3CX desktop app compromised in software supply chain attack
29 Mar 2023
Security firms found a trojanised version of 3CX’s widely used phone software, later traced to an earlier supply chain attack.
Insights that apply internationally, including most vulnerabilities, threats, and international standards.
Security firms found a trojanised version of 3CX’s widely used phone software, later traced to an earlier supply chain attack.
OpenAI released GPT-4, a more capable model that accepts image as well as text inputs, and made it available through ChatGPT Plus.
NIST has released a voluntary framework to help organisations manage the risks of artificial intelligence and build trustworthy AI.
LastPass revealed that attackers had copied a backup of customer vault data, including encrypted passwords and unencrypted website addresses.
OpenAI released ChatGPT as a free research preview, and it became one of the fastest-growing consumer applications ever.
The third edition of ISO/IEC 27001 has been published, with Annex A aligned to ISO/IEC 27002:2022 and a three-year transition period.
The Council of Europe opens the Second Additional Protocol to the Budapest Convention for signature, enabling faster cross-border access to electronic evidence.
The PCI Security Standards Council publishes PCI DSS v4.0, the first major update to the card data security standard since 2018.
Attackers stole around $620m in cryptocurrency from the Ronin bridge behind Axie Infinity; the FBI later linked the theft to North Korea’s Lazarus Group.
Okta confirmed that Lapsus$ had accessed a support contractor’s computer, potentially affecting hundreds of its customers.
The revised code of practice for information security controls restructures 114 controls into 93, organised in four themes.
A critical flaw in the widely used Apache Log4j logging library, dubbed Log4Shell, triggers a worldwide scramble to patch.