---
title: "Cyber Security News Update, Week 50 of 2020 | DuoCircle"
description: "Ensuring robust cybersecurity measures is one of the most crucial challenges for small businesses as well as global conglomerates."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-50-of-2020/"
---

Quick Answer

Week 50, 2020 cyber news: UK gives telecoms until 2027 to strip Huawei from 5G and commits 250M to Open RAN research; Dark Caracal APT resurfaces using a new Bandook trojan variant delivered via Word macros; Citizen Lab links surveillance firm Circle (NSO sister company) to 25 governments exploiting SS7 to track phones; GitHub finds open-source vulnerabilities sit undetected for over four years on average (only 17% malicious); FINRA warns of phishing from invest-finra.org; New Zealand Privacy Act 2020 takes effect with mandatory breach reporting.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-50-of-2020%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Cyber%20Security%20News%20Update%2C%20Week%2050%20of%202020&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-50-of-2020%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-50-of-2020%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-50-of-2020%2F&title=Cyber%20Security%20News%20Update%2C%20Week%2050%20of%202020 "Share on Reddit") [ ](mailto:?subject=Cyber%20Security%20News%20Update%2C%20Week%2050%20of%202020&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-50-of-2020%2F "Share via Email") 

![Cyber Security](https://media.mailhop.org/duocircle/images/2020/12/spf-permerror-5638.jpg) 

_Ensuring robust cybersecurity measures is one of the most crucial challenges for small businesses as well as global conglomerates_. However, business managers and IT-admins can keep themselves abreast of the latest happenings in the field to anticipate any cyber attack on their organization to some extent. The following headlines have been written keeping the same purpose in mind

## UK To Ban Huawei Equipment In 5G Networks

The UK government has formulated a detailed plan following its July decision on Huawei equipment ban in 5G networks. _The plan gives UK-based telecom operators time until 2027 to eliminate all Chinese technologies they might be using_. And it’s no surprise that the United States favors this significant move by the British government to restrict any Huawei equipment installation in the [5G networks](https://securityaffairs.co/wordpress/111711/security/uk-gov-bans-new-huawei.html?web%5Fview=true) after September 2021.

The ongoing conflict between Huawei and the US continues as the US keeps **sticking to its security** concerns with Huawei, and the latter keeps denying all allegations. The UK, too, perceives _Huawei as a ‘high-risk vendor’ and is working on its cybersecurity measures to replace Chinese equipment with indigenous technology_. For instance, they are initially **spending £250 million** to explore Open Radio Access Network (Open RAN) technology that shall enable multiple suppliers to operate in a single mobile network.

## Dark Caracal Resurfaces

Just when we thought this cyber adversary had stopped operating and disappeared for good, security researchers discovered traces of its existence. We are talking about the Black Caracal or Dark Caracal APT group, which has _created havoc in the cyber world until some time back and is believed to have resurfaced_. Associated with a Lebanese intelligence agency, the Dark Caracal APT group uses a new variant of the 13-year-old **Bandook trojan** to launch its recent attacks.

[![malicious script](https://media.mailhop.org/duocircle/images/2020/12/smtp-service-2580.jpg)](https://media.mailhop.org/duocircle/images/2020/12/smtp-service-2580.jpg)

Dark Caracal uses a Word document embedded with [a malicious script](https://web.archive.org/web/20210928013307/https://cyware.com/news/the-revival-of-dark-caracal-803bea22) and an external template with macros to lure victims. This is followed by the PowerShell loader and finally the Bandook Trojan. Dark Caracal may not be as malicious and destructive as other APT actors but taking **email protection** measures is necessary to avoid being the target of their attacks.

## 25 Countries Use Circle To Spy On Citizens

The latest revelation of Citizen Lab shall leave you astonished. _Research has revealed that the surveillance firm Circle (a sister firm of NSO Group) provides its spyware services to at least [25 governments](https://www.cyberscoop.com/circles-mobile-spyware-citizen-lab/)_. The involved nations include Indonesia, Morocco, Nigeria, Israel, Kenya, Malaysia, Mexico, Peru, Australia, Belgium, Serbia, Thailand, and the United Arab Emirates, among others.

The NSO Group is already facing a lawsuit from Facebook for aiding attackers to spy on Whatsapp users. Now the ties of its sister firm Circle with governments across the world isn’t any surprise. Circle exploits Signalling System No. 7 (SS7) vulnerabilities and lets attackers track a phone, intercept its calls and even mess with two-factor authentication texts. Interestingly enough, Circle’s products go undetected in [email security service](/) checks, and Forbes believes that both NSO Group and Circle have high ethical standards. But Citizen Lab has evidence to believe the opposite!

## Efficiency Needed In Detecting Open Source Software Vulnerabilities

_The adversaries get a chance to take over systems when vulnerabilities go undetected and unattended for a long time_. A recent GitHub’s report suggests that it takes over four years on average to detect an open-source software vulnerability. It is now more than ever before that services and technologies (including banking, healthcare, and other sectors) are depending on open source projects.

Although security fixes are made available within a month, vulnerability [detection can take years](https://www.zdnet.com/article/open-source-software-security-vulnerabilities-exist-for-over-four-years-before-detection-study/?&web%5Fview=true). However, _the silver lining is that only 17% of all detected vulnerabilities were malicious_. One fundamental way to ensure **ransomware protection** is not leaving vulnerability unattended. In times when open source shapes so many industries, it is only wise that the vulnerability detection process is speeded up in the community.

## FINRA Member Firms Beware Of Phishing Attacks

The SEC supervised US NPO Financial Industry Regulatory Authority (FINRA) is asking its member brokerage firms to look out for **phishing emails** from a recently registered fake web domain impersonating FINRA. _The phony domain invest-finra.org was created through Gandi on 5th November_.

[![fake domain](https://media.mailhop.org/duocircle/images/2020/12/smtp-relay-7421.jpg)](https://media.mailhop.org/duocircle/images/2020/12/smtp-relay-7421.jpg)

Though FINRA has asked Gandi to disable services for the [fake domain](https://www.bleepingcomputer.com/news/security/phishing-targets-us-brokerage-firms-using-finra-lookalike-domain/?&web%5Fview=true), it is still reachable, and hence, members must consider opting for [email security as a service](/). Any emails received from invest-finra.org must be deleted at once. Recipients must abstain from responding to, opening attachments, or clicking on embedded links in such suspicious emails. For further details, _firms are advised to go through FINRA’s resources on their website_.

## Privacy Act 2020 Comes To Effect in New Zealand

As of 1st December, _New Zealand shall denounce the Privacy Act 1993 and adhere to the new privacy laws introduced by the Privacy Act 2020_. The new act makes it mandatory for all firms handling employee and customer data to appoint a privacy officer and report all security incidents with a “**risk of harm**.” A failure in executing the same shall subject firms to penalties up to NZ$10,000 ($7,000) or NZ$230,000 ($162,000) if then [Privacy Commissioner](https://portswigger.net/daily-swig/new-zealand-privacy-act-updated-data-breach-legislation-comes-into-effect-on-december-1?&web%5Fview=true) reports the incident to the Human Rights Tribunal.

The new privacy law grants greater power to the Privacy Commissioner to investigate an organization’s cybersecurity standards. _The government has launched a cybersecurity tool called NotifyUs_, which businesses can use to identify whether a security incident needs to be reported. Amidst all the data breach incidents, _New Zealand’s new Privacy Act is a ray of hope for citizens_.

And that’s the week that was.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

## Related Articles

[  News 3m  Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam  Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[  News 1m  April Spam Filtering Uptime Report  May 4, 2016 ](/blog/announcements/april-spam-filtering-uptime-report/)[  News 2m  Changes to Spam Filtering Technology  Feb 8, 2023 ](/blog/announcements/changes-to-spam-filtering-technology/)[  News 4m  Cyber Security News Update, Week 1 of 2020  Jan 3, 2020 ](/blog/announcements/cyber-security-news-update-week-1-of-2020/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 50 of 2020","description":"Ensuring robust cybersecurity measures is one of the most crucial challenges for small businesses as well as global conglomerates.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-50-of-2020/","datePublished":"2020-12-12T14:09:57.000Z","dateModified":"2025-05-26T17:51:44.000Z","dateCreated":"2020-12-12T14:09:57.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-50-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":913,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/12/spf-permerror-5638.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"Cyber Security News Update, Week 50 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-50-of-2020/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Cyber Security News Update, Week 50 of 2020","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-50-of-2020/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"Cyber Security News Update, Week 50 of 2020","description":"Ensuring robust cybersecurity measures is one of the most crucial challenges for small businesses as well as global conglomerates.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-50-of-2020/","datePublished":"2020-12-12T14:09:57.000Z","dateModified":"2025-05-26T17:51:44.000Z","dateCreated":"2020-12-12T14:09:57.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-50-of-2020/"},"articleSection":"announcements","keywords":"","wordCount":913,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2020/12/spf-permerror-5638.jpg","caption":"Cyber Security","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```