FBI: 65 People Arrested Worldwide in BEC Bust

fbi:-65-people-arrested-worldwide-in-bec-bust

The Federal Bureau of Investigation (FBI) this week announced the arrests of 65 individuals as part of an international effort to combat business email compromise (BEC) fraud.

BEC scammers typically target employees in charge of making or authorizing wire transfers, from either a compromised or a spoofed email account.

read more

Chrome Browser Gets Major Security Update

chrome-browser-gets-major-security-update

Google this week released a security-themed Chrome browser makeover with patches 28 documented vulnerabilities, some serious enough to lead to code execution attacks.

The new browser refresh is now rolling out to Windows, Mac and Linux users as Chrome 100.0.4896.60. 

read more

Cloaked Snags $25M Funding to Tackle Data-Sharing Privacy

cloaked-snags-$25m-funding-to-tackle-data-sharing-privacy

A Boston startup has raised $25 million in early-stage funding to tackle the erosion of privacy in today’s data sharing ecosystems.

The startup, called Cloaked, said the Series A investment was co-led by Lux Capital and Human Capital and will be used to exit beta and drive growth in a competitive marketplace.

read more

Estonian Ransomware Operator Sentenced to Prison in US

estonian-ransomware-operator-sentenced-to-prison-in-us

An Estonian man was sentenced to 66 months in prison in the United States for his role in ransomware attacks that caused more than $53 million in losses.

The cybercriminal, Maksim Berezan, who was arrested in Latvia and later extradited to the United States, pleaded guilty in April 2021 to conspiracy to commit wire fraud and device fraud.

read more

Critical Remote Code Execution Vulnerability in Sophos Firewall

critical-remote-code-execution-vulnerability-in-sophos-firewall

Sophos on Friday announced the rollout of urgent patches for a critical authentication bypass vulnerability in the web portal of its Sophos Firewall product.

Reported by an external researcher via the Sophos bug bounty program, the vulnerability is tracked as CVE-2022-1040 and impacts Sophos Firewall v18.5 MR3 (18.5.3) and older releases.

read more