iNews Vol 180

SBI cautions about a new fraud; Do not trust the calls from CBI, Income Tax department without verifying their identity

State Bank of India: Recently SBI through an SMS campaign has started to alert its customers about a new fraud where impoters impersonating government officials target you and tell you false stories. The aim of these imposters is to make you fearful enough so that you pay them

Hackers abuse Avast anti-rootkit driver to disable defenses

A new malicious campaign is using a legitimate but old and vulnerable Avast Anti-Rootkit driver to evade detection and take control of the target system by disabling security components.

Vulnerability disclosure policy bill for federal contractors clears Senate panel

The Homeland Security and Governmental Affairs Committee on Wednesday also advanced legislation to strengthen the federal IT supply chain.

China's 'Liminal Panda' APT Attacks Telcos, Steals Phone Data

In US Senate testimony, a CrowdStrike exec explained how this advanced persistent threat penetrated telcos in Asia and Africa, gathering SMS messages, unique identifiers, and other metadata along the way.

Cyberattack at French hospital exposes health data of 750,000 patients

A data breach at an unnamed French hospital exposed the medical records of 750,000 patients after a threat actor gained access to its electronic patient record system.

A senior UK minister will warn that Russia is preparing cyberattacks against the UK and its allies to undermine support for Ukraine.

Russia may launch cyberattacks against the UK and its allies in retaliation for their support of Ukraine, Chancellor of the Duchy of Lancaster Pat McFadden is expected to state during a NATO meeting.

2000 Palo Alto Firewalls Compromised via New Vulnerabilities

The number of internet-exposed Palo Alto firewalls is dropping, but 2,000 have been compromised, according to Shadowserver Foundation.

North Korean Front Companies Impersonate U.S. IT Firms to Fund Missile Programs

Threat actors with ties to the Democratic People's Republic of Korea (DPRK) are impersonating U.S.-based software and technology consulting businesses?

'Worst leak in streaming history': Hackers disrupt Netflix's biggest shows; Here's what it means for the future of streaming

Netflix is taking legal and technical steps to address a major content leak that impacted several blockbuster series, including Squid Game and Arcane. The breach, linked to post-production studio Iyuno, led to the release of unreleased episodes online.