Best Infosec-Related Long Reads for the Week of 11/2/24
Cops can't keep up with the rise of infostealers, How a third-party script exploited British Airways, Setting up a risk appetite statement, The security threats poised against Smart Grid 2.0
Read more
Alleged key leaders in 764 online exploitation group arrested, face life in prison
Polish cops dismantle online fraud group, FBI shares 42K LabHost phishing domains, RSAC news round-up, RansomHub affiliates might have migrated to Qilin, MSFT won't change RDP protocol that permits revoked passwords, Japanese logistics provider hit by ransomware, Persona lands $200m, much more
France accuses Russia's APT28 of a string of serious cyberattacks going back to 2021
Kristi Noem urges "back-to-basics" for CISA, WhatsApp to roll out private processing for new AI features, Indian court blocks Proton Mail, Nova Scotia Power copes with a cyber breach, Israeli hacker-for-hire PI loses extradition fight, Scammers use snail mail for Ledger wallet theft, much more
Krebs expresses outrage at Trump's gutting of cyber pros while industry rallies behind him
Take It Down Act goes to Trump's desk, Musk DOGE boys given access to highly guarded nuclear weapon data, Scattered Spider might be behind M&S attack, Zero days exploited in the wild dropped in 2024, British defense firms warned away from Chinese EVs, 4chan back after hack, so much more
Marks and Spencer sends 200 workers home as cyberattack fallout worsens
Meta's AI digital companions do not protect underage users from sexually explicit banter, UK commissioner calls for ban on apps that create sexual images of children, SK Telecom plummets in wake of cyberattack, DeFi protocol Loopscale loses $5.8m in exploit, Juice-jacking mitigation found, much more