bleepingcomputer.com/news/se...n-members/

Russian pleads guilty to running crypto-exchange used by ransomware gangs


Russian national Anatoly Legkodymov pleaded guilty to operating the Bitzlato cryptocurrency exchange that helped ransomware gangs and other cybercriminals launder over $700 million. [...]


https://www.bleepingcomputer.com/news/se...are-gangs/

WordPress fixes POP chain exposing websites to RCE attacks


WordPress has released version 6.4.2 that addresses a remote code execution (RCE) vulnerability that could be chained with another flaw to allow attackers run arbitrary PHP code on the target website. [...]


https://www.bleepingcomputer.com/news/se...e-attacks/

Windows 11 Notepad gets a built-in character counter, finally


Microsoft keeps improving and adding more features to the Windows 11 Notepad application, the latest being a built-in character counter. [...]


https://www.bleepingcomputer.com/news/mi...r-finally/

23andMe updates user agreement to prevent data breach lawsuits


As Genetic testing provider 23andMe faces multiple lawsuits for an October credential stuffing attack that led to the theft of customer data, the company has modified its Terms of Use to make it harder to sue the company. [...]


https://www.bleepingcomputer.com/news/se...-lawsuits/

Russian military hackers target NATO fast reaction corps


Russian APT28 military hackers used Microsoft Outlook zero-day exploits to target multiple European NATO member countries, including a NATO Rapid Deployable Corps. [...]


https://www.bleepingcomputer.com/news/se...ion-corps/

New 5Ghoul attack impacts 5G phones with Qualcomm, MediaTek chips


A new set of vulnerabilities in 5G modems by Qualcomm and MediaTek, collectively called "5Ghoul," impact 710 5G smartphone models from Google partners (Android) and Apple, routers, and USB modems. [...]


https://www.bleepingcomputer.com/news/se...tek-chips/

Amazon sues REKK fraud gang that stole millions in illicit refunds


Amazon's Customer Protection and Enforcement team has taken legal action against an underground store refund scheme that has resulted in the theft of millions of dollars worth of products from Amazon's online platforms. [...]


https://www.bleepingcomputer.com/news/se...t-refunds/