Security Staff Acquisition & Development

SecurityWeek reports that organizations across the U.S. have been alerted by the Cybersecurity and Infrastructure Security Agency regarding three critical and high-severity Weintek cMT human-machine interface vulnerabilities, which should be immediately remediated.

TechRepublic reports that cloud apps have become the most prevalently clicked lure for spreading malware through spearphishing campaigns during the first three quarters of 2023, followed by e-commerce sites and government organizations.

Phishing, malware attacks spike in third quarter cyberattacks involving phishing and malware have grown by 173% and 110%, respectively, during the third quarter, compared with the second quarter, reports SiliconAngle.

BleepingComputer reports that Taiwanese multinational networking equipment provider D-Link has disclosed being impacted by a data breach stemming from the compromise of a test lab system running on end-of-life software following a successful phishing attack against an employee.

As President Biden gets set to visit Israel in the midst of the Middle East crisis, organizations must start by understanding that cyber warfare knows no borders, then band together as a world community to counteract the threats.

Passwordless passkey support will be deployed by WhatsApp to all users on Android devices in the coming weeks and months, just days after Google began passkey implementation by default, according to The Verge.

Extensive data-gathering features have been discovered by F-Secure researchers within the SpyNote Android banking trojan, which has been distributed mainly through SMS phishing campaigns, according to The Hacker News.

Kansas had its court systems impacted by outages last week, which Judge Philip Journey of Sedgwick County attributed to a ransomware attack although no further details regarding the intrusion have been provided, according to The Record, a news site by cybersecurity firm Recorded Future.