Distributed Workforce

Ongoing cybersecurity workforce shortage around the world has prompted Sophos and Boise State University's Institute for Pervasive Security to collaborate in facilitating cybersecurity training, SiliconAngle reports.

More than 40,000 of over 1.8 million administrator credentials compromised by information-stealing malware that have been recovered from January to September were "admin," indicating the prevalence of weak passwords used in administrator portals and the elevated vulnerability of enterprise networks to cyberattacks, reports BleepingComputer.

Numerous severe vulnerabilities have been reported to affect Milesight industrial cellular routers and South River Technologies' Titan MFT and Titan SFTP servers, according to The Hacker News.

BleepingComputer reports that Taiwanese multinational networking equipment provider D-Link has disclosed being impacted by a data breach stemming from the compromise of a test lab system running on end-of-life software following a successful phishing attack against an employee.

Extensive data-gathering features have been discovered by F-Secure researchers within the SpyNote Android banking trojan, which has been distributed mainly through SMS phishing campaigns, according to The Hacker News.

In a bid to strengthen authentication and security measures against relay attacks and unauthorized network access, Microsoft has confirmed that it will be using Kerberos in place of the NT LAN Manager in Windows 11, The Hacker News reports.

Akira ransomware operation's massive remote encryption attack against an industrial organization in June has been circumvented with Microsoft Defender for Endpoint's user containment functionality, according to The Hacker News.