CyberScoop reports that reducing the Defense Department's cyber authorities under the National Security Presidential Memorandum by allowing the State Department to engage in cyber operations decision-making process will slow down the U.S. Cyber Command's response to increasingly sophisticated cybersecurity threats, according to Cyberspace Solarium Commission Co-Chair Rep. Mike Gallagher, R-Wis.
Portland-based Ruby Receptionists, which offers phone-answering services to over 10,000 small businesses, had its systems affected by a cyberattack against service provider Opus Interactive, The Oregonian reports.
SAP has addressed the Spring4Shell vulnerability, tracked as CVE-2022-22965, impacting its Customer Profitability Analytics, Business One Cloud, and Commerce offerings, as part of this month's Security Patch Day, reports SecurityWeek.
Attackers have been leveraging a novel phishing approach that involves the creation of an unusual link with an "@" symbol in between, which browsers identify as legitimate domains and therefore allows evasion of security systems, according to Threatpost.
New guidance from the Cloud Security Alliance aims to support delivery organizations with assessing and managing cybersecurity risks to the healthcare supply chain.
VentureBeat reports that Abnormal Security has secured a $210 million investment from a Series C funding round, which will be allocated toward improving its cloud-native email security platform to better mitigate business email compromise and other email-based attacks.
Microsoft has issued a fix for a Windows Local Security Authority spoofing zero-day vulnerability, which could be abused to force domain controller authentication through the Windows NT LAN Manager protocol, BleepingComputer reports.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
