The UK’s Information Commissioner’s Office (ICO) has issued a £6m fine to software provider Advanced Computer Software Group Ltd. following a 2022 cyber attack that disrupted NHS and social care services. This decision, viewed as a new era of accountability for data processors, confirms the significant obligations and responsibilities of such companies in ensuring adequate data security. The ICO emphasized the need for robust security measures and proactive incident responses to guard against supply chain cyber attacks.
Malware campaign abused flawed Avast Anti-Rootkit driver
Threat actors are exploiting a flawed Avast Anti-Rootkit driver to bypass detection, disable security tools and compromise targeted systems, Trellix researchers found. The malware corrupts