Hackers belonging to the LAPSUS$ cybercrime group have published screenshots, allegedly taken from inside Oktas information systems. If the claims are true, they have access not only to the companys website, but also to a number of other internal systems, including quite critical ones. LAPSUS$ claims that they did not show more ...
Pavel Vrublevsky, founder of the Russian payment technology firm ChronoPay and the antagonist in my 2014 book “Spam Nation,” was arrested in Moscow this month and charged with fraud. Russian authorities allege Vrublevsky operated several fraudulent SMS-based payment schemes, and facilitated money show more ...
Bionic, a Palo Alto, CA-based Application Security Posture Management platform, closed a $65m Series B funding. The round was led by Insight Partners with participation from existing investors Cyberstarts and Battery Ventures.
A Windows local privilege escalation zero-day vulnerability that Microsoft has failed to fully address for several months now, allows users to gain administrative privileges in Windows 10, Windows 11, and Windows Server.
A Steam user receives an unsolicited message from a stranger. It may be sent via Steam’s own messenger service, or it could be in a Discord channel. The scammer presents the “offer” as a way to help a fellow Steam enthusiast out.
The FBI said that the hackers gained access to an NGO cloud by abusing default MFA protocols. They enrolled their own device into the organization’s Duo MFA.
U.S. Department of Health and Human Services records show health care companies in North Carolina and South Carolina have reported 47 large breaches of unsecured protected health information impacting more than 1.4 million people since 2020.
A popular mobile app in the official Google Play store called “Craftsart Cartoon Photo Tools” has racked up more than 100,000 installs – but unfortunately for the app’s enthusiasts, it contains a version of the Facestealer Android malware.
Internal screenshots were posted by a group of hackers known as LAPSUS$ on their Telegram channel late on Monday. In an accompanying message, the group said its focus was "ONLY on Okta customers."
The vulnerability received a shout-out from the NSA’s top cybersecurity official, who warned defenders not to be fooled by the (relatively) low severity rating and patch immediately.
In January 2022, the FBI issued a PSA warning people of a new trend: cybercriminals are allegedly taking advantage of QR codes to redirect victims to malicious sites that can steal their credentials and financial information.
Earlier this month the group said on its Telegram channel that it was seeking employees inside technology companies who would be willing to work with them, including Microsoft.
The point of compromise was VetIS, a state information system used by veterinary services and companies engaging in the field, making it likely a supply chain compromise, although more clarification is needed.
At the start of this year, Symphony Technology Group (STG) announced Trellix was the new name for the business unit that resulted from the merger of McAfee Enterprise and FireEye last October.
Tracked as CVE-2022-24415, CVE-2022-24416, CVE-2022-24419, CVE-2022-24420, and CVE-2022-24421, the high-severity vulnerabilities are rated 8.2 out of 10 on the CVSS scoring system.
These cyber assets could include cloud workloads, devices, network assets, applications, data assets, and users. The average security team is responsible for managing over 165,000 of these, a new report warned.
This malware was identified in 2017 and is used exclusively by Arid Viper, an advanced persistent threat (APT) group believed to be based in Gaza and known as APT-C-23. Deep Instinct named the Go-written malware Arid Gopher.
White House officials delivered classified briefings to more than 100 companies last week, urging at-risk private sector partners to bolster cybersecurity defenses against potential intrusions by Russia-linked actors.
In a new BitRAT malware distribution campaign discovered by researchers at AhnLab, threat actors are distributing the malware as a Windows 10 Pro license activator on webhards.
In his statement on cybersecurity preparedness, Secretary of Homeland Security Alejandro N. Mayorkas said that organizations of every size and across every sector should continue enhancing their cybersecurity defenses.
New source code for the Russian-based Conti ransomware operation has been leaked on Twitter—as revenge for the ongoing war—by the Ukrainian researcher named Conti Leaks. The source code leak is a Visual Studio solution that can be decompiled easily, thus allowing anyone to compile the code and the decryptor. The recent leak shall help the security community to better understand Conti ransomware operations.
Researchers analyzed two recent ransomware attacks by BlackCat and BlackMatter and discovered overlaps in their TTPs. However, one of the representatives of BlackCat had already claimed that the ransomware is not the rebranding of BlackMatter. BlackCat could be playing an important role in helping several groups come together and work as a team.
HP has published security advisories for three critical-severity vulnerabilities affecting hundreds of its LaserJet Pro, Pagewide Pro, OfficeJet, Enterprise, Large Format, and DeskJet printer models.
The FBI issued a joint cybersecurity advisory against AvosLocker ransomware operations aimed at crippling the networks of U.S. critical infrastructure. It has targeted multiple sectors including financial services, critical manufacturing sectors, and government facilities as well. The advisory provides multiple countermeasures to stay protected from AvosLocker ransomware attacks.
SAMH (the Scottish Association for Mental Health) helps provide care and support for adults and young people suffering from issues with their mental health, and campaigns to influence positive social change.
ELTA, the state-owned provider of postal services in Greece, has disclosed a ransomware incident detected on Sunday that is still keeping most of the organization's services offline.
A follow-up message asked the recipient to delete the erroneously sent email and explained that any of the information accidentally leaked was in any case available on a public electoral register.
ForAllSecure plans to use the funding to accelerate growth, hire new talent, and build a solution that would help secure open source projects that businesses worldwide depend on.
ImpressCMS versions 1.4.3 and below suffer from a remote SQL injection vulnerability.
ImpressCMS versions 1.4.2 and below suffer from an incorrect access control vulnerability.
ImpressCMS versions 1.4.2 and below suffer from a path traversal vulnerability that can allow for arbitrary file deletion.
Ubuntu Security Notice 5341-1 - It was discovered that GNU binutils incorrectly handled checks for memory allocation when parsing relocs in a corrupt file. An attacker could possibly use this issue to cause a denial of service. It was discovered that GNU binutils incorrectly handled certain corrupt DWARF debug show more ...
Ubuntu Security Notice 5339-1 - Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 release_agent feature. A local attacker could use this to gain administrative privileges. It was discovered that an out-of-bounds memory access flaw show more ...
ICEHRM version 31.0.0.0S suffers from a cross site request forgery vulnerability.
Backdoor.Win32.BirdSpy.b malware suffers from a hardcoded credential vulnerability.
Ubuntu Security Notice 5338-1 - Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 release_agent feature. A local attacker could use this to gain administrative privileges. J
iRZ mobile routers versions RU21, RU21w, RL21, RU41, and RL01 suffer from a cross site request forgery vulnerability that can enable remote code execution.
Backdoor.Win32.Agent.bxxn malware suffers from an open proxy vulnerability.
Sysax FTP Automation version 6.9.0 suffers from a privilege escalation vulnerability.
ImpressCMS versions 1.4.2 and below suffer from an authentication bypass vulnerability.
Ubuntu Security Notice 5337-1 - It was discovered that the BPF verifier in the Linux kernel did not properly restrict pointer types in certain situations. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Yiqi Sun and Kevin Wang discovered that the cgroups implementation show more ...
Five new security weaknesses have been disclosed in Dell BIOS that, if successfully exploited, could lead to code execution on vulnerable systems, joining the likes of firmware vulnerabilities recently uncovered in Insyde Software's InsydeH2O and HP Unified Extensible Firmware Interface (UEFI). Tracked as CVE-2022-24415, CVE-2022-24416, CVE-2022-24419, CVE-2022-24420, and CVE-2022-24421, the
Back in 2018, Palo Alto Networks CTO and co-founder Nir Zuk coined a new term to describe the way that businesses needed to approach cybersecurity in the years to come. That term, of course, was extended detection and response (XDR). It described a unified cybersecurity infrastructure that brought endpoint threat detection, network analysis and visibility (NAV), access management, and more under
The U.S. government on Monday once again cautioned of potential cyber attacks from Russia in retaliation for economic sanctions imposed by the west on the country following its military assault on Ukraine last month. "It's part of Russia's playbook," U.S. President Joe Biden said in show more ...
Microsoft and authentication services provider Okta said they are investigating claims of a potential breach alleged by the LAPSUS$ extortionist gang. The development, which was first reported by Vice and Reuters, comes after the cyber criminal group posted screenshots and source code of what it said were the companies' internal projects and systems on its Telegram channel. The leaked 37GB
