Oktacron - Cyber Security RSS Feeds History

LeapXpert Banks $22M Funding to Secure Corporate Messaging With Consumer Apps

cyware Apr 01, 2023 Companies to Watch

The company said the Series A financing was led by Rockefeller Asset Management through its Technology Ventures Group with equity investments from Uncorrelated Ventures, the Partnership Fund for New York City.

Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!

cyware Apr 01, 2023 Malware and Vulnerabilities

The flaw, described as a case of broken access control, impacts versions 3.11.6 and earlier. It was addressed by the plugin maintainers in version 3.11.7 released on March 22.

Update: 10-year-old Windows bug with 'opt-in' fix exploited in 3CX attack

cyware Apr 01, 2023 Malware and Vulnerabilities

A 10-year-old Windows vulnerability is still being exploited in attacks to make executables appear legitimately signed, with the fix from Microsoft still "opt-in" after all these years. Even worse, the fix is removed after upgrading to Windows 11.

New Cylance Ransomware Targets Linux and Windows, Warn Researchers

cyware Apr 01, 2023 Malware and Vulnerabilities

Researchers at Palo Alto Networks Unit 42 discovered the new Cylance ransomware, which has already claimed several victims. Researchers noticed it early Friday morning, and further probing revealed that it is targeting Linux and Windows devices.

SCADAfence raises $16 million, adds Fujitsu and Mitsubishi Electric as new investors

cyware Apr 01, 2023 Companies to Watch

This new funding round will enable SCADAfence to continue scaling its global reach into new markets, increasing sales and support teams in key regions, and building stronger collaborative relationships with its strategic partners.

Ransomware Roundup – Dark Power and PayMe100USD Ransomware

cyware Apr 01, 2023 Malware and Vulnerabilities

Dark Power is a relatively new ransomware written in the Nim programming language and launched in early February 2023. PayMe100USD is a new ransomware written in Python that was discovered in March 2023.

Operation Henhouse: Hundreds of arrests and millions in assets seized in month tackling fraud

cyware Apr 01, 2023 Incident Response, Learnings

The NCA’s National Economic Crime Centre has led a successful operation working closely with the City of London Police and other policing partners against suspected fraudsters across the UK.

15 million public-facing services vulnerable to CISA KEV flaws

cyware Apr 01, 2023 Trends, Reports, Analysis

This massive number is reported by cybersecurity company Rezilion, which conducted large-scale research to identify vulnerable systems exposed to cyberattacks from threat actors, whether state-sponsored or ransomware gangs.

Italy Temporarily Blocks ChatGPT Over Privacy Concerns

cyware Apr 01, 2023 Laws, Policy, Regulations

Italy is temporarily blocking the artificial intelligence software ChatGPT in the wake of a data breach as it investigates a possible violation of stringent European Union data protection rules, the government’s privacy watchdog said Friday.

Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation

thehackernews Apr 01, 2023 Feed

Critical security flaws in Cacti, Realtek, and IBM Aspera Faspex are being exploited by various threat actors in hacks targeting unpatched systems. This entails the abuse of CVE-2022-46169 (CVSS score: 9.8) and CVE-2021-35394 (CVSS score: 9.8) to deliver MooBot and ShellBot (aka PerlBot), Fortinet FortiGuard Labs said in a report published this week. CVE-2022-46169 relates to a critical

Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!

thehackernews Apr 01, 2023 Feed

Unknown threat actors are actively exploiting a recently patched security vulnerability in the Elementor Pro website builder plugin for WordPress. The flaw, described as a case of broken access control, impacts versions 3.11.6 and earlier. It was addressed by the plugin maintainers in version 3.11.7 released on March 22. "Improved code security enforcement in WooCommerce components," the

Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps

thehackernews Apr 01, 2023 Feed

Microsoft has patched a misconfiguration issue impacting the Azure Active Directory (AAD) identity and access management service that exposed several "high-impact" applications to unauthorized access. "One of these apps is a content management system (CMS) that powers Bing.com and allowed us to not only modify search results, but also launch high-impact XSS attacks on Bing users," cloud security

Cyber security aggregator - feeds history

LeapXpert Banks $22M Funding to Secure Corporate Messaging With Consumer Apps

Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!

Update: 10-year-old Windows bug with 'opt-in' fix exploited in 3CX attack

New Cylance Ransomware Targets Linux and Windows, Warn Researchers

SCADAfence raises $16 million, adds Fujitsu and Mitsubishi Electric as new investors

Ransomware Roundup – Dark Power and PayMe100USD Ransomware

Operation Henhouse: Hundreds of arrests and millions in assets seized in month tackling fraud

15 million public-facing services vulnerable to CISA KEV flaws

Italy Temporarily Blocks ChatGPT Over Privacy Concerns

Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation

Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!

Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps

202020212022202320242025