Oktacron - Cyber Security RSS Feeds History

Pwn2Own Vancouver 2023 Day 1: Windows 11 and Tesla hacked

cyware Mar 25, 2023 Malware and Vulnerabilities

The Pwn2Own Vancouver 2023 has begun, this hacking competition has 19 entries targeting nine different targets – including two Tesla attempts. On the first day, it awarded $375,000 (and a Tesla Model 3) for 12 zero-day vulnerabilities discovered.

CISA Gets Proactive With New Pre-Ransomware Alerts

cyware Mar 25, 2023 Threat Intel & Info Sharing

By taking immediate action when receiving an early warning, organizations can reduce potential data loss, avoid impact on operations, and reduce financial impact and other detrimental consequences.

Cork-based Dope Security lands $16m investment

cyware Mar 25, 2023 Companies to Watch

The Series A funding round was led by Google Ventures (GV), with participation from existing investors Boldstart Ventures and Preface. The company plans to use some of the funding to expand its engineering team in Cork.

New Instagram scam uses fake SHEIN gift cards as lure

cyware Mar 25, 2023 Identity Theft, Fraud, Scams

This social media scam begins with a comment from a random account on a user’s post, which congratulates the victim saying they’re one of the 2023 lucky ones selected to receive a SHEIN gift card.

TikTok CEO got grilled by lawmakers from both parties on whether the Chinese-owned app can protect American privacy

cyware Mar 25, 2023 Govt., Critical Infrastructure

TikTok CEO Shou Zi Chew’s testimony did not seem to quell many concerns that lawmakers had about the company’s connections to China or the adequacy of its risk-mitigation plan, Project Texas.

Kroger Postal Prescription Services Files Notice of Data Breach Impacting 82,466 Consumers

cyware Mar 25, 2023 Breaches and Incidents

Upon discovering that sensitive consumer data was made available to an unauthorized party, Kroger Postal Prescription Services began to review the affected files to determine what information was compromised and which consumers were impacted.

Britive, which helps secure public clouds, lands $20.5M investment

cyware Mar 25, 2023 Companies to Watch

Led by Pelion Venture Partners with participation from Liberty Global Ventures, Crosslink Capital and One Way Ventures, the new brings Britive’s total raised to $36 million.

Pwn2Own Vancouver 2023 Day 2: Microsoft Teams, Oracle VirtualBox, and Tesla hacked

cyware Mar 25, 2023 Malware and Vulnerabilities

On the second day of Pwn2Own Vancouver 2023, the bug hunters demonstrated zero-day attacks against the Oracle VirtualBox virtualization platform, Microsoft Teams, Tesla Model 3, and the Ubuntu Desktop OS.

Cyberattack hits Spanish pharmaceutical company Alliance Healthcare

cyware Mar 25, 2023 Breaches and Incidents

The cyber incident began on March 17 and has led to a complete shutdown of the company’s website, billing systems, and ordering processes. During the first few days of the attack, the company remained at a standstill.

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

cyware Mar 25, 2023 Malware and Vulnerabilities

The package in question, named onyxproxy, was uploaded to PyPI on March 15, 2023, and comes with capabilities to harvest and exfiltrate credentials and other valuable data. It has since been taken down, but not before attracting 183 downloads.

Critical flaw in AI testing framework MLflow can lead to server and data compromise

cyware Mar 25, 2023 Malware and Vulnerabilities

The vulnerability found by Dan McInerney is tracked as CVE-2023-1177 and is rated 10 (critical) on the CVSS scale. It is described as a local and remote file inclusion (LFI/RFI) via the API.

Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

thehackernews Mar 25, 2023 Feed

Microsoft on Friday shared guidance to help customers discover indicators of compromise (IoCs) associated with a recently patched Outlook vulnerability. Tracked as CVE-2023-23397 (CVSS score: 9.8), the critical flaw relates to a case of privilege escalation that could be exploited to steal NT Lan Manager (NTLM) hashes and stage a relay attack without requiring any user interaction. "External

OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident

thehackernews Mar 25, 2023 Feed

OpenAI on Friday disclosed that a bug in the Redis open source library was responsible for the exposure of other users' personal information and chat titles in the upstart's ChatGPT service earlier this week. The glitch, which came to light on March 20, 2023, enabled certain users to view brief descriptions of other users' conversations from the chat history sidebar, prompting the company to

U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals

thehackernews Mar 25, 2023 Feed

In what's a case of setting a thief to catch a thief, the U.K. National Crime Agency (NCA) revealed that it has created a network of fake DDoS-for-hire websites to infiltrate the online criminal underground. "All of the NCA-run sites, which have so far been accessed by around several thousand people, have been created to look like they offer the tools and services that enable cyber criminals to

Cyber security aggregator - feeds history

Pwn2Own Vancouver 2023 Day 1: Windows 11 and Tesla hacked

CISA Gets Proactive With New Pre-Ransomware Alerts

Cork-based Dope Security lands $16m investment

New Instagram scam uses fake SHEIN gift cards as lure

TikTok CEO got grilled by lawmakers from both parties on whether the Chinese-owned app can protect American privacy

Kroger Postal Prescription Services Files Notice of Data Breach Impacting 82,466 Consumers

Britive, which helps secure public clouds, lands $20.5M investment

Pwn2Own Vancouver 2023 Day 2: Microsoft Teams, Oracle VirtualBox, and Tesla hacked

Cyberattack hits Spanish pharmaceutical company Alliance Healthcare

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

Critical flaw in AI testing framework MLflow can lead to server and data compromise

Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident

U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals

202020212022202320242025