Cybercrims impersonate cops to get sensitive data on users, Throwaway phone numbers undercut SMS 2FA, Chinese inverters threaten the power grid, Second Irish HSE attack revealed, Irish Justice Minister apologizes for gaffe over PSNI data breach, Korea seeks punitive fines over breaches, much more
Stanford-developed AI system can beat human pentesters dirt cheap, US charges former Accenture manager with false security statements, Malaysian man sentenced for teaching how to use malware, 10k+ Docker Hub images expose credentials and secrets, Storm-0249 abuses EDR for attacks, much more
Man pleads guilty amid DOJ take-down of Social Engineering Enterprise gang, DOJ files more charges against Cyber Army of Russia Reborn member, Spanish cops bust teen hacker for stealing 64m records, Ukraine cyber corps claims attack on Russian logistics company Eltrans+, much more
Compromise NDAA bill is chock full of cyber provisions, FTC rejects petition from spyware company founder, Commonwealth Bank of Australia fined A$702k for breaching data rules, FBI warns of fake proof of life photos, Oz teen social media limits go live tomorrow, much more
NCSC warns prompt injection threats might be forever, Apple and Google issue new spyware warnings, Apache Tika critical flaw allows XXE injection attacks, Japanese high school student accused of using ChatGPT to attack internet cafe chain, US issues $10m reward for Iranian hackers, much more
Southeast Asian economies are becoming dependent on cyberscams, Cybercriminals are inflicting pain throughout India, Mr Deepfakes damaged people beyond the reach of the law, Soaring sales of Starlink are creating risks around the globe, Digital opsec for teens made easy
Intellexa had access to personal data of Predator spyware targets, Int'l partners release AI security guide for OT orgs, Phreeli cellco doesn't ask for identifying info, Taiwan suspends Rednote over fraud cases, Albiriox Android malware evolves quickly, NCSC debuts proactive notifications, much more
GRU cyber ops sanctioned into Skripal poisoning inquiry, Defenders scramble to patch React Server Components' critical flaws, AI agents match human attackers in smart contract exploits, AZ Atty. General sues Temu for customer data theft, Threat intel experts recorded DPRK IT recruiters, much more
US DOJ seizes Myanmar scam center website, Coupang execs sold company stock before breach was announced, Coupang is reviewing compensation for breach victims, Korea's Gmarket hit by string of unauthorized payments, Japan's Askul internet service resumes one month post-breach, much more
Indian government wants smartphone makers to preload state-owned security app, Indian government wants to bar comms apps from working on SIM-less devices, Korea launches probe into Coupang breach and threatens punitive damages, DPRK hackers target S. Koreans with fake tax invoices, much more
Someone reported today's Metacurity as a phishing email, and Google has moved it to the spam folder. Please check, and if today's issue is in spam, please let Google know it's a safe email.
Lazarus Group suspected of $30.6m breach of Upbit, Korea's shopping platform Coupang hacked by a former insider to access 30m customers' data, Lazarus Group and Kimsuky are DPRK's most prolific hackers, Korea arrests four for hacking 120K IP cameras, OnSolve CodeRED platform hit by attack, much more