Cyber security aggregate rss news

Cyber security aggregator - feeds history

totals: cyware (7) packetstormsecurity (1)

GitHub Introduces Private Vulnerability Reporting for Public Repositories

cyware Nov 12, 2022 Strategy and Planning

Microsoft-owned code hosting platform GitHub has announced the introduction of a direct channel for security researchers to report vulnerabilities in public repositories that allow it.

CISA Releases Decision Tree Model to Help Companies Prioritize Vulnerability Patching

cyware Nov 12, 2022 Strategy and Planning

The US Cybersecurity and Infrastructure Security Agency (CISA) announced the release of a Stakeholder-Specific Vulnerability Categorization (SSVC) guide that can help organizations prioritize vulnerability patching using a decision tree model.

U.S. seized 18 web domains used for recruiting money mules

cyware Nov 12, 2022 Govt., Critical Infrastructure

The seized websites claimed to offer jobs for a legitimate company as "quality control inspectors," being requested to ship items from their homes or even purchase goods using their own credit cards.

New BadBazaar Android malware linked to Chinese cyberspies

cyware Nov 12, 2022 Malware and Vulnerabilities

A previously undocumented Android spyware tool named 'BadBazaar' has been discovered targeting ethnic and religious minorities in China, most notably the Uyghurs in Xinjiang.

Russian Hackers Are Publishing Stolen Abortion Records on the Dark Web

cyware Nov 12, 2022 Threat Intel & Info Sharing

Hackers who stole a trove of data from one of Australia’s biggest private health insurers are drip-feeding sensitive details of customers' medical diagnoses and procedures, including abortions, onto the dark web.

Australia tells Medibank hackers: 'We know who you are'

cyware Nov 12, 2022 Incident Response, Learnings

The Australian Federal Police claims to have identified the cybercriminals behind the Medibank ransomware attack, which compromised the personal data of 9.7 million customers.

StrelaStealer and IceXLoader Drive Info-Stealing Campaigns | Cyware Hacker News

cyware Nov 12, 2022 Malware and Vulnerabilities

Researchers have discovered new waves of malware campaigns, with two information-stealing malware, StrelaStealer and IceXLoader, infecting victims with malicious email attachments. StrelaStealer searches for credentials stored in the Thunderbird and Outlook email clients to steal them. IceXLoader is known to be delivered via phishing emails, carrying malicious ZIP files.

Ubuntu Security Notice USN-5724-1

packetstormsecurity Nov 12, 2022 Feed

Ubuntu Security Notice 5724-1 - Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass Content Security Policy or other security restrictions, or show more ...

execute arbitrary code. These issues only affect Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.

2022-11