Distributed Workforce

CyberScoop reports that average cybersecurity job salaries for women in non-managerial, mid-advanced roles and managerial positions were only 5% and 9% lower than their male equivalents, respectively, which are lower than the up to 20% compensation gap observed in previous years.

TechCrunch reports that Apple has warned of mercenary spyware attacks targeting iPhone users in India and 91 other countries.

The Cybersecurity and Infrastructure Security Agency has called for immediate authentication credential resets across all federal agencies that had their emails with Microsoft containing sensitive data compromised in an attack by Russian state-sponsored threat operation Midnight Blizzard, also known as APT29 and Cozy Bear, according to CyberScoop.

BleepingComputer reports that intrusions involving known security flaws and brute force tactics have been deployed by Romanian threat operation RUBYCARP for at least a decade, with the group currently operating a botnet with more than 600 breached servers.

Here are three new BEC tactics CISOs need to watch for.

Google has updated its Chrome browser to support the V8 Sandbox aimed at curbing the spread of V8 memory corruption issues within the host process, according to The Hacker News.

BleepingComputer reports that attacks leveraging a recently patched high-severity heap overflow vulnerability, tracked as CVE-2024-21894, could impact nearly 16,500 internet-exposed Ivanti Connect Secure and Poly Secure VPN gateways.

More than 92,000 outdated internet-exposed D-Link Network Attached Storage devices could be breached in attacks exploiting a newly discovered arbitrary command injection and hardcoded backdoor vulnerability, tracked as CVE-2024-3273, which could result in sensitive data access, system configuration modifications, and denial-of-service conditions, reports Security Affairs.