The United States and Australia signed an agreement Wednesday to ease access by their justice departments to digital phone and email records needed in criminal investigations.
US, Australia Agree to Share Phone, Text Records in Criminal Probes
VMware Patches Critical Flaw in Workspace ONE UEM Console
VMware on Thursday announced the release of patches for a critical server-side request forgery (SSRF) vulnerability in Workspace ONE UEM console.
Virginia Museum Shuts Down Website Amid IT Breach
An information technology system security breach detected late last month prompted the Virginia Museum of Fine Arts to shut down its website for a state investigation, the museum announced this week.
Upskilling Cyber Defenders Requires a Readiness Environment
The cybersecurity threat landscape never stands still. New threats and threat actors appear all the time. They are highly trained, well-funded, and leverage the newest tools to pursue some form of cybercrime — extortion, terrorism, data theft, the list goes on.
Iran-Linked APT Abuses Slack in Attacks on Asian Airline
The Iran-linked advanced persistent threat (APT) actor MuddyWater was observed deploying a backdoor that abuses Slack on the network of an Asian airline, IBM Security X-Force reports.
Meta Targets ‘Cyber Mercenaries’ Using Facebook to Spy
Facebook parent Meta announced Thursday the shutdown of some 1,500 accounts tied to “cyber mercenary” companies accused of spying on activists, dissidents and journalists worldwide on behalf of paying clients.
Google Says NSO Pegasus Zero-Click ‘Most Technically Sophisticated Exploit Ever Seen’
Security researchers at Google’s Project Zero have picked apart one of the most notorious in-the-wild iPhone exploits and found a never-before-seen hacking roadmap that included a PDF file pretending to be a GIF image with a custom-coded virtual CPU built out of boolean pixel operations.
Corellium Lands $25 Million Investment for Virtualization Tech
Fresh off a high-profile legal triumph over Apple, virtualization technology startup Corellium is now enjoying the attention of investors with Paladin Capital Group leading a $25 million funding round.
Thousands of Industrial Systems Targeted With New ‘PseudoManuscrypt’ Spyware
Tens of thousands of devices around the world, including many industrial control systems (ICS) and government computers, have been targeted in what appears to be an espionage campaign that involves a new piece of malware dubbed PseudoManuscrypt, Kaspersky revealed on Thursday.
MobileIron Users Targeted in Log4Shell Attacks as Exploit Activity Surges
