Cyber Security Weekly Wraps | IT World Canada News

February 10, 2024
1 min read

TLDR:

  • An employee from a Hong Kong company was tricked into wiring $25 million to criminals through a deepfake video call.
  • Google joined the Coalition for Content Provenance and Authentication, a group of tech companies that aims to create tamper-resistant metadata that verifies the legitimacy of digital content.
  • Google also released a report stating that commercial spyware is responsible for half of the known zero-day exploits targeting Google products and Android devices.
  • A New York City medical center will pay $4.75 million to settle allegations that data security failures led to an employee stealing and selling health information of 12,000 patients.
  • Verizon Communications and Bayer Heritage Federal Credit Union reported major data breaches affecting over 63,000 and 61,000 people respectively.
  • Fortinet, VMware, JetBrains, and Cisco Systems issued security fixes for critical vulnerabilities.
  • Meta, the company that owns Facebook and Instagram, announced plans to label all AI-generated images and potentially videos and audio files on its platforms to help people identify fake content.

Latest from Blog

Apache’s OFBiz gets new fix for RCE exploits

TLDR: Apache released a security update for OFBiz to patch vulnerabilities, including a bypass of patches for two exploited flaws. The bypass, tracked as CVE-2024-45195, allows unauthenticated remote attackers to execute code