Distributed Workforce

SiliconAngle reports that private equity company Vista Equity Partners is set to purchase cybersecurity training software provider KnowBe4 in a $4.6 billion deal, with the acquisition expected to be finalized in the first quarter of 2023.

Voice phishing attacks have been leveraged by threat actors to target Italian online banking users with the Copybara Android banking trojan, according to The Hacker News.

CyberScoop reports that the White House National Security Council intends to introduce a consumer products cybersecurity labeling program next spring in an effort to bolster internet-connected devices' digital protections.

This week’s healthcare data breach roundup includes a number of email and vendor-related incidents, led by 13 new filings from anesthesia practices with HHS over a “data security incident.”

Threat actors could leverage the new Caffeine phishing-as-a-service platform to easily launch phishing attacks, with the service observed by Mandiant to have been used in a large-scale Microsoft 365 phishing attack against one of its clients, BleepingComputer reports.

BleepingComputer reports that IcedID malware operators have been leveraging slightly different infection pathways, as well as command-and-control server IPs in various phishing campaigns last month.

Despite only emerging in March 2021 in the BazarCall campaign that leveraged phishing emails purporting to be from various subscriptions in an effort to distribute the BazarLoader malware, callback phishing attacks have since become a formidable cybersecurity threat.

Challenges facing many providers can’t be boiled down into a singular problem or solution, and current assessments of risk could leave a vulnerable market unable to see the forest through the trees.