Distributed Workforce

Russian state-sponsored threat operation Fancy Bear, also known as APT28, was noted by the Cybersecurity and Infrastructure Security Agency to have infiltrated the network of a U.S. satellite communications provider with U.S. critical infrastructure clients, CyberScoop reports.

Acronis researchers found that phishing accounts for 76% of all attacks, rising by 1.3 times between July and October 2022.

The NSA and CISA issued alerts for a critical vulnerability found in certain Citrix products. Threat actors have already successfully compromised multiple U.S. healthcare providers.

Australia's second largest telecommunications firm TPG Telecom had its Hosted Exchange service hacked, resulting in the compromise of email accounts belonging to 15,000 customers, according to SecurityWeek.

The .Net-based DarkTorilla malware has been around since 2015 and has been best known for dropping malware stealers and remote access trojans.

SecurityWeek reports that more than 140 security vulnerabilities have been collectively addressed by Siemens and Schneider Electric in their respective products as part of this month's Patch Tuesday.

Will 2023 be the year of passwordless? Only time will tell, but industry vendors and some security researchers are banking on it.

Adobe and VMware have released fixes for various vulnerabilities impacting their products as part of this month's Patch Tuesday, according to SecurityWeek.