U.S. Supreme Court decides WhatsApp can sue NSO Group / Twitter says leaked data of 200M users was not stolen / Ottopia raises $14.5M Series A

Plus: Australian healthcare organizations hacked again

Inside.com Part of   Network January 11, 2023

Presented by

The U.S. Supreme Court has decided that WhatsApp is allowed to sue NSO Group, the famous company behind the Pegasus spyware. The U.S. company sued NSO for installing the spyware on 1,400 devices where WhatsApp was also downloaded. More: This marks the first time that Meta has successfully won a lawsuit against Israel-based NSO Group after having previously sued the company several times. NSO Group has asked to be recognized as a foreign government agent. If it were to be granted this status, it would be entitled to immunity under U.S. law, which limits lawsuits against foreign countries. WhatsApp officials claim that NSO's spyware, Pegasus, has enabled cyber-attacks that have posed significant privacy risks for human rights activists, journalists, and government officials. Zoom Out: NSO Group also has been blacklisted by the U.S. Commerce Department. The federal agency limited its access to American technology.

Twitter claims the leaked data of 200 million users was not stolen by hackers during a recent hacking incident. The company claims the data has been collected from different sources online. More: Twitter initially tracked a security flaw that told any Twitter users what account a specific email was linked to. The social media giant claims that 5.4 million Twitter accounts were exposed by hackers, while another 200 million exposed accounts did not have their information stolen from Twitter's servers.  Twitter claims that it has found no evidence that any information that belongs to its users is being sold online. Zoom Out: In December 2020, the Irish DPC fined Twitter $550,000 after it did not notify the regulator of being breached within 72 hours of the breach happening, thus breaking GDPR rules.

A message from LACEWORK Lacework Labs Cloud Threat Report, Vol. 4 In the latest installment of the Cloud Threat Report series, Lacework Labs covers the significant increase in efficiencies used by cybercriminals. Get insights into these trends that cover how: Attackers are automating key discovery and exploits, taking advantage of momentary mistakes Simple mistakes turn into misconfigurations that attackers use to compromise your cloud identity infrastructure Vulnerabilities continue to stick around for months (sometimes even years) and attackers quickly exploit any new vulnerabilities Cryptojacking continues to be a staple in cybercriminal tool belts Discover detailed intelligence about ongoing infrastructure compromise activities and best practices for hardening your cloud security posture. Read the Lacework Labs Cloud Threat Report, Vol. 4 today. Get the report

Ottopia has raised a $14.5M Series A funding round to provide secure autonomous driving software. The software is used across multiple industries, such as agriculture, logistics, last-mile delivery, construction, etc. More: Ottopia provides autonomous driving technology that can be utilized for commercial purposes in a number of different industries. The company claims that its product is based on innovative networking, video, and embedded cybersecurity technology that makes it unique from similar products in the market. ComfortDelGro led the funding round, with participation from AI Alliance Fund, MizMaa Ventures, IN Venture, and Next Gear Ventures. Since its inception in 2018, the company has raised $26.5M. Ottopia is based in Tel Aviv, Israel.

Australian healthcare organizations have been hacked once again in a recent cyberattack that used Gootkit. The malware is able to track keyboard typing, steal data from the browser, take screenshots, etc. More: Gootkit uses SEO to target victims that search for specific keywords. In this case, the campaign targeted users that searched for keywords such as: Hospital, Health, Medical, Enterprise agreement. Once healthcare professionals were targeted, they were led to false WordPress websites that looked like online forums. After accessing the website, users are led to download a ZIP file that injects Javascript code.  Subsequently, victims are infected with a PowerShell script that steals information from their devices.

A message from MASTERWORKS $17.7 Billion Year Highlights Safe Haven Asset  For 2023, investors have one New Year's resolution: Stop. Losing. Money. From “transitory” inflation, to millennial Bernie Madoff, 2022 was a wild ride in the markets. That is, except for one market. The blue-chip art market. In fact, art auctions hauled in nearly $18 billion in 2022. The best year ever in a 277-year old market – all while financial markets tanked.  Now you’re probably wondering: “That's great, but how can someone like me get in on the action?” The answer is easily, with Masterworks.  Masterworks securitizes artworks by qualifying offerings with the SEC, allowing YOU to invest in shares of multi-million dollar paintings by names like Banksy.  Masterworks has also built a solid track record with all 11 of their exits netting a profit, the last 3 realizing +13.9%, +17.8%, and +21.5% net returns each. Inside readers can skip the waitlist to join. Skip The Waitlist See important Regulation A disclosures.

LCBO is investigating a suspected cyberattack case that has shut down its digital infrastructure since Tuesday. The corporation has yet to give technical details regarding the case. More: LCBO says its retail shops are open, while its website and mobile app have been down since Tuesday. The organization has not officially confirmed whether the shutdown is related to a cyberattack, but recent cases in Canada have led researchers to believe it may be. Toronto’s Hospital for Sick Children was hit by a cyberattack in December. The hacking campaign shut down its entire online infrastructure, and the hospital is yet to fully recover from the campaign.

Quick Hits: Delight your family, guests, or team like never before with Vestaboard, the award-winning messaging display. Learn more.* Britain's Royal Mail service has announced that it is experiencing significant disruptions in its international export operations due to a cyberattack. CrowdStrike has stopped a hacking campaign tied to the Scattered Spider hacker group. The campaign uses the Intel ethernet driver. Google has announced that the Google for Startups Growth Academy: Cybersecurity program is now open for companies based in the European Union. The selected companies will participate in a number of workshops and mentoring sessions. After numerous cyberattacks that breached schools in the Des Moines region, they are strengthening their cybersecurity capabilities. Low email open rates? Test out these 4 workflow strategies to get higher open rates — up to 300% more.* *This is sponsored content.

Upcoming events at Inside: January 10 - Inside Startups Coffee Break (Register Here) January 12 - AMA with Gun.io - Building and managing software development teams w/ Deividi Silva (Watch On Demand) January 13 - AMA with LinearB - Improving workflow for developers w/ Ori Keren (Watch On Demand) January 17 - Inside Marketing Coffee Break (Register Here) January 18 - Inside Interview with Lacework - 4 Common Attack Paths in Cloud Security (Register Here)

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords.

Get cloud security intel and best practices with the Lacework Labs Cloud Threat Report, Vol. 4.

Discover how to invest in the recession-resistant art market with 10-30% historical returns with Masterworks.

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2023 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.