US domestic surveillance report emerges as Section 702 is debated by the Senate. Proposed Dutch law targets Chinese tech researchers.

Apple Rushes to Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones

Apple on Thursday released emergency security updates for iOS, iPadOS, macOS, and watchOS to address two zero-day flaws that have been exploited in the wild to deliver NSO Group’s Pegasus mercenary spyware.
The issues are described as below –

CVE-2023-41061 – A validation issue in Wallet that could result in arbitrary code execution when handling a maliciously crafted attachment.
CVE-2023-41064   Read More 

The Hacker News | #1 Trusted Cybersecurity News Site 

Australian ports recovering from cyberattack. GRU’s Sandworm implicated in campaign against Danish electrical power providers. Sandworm and Ukraine’s power grid: 2022 attacks.

Four cyber phases of a hybrid war. Rockwell Stratix routers vulnerable to Cisco zero-day. ISA, FEMA, and Shields Ready. Cyber and electronic threats to space systems. Nuclear power plant operator cited over cybersecurity strategy.   Read More 

The CyberWire