Microsoft has revealed that the APT33 Iranian cyber-espionage group, also known as Peach Sandstorm, is using a new backdoor malware called FalseFont to attack global defense contractors. The attacks provide the operators remote access to the compromised systems, extending their reach into government, defense, research, finance, and engineering sectors.

The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.