Cyber (In)Securities โ€“ Issue 140

Information Security News

  1. Tariffs May Prompt Increase in Global Cyberattacks
    Dark Reading โ€“ Robert Lemos
  2. US Comptroller Cyber ‘Incident’ Compromises Org’s Emails
    Dark Reading โ€“ Kristina Beek
  3. Wyden Blocks Trump’s CISA Boss Nominee, Blames Cyber Agency for ‘Actively Hiding Info’ About Telecom Insecurity
    The Register โ€“ Jessica Lyons
  4. Trump Signs Order Stripping Chris Krebs of Security Clearance
    Cyberscoop โ€“ Greg Otto
  5. Hackers Target SSRF Bugs in EC2-Hosted Sites to Steal AWS Credentials
    BleepingComputer โ€“ Bill Toulas
  6. Sensitive Financial Files Feared Stolen From US Bank Watchdog
    The Register โ€“ Iain Thomson
  7. National Social Security Fund of Morocco Suffers Data Breach
    Security Affairs โ€“ Pierluigi Paganini
  8. BadBazaar and Moonshine Malware Targets Taiwanese, Tibetan and Uyghur Groups, U.K. Warns
    Cyberscoop โ€“ Tim Starks
  9. Critical FortiSwitch Flaw Lets Hackers Change Admin Passwords Remotely
    BleepingComputer โ€“ Sergiu Gatlan
  10. Fake Microsoft Office Add-in Tools Push Malware via SourceForge
    BleepingComputer โ€“ Bill Toulas
  11. Privacy Fights Over Expiring Surveillance Law Loom After House Hearing
    Cyberscoop โ€“ Tim Starks
  12. UK Orgs Pull Back Digital Projects With Looming Threat of Cyberwarfare
    Dark Reading โ€“ Kristina Beek
  13. Adobe Calls Urgent Attention to Critical ColdFusion Flaws
    SecurityWeek โ€“ Ryan Naraine
  14. 2 Android Zero-Day Bugs Under Active Exploit
    Dark Reading โ€“ Kristina Beek
  15. Treasury Department Bank Regulator Discloses Major Hack
    Cybersecurity Dive โ€“ Elizabeth Montalbano
  16. Inside a Powerful Database ICE Uses to Identify and Deport People
    404 Media โ€“ Jason Koebler
  17. Dangerous, Windows-Hijacking Neptune RAT Scurries Into Telegram, YouTube
    Dark Reading โ€“ Elizabeth Montalbano
  18. SAP Patches Critical Code Injection Vulnerabilities
    SecurityWeek โ€“ Ionut Arghire
  19. WhatsApp Vulnerability Could Facilitate Remote Code Execution
    SecurityWeek โ€“ Eduard Kovacs
  20. ESET Vulnerability Exploited for Stealthy Malware Execution
    SecurityWeek โ€“ Ionut Arghire
  21. UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine
    The Hacker News โ€“ Ravie Lakshmanan
  22. Meta Blocks Livestreaming by Teenagers on Instagram
    The Guardian โ€“ Dan Milmo
  23. EVEREST Ransomware Groupโ€™s TOR Leak Site Offline After a Defacement
    Security Affairs โ€“ Pierluigi Paganini
  24. Russian Bots Hard at Work Spreading Political Unrest on Romania’s Internet
    Bitdefender โ€“ Graham Cluley
  25. Six Arrested for AI-Powered Investment Scams That Stole $20 Million
    BleepingComputer โ€“ Bill Toulas
  26. As CISA Braces for More Cuts, Threat Intel Sharing Takes a Hit
    The Register โ€“ Jessica Lyons
  27. Counterfeit Android Devices Found Preloaded with Triada Malware
    BleepingComputer โ€“ Bill Toulas
  28. Joint Letter on Swedish Data Storage and Access to Electronic Information Legislation
    Global Encryption Coalition โ€“ Ryan Polk

Analysis

  1. Grouchoโ€™s Wit, Cloud Complexity, and the Case for Consistent Security Policy
    SecurityWeek โ€“ Joshua Goldfarb
  2. How Democratized Development Creates a Security Nightmare
    Dark Reading โ€“ Fernando Josรฉ Karl
  3. Experts Optimistic About Secure by Design Progress
    Dark Reading โ€“ Arielle Waldman
  4. Machine Identity a Key Priority for Organisationsโ€™ Security Strategies
    itNews

CyAN Members Op Eds, Articles, etc.

  1. ๐Ÿ” End-to-End Encryption: A Cornerstone Under Pressure?
    โ€“ Peter Evans
  2. CyAN Member Spotlight: ลukasz Gawron โ€“ Advancing Cybersecurity in Poland

๐Ÿ—“๏ธ Upcoming CyAN (and CyAN Partner) Global Events:

SCCS Logo

๐Ÿ“ Lisbon, Portugal

Supply Chain Cyber Security Summit (SCCS)
April 9โ€“11

Read more
GITEX AFRICA Logo

๐Ÿ“ Marrakesh, Morocco

GITEX AFRICA
April 14โ€“16

Read more
GITEX ASIA Logo

๐Ÿ“ Singapore

GITEX ASIA
April 23โ€“25

Read more
GISEC Logo

๐Ÿ“ Dubai, UAE

GISEC
May 6โ€“8

Read more
Cyber OSPAs Logo

๐Ÿ“ London, UK

Cyber OSPAs
May 8

Read more
CSG Awards Logo

๐Ÿ“ Dubai, UAE

CSG Awards 2025
May 7

Read more
World AI Expo Logo

๐Ÿ“ Dubai, UAE

World AI Technology Expo
May 14โ€“15

Read more

๐ŸŽ‰ Celebration

CyAN 10th Anniversary
(Details TBA)

GITEX Europe Logo

๐Ÿ“ Berlin, Germany

GITEX Europe Messe
May 21โ€“23

Read more
MaTeCC Logo

๐Ÿ“ Rabat, Morocco

MaTeCC
June 7โ€“9

Read more

๐ŸŒ Online

CyAN Q2 Call (APAC + Gulf)
June 11 โ€“ 12:00 GST / 16:00 SGT / 18:00 AEST

๐ŸŒ Online

CyAN Q2 Call (EMEA + Americas)
June 11 โ€“ 20:00 GST / 18:00 CET / 17:00 UTC / 12:00 EDT