OneLogin Woes, Shadow Brokers Identity, oAuth Nightmares – Paul’s Security Weekly #516

New proposed commercial surveillance regulations are poised to be unveiled by the Federal Trade Commission in the next few months amid concerns of misuse and data security gaps, reports The Record, a news site by cybersecurity firm Recorded Future.

North Korean state-sponsored advanced persistent threat operations Lazarus Group, Kimsuky, and Andariel were noted by South Korea's National Police Agency to have targeted several South Korean defense industry entities since late 2022 in a bid to obtain intelligence regarding defense technologies, reports Security Affairs.

Change Healthcare owner UnitedHealth Group acknowledges some customer protected health information leaked on dark web.