US White House Issues Executive Order to Improve Nation’s Cybersecurity
On December 21st, the U.S. White House issued Executive Order (EO) 14028, “Executive Order on Improving the Nation’s Cybersecurity,” which emphasized modernizing cybersecurity infrastructure by coding in more secure ways.
A more detailed excerpt from the Executive Order stated; “Software engineers, developers, and coders must build secure code and security controls into the code they create. They need to make security by design and security by default software-design requirements.”
St. Vincent Hospital Disrupted by Data Breach
St. Vincent’s Hospital, the largest healthcare provider in Australia released a statement, confirming reports of a data breach.
An ongoing investigation in coordination with external and government agencies found that critical information was removed from the hospital’s systems. St. Vincent assured customers that they will be advised on any further findings, and necessary actions to be taken in securing sensitive data.
Iranian Threat Actors Now Targeting the Defense Sector
The Microsoft Threat Intelligence Team warns organizations in the Defense Industrial Base (DIB) sector of Iranian threat actors delivering a never-before-seen backdoor payload labeled ‘FalseFont’.
“FalseFont is a custom backdoor with a wide range of functionalities that allow operators to remotely access an infected system, launch additional files, and send information to its [command-and-control] servers,” the Microsoft Threat Intelligence team said on X (previously Twitter).