Oktacron - Cyber Security RSS Feeds History

Transatlantic Cable podcast, episode 316 | Kaspersky official blog

kaspersky Sep 28, 2023 News

The latest episode of the Transatlantic Cable kicks off with talk around the crypto-exchange, JPEX and how theyre being investigated by local authorities. From there, discussion turns to an AI enabled backpack from Microsoft (yes, really), Spotify refusing to ban A.I generated music and fake celebrity nudes are being show more ...

used to promote a popular shopping site. If you liked what you heard, please consider subscribing. Hong Kong investigates influencer-backed crypto exchange Microsoft patents bizarre AI-powered backpack Spotify will not ban AI-made music, says boss Fake celebrity photo leak videos flood TikTok with Temu referral codes

Q&A: UK Ambassador on Creating New Cybersecurity Agencies Around the World

darkreading Sep 28, 2023 Feed

How the UK is assisting other nations in forming their own versions of a National Centre for Cybersecurity (NCSC).

Looking Beyond the Hype Cycle of AI/ML in Cybersecurity

darkreading Sep 28, 2023 Feed

Artificial intelligence and machine learning aren't yet delivering on their cybersecurity promises. How can we close the gaps?

A Preview of Windows 11’s Passkeys Support

darkreading Sep 28, 2023 Feed

The latest update to Windows 11 introduces support for passkeys, which provide phishing-resistant passwordless authentication.

CAPTCHAs Easy for Humans, Hard for Bots

darkreading Sep 28, 2023 Feed

Proton is aiming for the sweet spot between security, privacy, and accessibility with its CAPTCHA.

7 Ways SMBs Can Secure Their WordPress Sites

darkreading Sep 28, 2023 Feed

This Tech Tip outlines seven easy fixes small and midsize businesses can use to prevent the seven most common WordPress vulnerabilities.

Johnson Controls International Disrupted by Major Cyberattack

darkreading Sep 28, 2023 Feed

The company filed with the SEC and is assessing its operations and financial damages.

Supply Chain Attackers Escalate With GitHub Dependabot Impersonation

darkreading Sep 28, 2023 Feed

Armed with stolen developer passcodes, attackers have checked in changes to repositories under the automation feature's name in an attempt to escape notice.

New Cisco IOS Zero-Day Delivers a Double Punch

darkreading Sep 28, 2023 Feed

The networking giant discloses new vulnerabilities the same day as warnings get issued that Cisco gear has been targeted in a Chinese APT attack.

4 Legal Surprises You May Encounter After a Cybersecurity Incident

darkreading Sep 28, 2023 Feed

Many organizations are not prepared to respond to all the constituencies that come knocking after a breach or ransomware incident.

Chrome Flags Third Zero-Day This Month That's Tied to Spying Exploits

darkreading Sep 28, 2023 Feed

So far this year, Google has disclosed six vulnerabilities that attackers were actively exploiting before the company had a patch for them.

Novel ZenRAT Scurries Onto Systems via Fake Password Manager Tool

darkreading Sep 28, 2023 Feed

Attackers exclusively target Windows users with an impersonation website that distributes information-stealing malware.

Google Releases Patch for Actively Exploited Zero-Day Vulnerability in Chrome

cyware Sep 28, 2023 Malware and Vulnerabilities

Tracked as CVE-2023-5217, the high-severity vulnerability has been described as a heap-based buffer overflow in the VP8 compression format in libvpx, a free software video codec library from Google and the Alliance for Open Media (AOMedia).

Threat Actors Exploit the Tensions Between Azerbaijan and Armenia

cyware Sep 28, 2023 Identity Theft, Fraud, Scams

A spearphishing campaign targeting management teams associated with an Azerbaijanian company exploits the conflict between Azerbaijan and Armenia, using malware disguised as an infected memo to gather basic computer information from its targets.

Researchers Release Details of New RCE Exploit Chain for SharePoint

cyware Sep 28, 2023 Malware and Vulnerabilities

Attackers can exploit a couple of vulnerabilities, tracked as CVE-2023-29357 and CVE-2023-24955, to gain admin privileges, execute arbitrary code, and potentially cause denial of service attacks or compromise sensitive data.

Firefox 118 Patches High-Severity Vulnerabilities

cyware Sep 28, 2023 Malware and Vulnerabilities

The vulnerabilities in Firefox include out-of-bounds write issues, memory leaks, use-after-free conditions, and memory corruption, which could potentially allow attackers to execute arbitrary code or cause crashes.

Gem Security Raises $23M for Its Cloud Security Platform

cyware Sep 28, 2023 Companies to Watch

The cloud security company raised $23 million in a Series A funding round led by GGV Capital, with participation from IBM Ventures, Team8, and Silicon Valley CISO Investments.

Chinese State-Sponsored BlackTech Hackers Caught Hiding in Cisco Router Firmware

cyware Sep 28, 2023 Threat Intel & Info Sharing

A Chinese state-sponsored APT called BlackTech has been caught hacking into network edge devices and using firmware implants to stay hidden and silently hop around the corporate networks of U.S. and Japanese multinational companies.

Chinese Hackers Stole Emails From US State Department in Microsoft Breach, Senate Staffer Says

cyware Sep 28, 2023 Govt., Critical Infrastructure

Chinese hackers breached Microsoft's email platform and stole tens of thousands of emails from U.S. State Department accounts, including those of officials working on Indo-Pacific diplomacy efforts.

Building Automation Giant Johnson Controls Hit by Dark Angels Ransomware Attack

cyware Sep 28, 2023 Breaches and Incidents

The ransomware gang, known as Dark Angels, has demanded a $51 million ransom and claimed to have stolen over 27 TB of corporate data from the network of Johnson Controls.

‘Snatch’ Ransom Group Exposes Visitor IP Addresses

cyware Sep 28, 2023 Malware and Vulnerabilities

The leaked data from Snatch's victim shaming site reveals that the group's darknet site attracts a significant number of visitors from Russia, potentially indicating their source of victims.

macOS 14 Sonoma Patches 60 Vulnerabilities

cyware Sep 28, 2023 Malware and Vulnerabilities

While some of these vulnerabilities can be exploited remotely by getting the targeted user to access a specially crafted website, a majority require the presence of a malicious app on the targeted device.

RICO Class-Action Data Privacy Lawsuit Filed Against H&R Block, Google, Meta

cyware Sep 28, 2023 Incident Response, Learnings

The suit claims that the companies violated data privacy laws by sharing customer tax return data without adequate disclosure, potentially creating targeted advertising dossiers.

Simple Membership Plugin Flaws Expose WordPress Sites

cyware Sep 28, 2023 Malware and Vulnerabilities

Two new security flaws in the popular Simple Membership plugin for WordPress, affecting versions 4.3.4 and below, have been identified, leading to potential privilege escalation issues.

Network Flight Simulator: Open-Source Adversary Simulation Tool

cyware Sep 28, 2023 Security Products & Services

The tool simulates various malicious traffic patterns, including DNS tunneling, DGA traffic, and requests to known active C2 destinations, to quantify and measure the coverage of existing detection tools.

Swan Retail Cyberattack Woes Continue for Independent UK Retailers

cyware Sep 28, 2023 Breaches and Incidents

The attacks have caused significant problems for retailers, with issues such as inventory management and order fulfillment still not resolved. Retailers have reported glitches and loss of sales due to the cyberattack.

Campbell Soup Says Summer Cyberattack Caused Limited Business Impact

cyware Sep 28, 2023 Incident Response, Learnings

The incident did not affect systems that connect with customers or suppliers, and the company is working with its insurer to make claims under its cyber insurance coverage.

Amid MGM, Caesars Incidents, Attackers Focus on Luxury Hotels

cyware Sep 28, 2023 Identity Theft, Fraud, Scams

The campaign targets luxury resorts and hotel chains, using reconnaissance emails and instant messages to trick employees into responding and downloading malicious files from trusted cloud domains.

Cybersecurity firm Lumu raises $30M to detect network intrusions

cyware Sep 28, 2023 Companies to Watch

Ricardo Villadiego, Lumu’s founder and CEO, says that the new cash will be put toward growing Lumu’s sales team in the U.S., supporting its go-to-market strategy, and increasing the startup’s investments in R&D.

Cannot Depend on Dependabot: Found Contributing Malicious Code

cyware Sep 28, 2023 Malware and Vulnerabilities

Threat actors meticulously fabricated commit messages to mimic Dependabot's automated contributions to mask the malevolent activities they were indulging in. Between July 8 and July 11, an unidentified threat actor began compromising a multitude of GitHub repositories, affecting both public and private sectors, show more ...

with a significant number of victims originating from Indonesia. The attackers skillfully manipulated commit messages, leading developers to believe that the real Dependabot had made these contributions.

New Marvin Attack Impacts 25-Year-Old PKCS#1 v1.5 Padding Scheme for RSA Key Exchange

cyware Sep 28, 2023 Malware and Vulnerabilities

The encryption method, known as PKCS#1 v1.5 padding scheme, was previously thought to be immune to attacks, but a new paper reveals that many software implementations of the scheme are actually vulnerable.

DHS to Host Latin American Cyber Summit as Region Faces an Onslaught of Digital Attacks

cyware Sep 28, 2023 Govt., Critical Infrastructure

The conference will discuss topics such as protecting critical infrastructure, ransomware, and the U.S. national cyber strategy, aiming to establish a long-lasting relationship with the region on cyber issues.

Misconfigured TeslaMate Instances Put Tesla Car Owners at Risk

cyware Sep 28, 2023 Breaches and Incidents

Improper configuration of third-party software like TeslaMate can result in privacy breaches, compromising the owner's daily routine and posing risks such as planned robberies.

Are Developers Giving Enough Thought to Prompt Injection Threats When Building Code?

cyware Sep 28, 2023 Expert Blogs and Opinion

Prompt injection attacks manipulate LLMs by introducing malicious commands into free text inputs, posing a significant threat to cybersecurity and potentially leading to unauthorized activities or data leaks.

Millions of Files With Potentially Sensitive Information Exposed Online, Researchers Say

cyware Sep 28, 2023 Trends, Reports, Analysis

A recent analysis by Censys has uncovered about 314,000 internet-connected devices and web servers that are exposing millions of files, potentially containing sensitive data.

CISA Rolls Dice on Public Service Campaign to Raise Cyber Awareness

cyware Sep 28, 2023 Security Culture

The Cybersecurity and Infrastructure Security Agency (CISA) has launched a national public service campaign called "Secure our World" to raise awareness of cybersecurity in local communities.

SSH Keys Stolen by Stream of Malicious PyPI and npm Packages

cyware Sep 28, 2023 Malware and Vulnerabilities

The attackers utilized typosquatting and code modifications to trick developers into installing malicious packages and continuously refined their techniques to evade detection.

Caesars Entertainment Faces Class Action Lawsuits Following Rewards Database Hack

cyware Sep 28, 2023 Incident Response, Learnings

At least four separate plaintiffs allege the company was negligent for allowing their sensitive personal data to be stolen in a social engineering attack by criminal threat groups.

Russian Hackers Target Ukrainian Government Systems Involved in War Crimes Investigations

cyware Sep 28, 2023 Geopolitical, Terrorism

Ukrainian cybersecurity officials have reported that the recent espionage campaigns targeted entities involved in investigating war crimes, such as the prosecutor general's office and courts.

Unraveling the CACTUS Ransomware Group’s Recent Exploits

cyware Sep 28, 2023 Breaches and Incidents

The CACTUS ransomware group employs unique encryption techniques, including hiding the decryption key within a file named ntuser.dat, to evade detection by anti-virus software.

Cisco Warns Of IOS Software Zero-Day Exploitation Attempts

packetstormsecurity Sep 28, 2023 headline,hacker,flaw,cisco,zero day

Chinese Hackers Stole Emails From US State Dept In MS Breach

packetstormsecurity Sep 28, 2023 headline,government,privacy,email,usa,ch

Fake Bitwarden Site Distributes Novel RAT Malware

packetstormsecurity Sep 28, 2023 headline,malware,trojan,backdoor

Google Rushes To Patch New Zero-Day Exploited By Spyware Vendor

packetstormsecurity Sep 28, 2023 headline,hacker,phone,flaw,google,patch,

Right Wing Elon Scraps Tool To Report Electoral Fake News

packetstormsecurity Sep 28, 2023 headline,government,fraud,twitter

After Failing At Privacy Again, Google Is Working To Keep Bard Chats Out Of Search

packetstormsecurity Sep 28, 2023 headline,privacy,data loss,google

Red Hat Security Advisory 2023-5396-01

packetstormsecurity Sep 28, 2023 Feed

Red Hat Security Advisory 2023-5396-01 - Red Hat Data Grid is an in-memory, distributed, NoSQL datastore solution. It increases application response times and allows for dramatically improving performance while providing availability, reliability, and elastic scale. Data Grid 8.4.4 replaces Data Grid 8.4.3 and includes bug fixes and enhancements. Issues addressed include a denial of service vulnerability.

Ubuntu Security Notice USN-6369-2

packetstormsecurity Sep 28, 2023 Feed

Ubuntu Security Notice 6369-2 - USN-6369-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 18.04 LTS. It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image file, a remote show more ...

attacker could use this issue to cause libwebp to crash, resulting in a denial of service, or possibly execute arbitrary code.

Red Hat Security Advisory 2023-5379-01

packetstormsecurity Sep 28, 2023 Feed

Red Hat Security Advisory 2023-5379-01 - Network Observability 1.4.0. Issues addressed include a denial of service vulnerability.

Ubuntu Security Notice USN-6400-1

packetstormsecurity Sep 28, 2023 Feed

Ubuntu Security Notice 6400-1 - It was discovered that Python did not properly provide constant-time processing for a crypto operation. An attacker could possibly use this issue to perform a timing attack and recover sensitive information.

Red Hat Security Advisory 2023-5376-01

packetstormsecurity Sep 28, 2023 Feed

Red Hat Security Advisory 2023-5376-01 - Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. Issues addressed include a denial of service vulnerability.

Radiant Logic Announces Expanded Identity Analytics and Data Management Platform Capabilities

darkreading Sep 28, 2023 Feed

Fortinet Announces Formation of Veterans Program Advisory Council to Narrow the Cybersecurity Skills Gap With Military Veteran Talent

darkreading Sep 28, 2023 Feed

Netscout Identified Nearly 7.9M DDOS Attacks in the First Half of 2023

darkreading Sep 28, 2023 Feed

Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability

thehackernews Sep 28, 2023 Feed

Google on Wednesday rolled out fixes to address a new actively exploited zero-day in the Chrome browser. Tracked as CVE-2023-5217, the high-severity vulnerability has been described as a heap-based buffer overflow in the VP8 compression format in libvpx, a free software video codec library from Google and the Alliance for Open Media (AOMedia). Exploitation of such buffer overflow flaws can

China's BlackTech Hacking Group Exploited Routers to Target U.S. and Japanese Companies

thehackernews Sep 28, 2023 Feed

Cybersecurity agencies from Japan and the U.S. have warned of attacks mounted by a state-backed hacking group from China to stealthily tamper with branch routers and use them as jumping-off points to access the networks of various companies in the two countries. The attacks have been tied to a malicious cyber actor dubbed BlackTech by the U.S. National Security Agency (NSA), Federal Bureau of

The Dark Side of Browser Isolation – and the Next Generation Browser Security Technologies

thehackernews Sep 28, 2023 Feed

The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for protecting against browser exploits and malware downloads, it has become increasingly inadequate and insecure in today's SaaS-centric world. The limitations of Browser Isolation, such as degraded browser performance and inability to tackle

China-Linked Budworm Targeting Middle Eastern Telco and Asian Government Agencies

thehackernews Sep 28, 2023 Feed

Government and telecom entities have been subjected to a new wave of attacks by a China-linked threat actor tracked as Budworm using an updated malware toolset. The intrusions, targeting a Middle Eastern telecommunications organization and an Asian government, took place in August 2023, with the adversary deploying an improved version of its SysUpdate toolkit, the Symantec Threat Hunter Team,

GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot Contributions

thehackernews Sep 28, 2023 Feed

A new malicious campaign has been observed hijacking GitHub accounts and committing malicious code disguised as Dependabot contributions with an aim to steal passwords from developers. "The malicious code exfiltrates the GitHub project's defined secrets to a malicious C2 server and modify any existing javascript files in the attacked project with a web-form password-stealer malware code

Smashing Security podcast #341: Another T-Mobile breach, ThemeBleed, and farewell Naked Security

grahamcluley Sep 28, 2023 Data loss

Mix TikTok with facial recognition, and you've got a doxxing nightmare, T-Mobile users report bizarre behaviour in their accounts, and a Windows flaw provides a new means of infecting users. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Ransomware group demands $51 million from Johnson Controls after cyber attack

grahamcluley Sep 28, 2023 Data loss

Johnson Controls, a multinational conglomerate that secures industrial control systems, security equipment, fire safety and air conditioning systems, has been hit by a massive cyber attack. Read more in my article on the Hot for Security blog.

Cyber security aggregator - feeds history