Risk Assessments/Management

Sixty-five percent of IT help desk teams across the U.S. have reported experiencing excessive stress and burnout, while 94% noted that skills shortfall, as well as hiring and retention concerns during the past year have adversely affected their duties, according to TechRepublic.

The New York Assembly has unanimously approved legislation that would strengthen the cybersecurity defenses of its energy supply amid increasingly prevalent cyberattacks against power grids across the U.S., Government Technology reports.

The Cybersecurity and Infrastructure Security Agency has temporarily omitted the Windows Local Security Authority Spoofing flaw, tracked as CVE-2022-26925, from its Known Exploited Vulnerability Catalog following a problematic fix issued by Microsoft, reports ZDNet.

Malware could be loaded into the Bluetooth chips of iPhones and could be executed even if the devices are turned off through a new attack surface discovered by researchers at the Technical University of Darmstadt's Secure Mobile Networking Lab, according to The Hacker News.

Novel link-layer Bluetooth Low Energy relay attacks that could evade mitigations and protections including encrypted link layer, detectable latency levels, and localization approaches could be performed by a new tool developed by NCC Group researchers, SecurityWeek reports.

The Register reports that the U.S. has sentenced Glib Oleksandr Ivanov-Tolpintsev to four years imprisonment for his involvement in the sale of stolen credentials across over 6,700 compromised servers.

Three security vulnerabilities impacting SonicWall's Secure Mobile Access 1,000 appliances, one of which is a high-severity authentication bypass flaw, have been detailed as part of a warning from SonicWall, reports The Hacker News.