Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for How cybercriminals s ...

 Privacy

Taking place every year on March 8 in many countries across the world, International Womens Day is celebrated differently depending on the country: in some its a national holiday; in others its not a holiday but still widely observed. But whats the same everywhere is that its a day when everyones eyes are on women   show more ...  

from all walks of life; and when I write everyones, that includes scammers eyes too. The feverish days running up to March 8 (ordering this, buying that – and all in good time, but not too early if were talking fresh flowers) provide a perfect opportunity for cybercriminals to make money, so they triple-down on sending links to fake sites, generating countless fake promotional codes, and making false promises of valuable gifts for every purchase. In this post, we discuss ways in which women can protect themselves from falling prey to these scams. Fake marketplace gifts Statistics show that women are far more likely to shop at online marketplaces than men: 43 percent against 32 percent. Thus, women are more likely to be targeted by promotions that appear in dazzling quantities ahead of any public holiday. Sadly, these campaigns arent always legal and run by the brands whose names are used in sending out unprecedentedly generous offers. For several years in a row, shortly before March 8, young women receive WhatsApp messages purportedly from Amazon and offering a valuable gift: Welcome to the Amazon International Womens Day Giveaway! We have more than 10,000 free gifts! To participate, the recipient is asked to follow a link and fill out a quick survey, and then share the message with a few dozen friends and verify their identity through email. Needless to say, respondents get no fancy smartphones, hair dryers, or laptops. Instead, according to security researchers, victims devices may have been compromised, with the scammers getting access to the camera, microphone, banking apps, contacts, and gallery. In fact, some brands do employ instant messaging services and email to spread promotional offers, and Amazon is no exception. So, if you receive such a message, start by carefully scanning it: suspicious generosity, grammatical errors, an odd senders address, and an urgent call to follow a link while it still lasts may be a sign that its a scam. Remember the rules for safe online shopping and use reliable security to be confident youre following a link to an official website — not a fake. Flowers for our regular customers! The tradition of giving women flowers on March 8 dates back to 1946, when Italian womens rights activists chose the yellow mimosa as a symbol of resilience, sustained growth, and solidarity. Young women still get flowers from their friends and family every March 8. Scammers exploit this sweet tradition too. On the eve of International Womens Day, scammers promise to send women flowers, while the recipient women, they say, will only need to pay for delivery. If a woman agrees, she receives a payment link in an instant messaging app. To no ones surprise, after following all the instructions, the victim gets no flowers, and the florist shops phone number turns out to be somehow unavailable. The whole story is a typical delivery scam, which weve written about earlier. Losses in this case include both the cost of delivery and the bank card details, which can later be used to steal far larger sums. Heres a golden rule for you if you want to avoid being scammed: never pay for a gift. After all, it should be free because its a gift. If a florist shop, nail salon, or spa decides to be nice and send you flowers all of a sudden, make sure they dont charge you for this. Anything you say can be used against you You must have heard the Miranda warning in movies: Anything you say can be used against you…. Well, its just as true for digital life as it is for real life. Were talking about doxers. These are people who collect any and all information available about their potential victims — information the victims themselves have published — and threaten to make it public. This type of threat is known as doxing. Young women are especially defenseless before doxers. A malicious actor can use data on the victim for catfishing: creating a fake online identity with the victims name, face, and other personal details to set up further scams on social networks and in dating services. The least they can do is harass you with text messages, phone calls, fake deliveries, or even swatting. Popular streamer Amouranth, with more than 6.3 million Twitch followers, says she gets swatted several times a month. Streamer Wolfabelle experienced a different kind of doxing: a stalker found out her address and threatened to publish it unless she gave him sexual favors. She even received a photo of her house made by the doxer to prove he wasnt bluffing. On a positive note, this isnt something you cant prevent. In a nutshell, heres what you should do: avoid sharing your geolocation, publish only a minimum of information that can appear in online searches, or make your social profiles private. If youve already been a victim of doxing, please refer to our other post. Celebrating March 8 safely Keep your eyes open when accepting promotional offers. Gifts and giveaways are nice, but as soon as they ask you to pay or share the link with your friends, thats when you know youre dealing with scammers. Avoid clicking suspicious links in instant messages. Please read our detailed anti-phishing tips and remember that malicious actors become more active in the run-up to and during holidays. Publish your personal details in private social profiles only. This life hack will go at least some way toward keeping you safe from doxing. Remember to carefully select followers and friends who can view your profile details. Use comprehensive security that keeps you from visiting phishing and scam sites, protects your payment and personal details, and prevents identity theft.

image for Transatlantic Cable ...

 News

Episode 336 of the Transatlantic Cable Podcast begins with news that Tumblr and WordPress are set to begin selling user data for AI training. From there the team talk about METAs decision to begin helping assist the EU in combatting fake news and disinformation on their platforms. To wrap up, the team talk about   show more ...  

LockBits resurgence and a truly bizarre Wi-Fi password scanning tool. If you liked what you heard, please consider subscribing. Tumblr, WordPress Announce User Data Sales for AI Training Meta unveils team to combat disinformation and AI harms in EU elections Back from the dead: LockBit taunts cops, threatens to leak Trump docs Cybersecurity enthusiast collects Wi-Fi passwords using homemade device

image for Alarm Over WordPress ...

 Firewall Daily

WordPress, a widely used content management system that powers millions of websites around the world, has become a source of concern following the discovery of an alleged zero-day vulnerability. This WordPress zero-day exploit, which is capable of compromising websites, has raised concerns about broad security flaws   show more ...  

among website owners and cybersecurity professionals alike. According to a dark web post, a threat actor has advertised the sale of a purported WordPress zero-day exploit compromising approximately 110,000 websites. Priced at $10,000, the alleged exploit purportedly allows the attacker to upload a file to the affected websites, potentially granting unauthorized access and control. Description of the WordPress Zero-day Exploit The message, disseminated on dark web forums, boasts the capabilities of the exploit, describing it as an “Autoshell” that can execute arbitrary PHP files on vulnerable WordPress installations. The seller claims that the exploit will output a list of URLs of compromised websites, offering it for a negotiable price, albeit insisting on cryptocurrency payments only. Source: Daily Dark Web This revelation comes hot on the heels of a similar incident in February 2024, where an anonymous threat actor announced the sale of a WordPress Admin Authentication Bypass Exploit for $100,000. The previous exploit, reportedly tested on WordPress versions ranging from WP6.3 to WP6.4.3, underscored the growing sophistication of cyber threats targeting popular content management systems. The Cyber Express has contacted WordPress to verify the reported Zero-Day Vulnerability, pending confirmation, casting uncertainty on the claims made on the dark web. WordPress Concerns and Analysis  Following these developments, cybersecurity researchers expressed concern about the possible impact of such attacks on the security ecosystem. MalwareBytes Labs, in particular, has discovered instances of WordPress sites infected with ad fraud plugins, such as the infamous Fuser master WordPress plugin. These plugins, while ostensibly designed to boost website traffic through legitimate means, have been exploited by cybercriminals to engage in fraudulent activities. By automatically generating fake traffic and interactions, these plugins deceive advertisers and inflate website metrics, posing a significant threat to the integrity of online advertising ecosystems. The discovery of backdoored WordPress sites highlights the need for heightened vigilance and proactive cybersecurity measures among website owners and administrators. With cyber threats evolving at an unprecedented pace, organizations must stay abreast of emerging vulnerabilities and implement enhanced security protocols to safeguard their digital assets. In response to these developments, cybersecurity experts emphasize the importance of regular security audits, software updates, and vigilant monitoring of website activity. Additionally, fostering a culture of cybersecurity awareness and education is essential in mitigating the risks posed by evolving cyber threats. As the digital world continues to evolve, the dark web remains a fertile breeding ground for cybercriminal activity, with threat actors leveraging sophisticated exploits to exploit vulnerabilities in popular platforms like WordPress. Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

 Expert Blogs and Opinion

Regularly updating software, enforcing rate limits, and funneling logs to an SIEM solution are essential steps to maintain the security of API integrations and uncover security issues on time.

 New Cyber Technologies

The tool will be able to determine whether video content has been artificially generated using AI technology in about five to 10 minutes. Police said the software has an 80% probability of detecting whether a video is authentic.

 Expert Blogs and Opinion

Despite obstacles like time constraints and lack of expertise, regular and thorough cyber maturity assessments based on established frameworks are crucial for businesses of all sizes to enhance their security posture and resilience.

 Malware and Vulnerabilities

The North Korea-based Kimsuky APT is abusing ScreenConnect bugs, CVE-2024-1708 and CVE-2024-1709, to propagate a new malware called ToddleShark. ToddlerShark uses polymorphic traits, legitimate Microsoft binaries, and registry modifications to establish persistence and gather sensitive information from infected   show more ...  

devices.  With a concerted effort to prioritize security updates, organizations can safeguard their systems and data against cyberattacks.

 Trends, Reports, Analysis

The surge in online job scams, targeting job seekers for personal information, has seen a significant increase in reported incidents, with a 545% spike in January 2024 compared to December 2023, according to the Identity Theft Resource Center (ITRC).

 Security Products & Services

RiskInDroid is an open-source tool for analyzing the risk level of Android applications using machine learning. Unlike other tools, RiskInDroid conducts reverse engineering on apps to extract permissions and assess their usage in the bytecode.

 Trends, Reports, Analysis

The rise of GenAI, along with cloud applications, has made it challenging to monitor and protect critical data. As a result, organizations are concerned about the impact of AI on sensitive data and struggle to comply with data protection laws.

 Feed

Ubuntu Security Notice 6681-1 - Wenqing Liu discovered that the f2fs file system implementation in the Linux kernel did not properly validate inode types while performing garbage collection. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of   show more ...  

service. It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly handle certain error conditions during device registration. A local attacker could possibly use this to cause a denial of service.

 Feed

Debian Linux Security Advisory 5636-1 - Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.

 Feed

Xingyuan Mo discovered that the netfilter subsystem in the Linux kernel did not properly handle inactive elements in its PIPAPO data structure, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. It was discovered   show more ...  

that the IGMP protocol implementation in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. Various other issues were also addressed.

 Feed

Ubuntu Security Notice 6680-1 - 黄思聪 discovered that the NFC Controller Interface implementation in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service. It was   show more ...  

discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.

 Feed

GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant   show more ...  

to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.

 Feed

Red Hat Security Advisory 2024-1203-03 - The components for Red Hat OpenShift for Windows Containers 9.0.1 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Issues addressed include a privilege escalation vulnerability.

 Feed

Red Hat Security Advisory 2024-1195-03 - An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.

 Feed

Red Hat Security Advisory 2024-1194-03 - An update is now available for Red Hat JBoss Enterprise Application Platform 8.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System base score, which gives a detailed severity rating, is available for   show more ...  

each vulnerability from the CVE link in the References section. Issues addressed include denial of service and file overwrite vulnerabilities.

 Feed

Red Hat Security Advisory 2024-1193-03 - An update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System base score, which gives a detailed   show more ...  

severity rating, is available for each vulnerability from the CVE link in the References section. Issues addressed include denial of service and file overwrite vulnerabilities.

 Feed

Red Hat Security Advisory 2024-1192-03 - An update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System base score, which gives a detailed   show more ...  

severity rating, is available for each vulnerability from the CVE link in the References section. Issues addressed include denial of service and file overwrite vulnerabilities.

 Press Release

Cyble, a leading force in AI-based cybersecurity, proudly announces its inclusion in Forbes’ prestigious list of America’s Best Startup Employers for 2024. This recognition underscores Cyble’s commitment to fostering a dynamic and supportive workplace culture while driving innovation in the   show more ...  

cybersecurity industry.  Forbes’ America’s Best Startup Employers list recognizes companies that excel in employee satisfaction, secure critical funding, show growth potential, and foster a positive workplace environment. Cyble’s inclusion on this list underscores its commitment to cultivating a talented team and offering them ample opportunities for professional growth and development.  “We are thrilled to be recognized by Forbes as one of America’s Best Startup Employers,” noted Beenu Arora, Co-founder and CEO of Cyble.   He added, “At Cyble, our employees are our greatest asset, and we are committed to creating a collaborative and inclusive workplace where they can thrive. This recognition is a testament to the hard work and dedication of our team members who continue to drive our success.”  Cyble’s innovative approach to cybersecurity has propelled the company to the forefront of the industry, earning accolades from both clients and industry experts alike. By leveraging advanced AI technology and cutting-edge methodologies, Cyble helps organizations identify and mitigate cybersecurity threats before they escalate, empowering them to safeguard their digital assets and maintain a competitive edge in today’s rapidly evolving threat landscape.  Manish Chachada, Co-founder and COO of Cyble, commented, “Our team stands as our ultimate competitive edge. We prioritize our employees’ well-being and professional growth, ensuring they have the resources and support required for excellence. This prestigious recognition from Forbes reaffirms our unwavering commitment to cultivating a culture of excellence and innovation at Cyble.”  In addition to its innovative solutions and commitment to employee satisfaction, Cyble is dedicated to giving back to the community and promoting diversity and inclusion within the cybersecurity industry. Through initiatives such as mentorship programs and community outreach events, Cyble is working to create a more inclusive and equitable workplace for all.  As Cyble continues to grow and expand its presence in the cybersecurity market, the company remains focused on its core values of integrity, innovation, and excellence. By prioritizing the needs of its employees and clients alike, Cyble is poised to achieve even greater success in the years to come.  Cyble is leading the way in advancing AI and ML-driven solutions to improve accuracy and reporting. As we enter our next growth phase, we are intensifying our focus on accelerating R&D initiatives. This includes advancing our threat intelligence portfolio with Cyble Vision and Cyble Hawk, both powered by AI for Cyber Threat Intelligence and Investigation. Additionally, we are expanding globally and forging strong partnerships with Cyble Odin and AmIBreached to bolster our cybersecurity capabilities.  About Cyble:  Cyble, a trailblazer in Cyber Threat Intelligence, is committed to democratizing Dark Web Threat Intelligence through advanced AI and Machine Learning solutions. Recognized as one of the most sought-after workplaces, Cyble’s culture fosters innovation, collaboration, and professional growth. With a proven track record in delivering cutting-edge research and proactive monitoring, Cyble stands at the forefront of the cybersecurity landscape. Headquartered in Atlanta, Georgia, and with a global presence spanning Australia, Malaysia, Singapore, Dubai, Saudi Arabia, and India, Cyble is the trusted authority empowering organizations to proactively combat evolving cyber threats.  Media Contact: Cyble Inc enquiries@cyble.com Ph: +1 678 379 3241 

 Feed

Threat actors have been leveraging fake websites advertising popular video conferencing software such as Google Meet, Skype, and Zoom to deliver a variety of malware targeting both Android and Windows users since December 2023. “The threat actor is distributing Remote Access Trojans (RATs) including SpyNote RAT for Android platforms, and NjRAT and DCRat for Windows

 Feed

The U.S. Department of Justice (DoJ) announced the indictment of a 38-year-old Chinese national and a California resident of allegedly stealing proprietary information from Google while covertly working for two China-based tech companies. Linwei Ding (aka Leon Ding), a former Google engineer who was arrested on March 6, 2024, "transferred sensitive Google trade secrets and other confidential

 Feed

Facebook messages are being used by threat actors to a Python-based information stealer dubbed Snake that’s designed to capture credentials and other sensitive data. “The credentials harvested from unsuspecting users are transmitted to different platforms such as Discord, GitHub, and Telegram,” Cybereason researcher Kotaro Ogino said in a technical report. Details about the campaign&

 Feed

Threat actors are conducting brute-force attacks against WordPress sites by leveraging malicious JavaScript injections, new findings from Sucuri reveal. The attacks, which take the form of distributed brute-force attacks, “target WordPress websites from the browsers of completely innocent and unsuspecting site visitors,” security researcher Denis Sinegubko said. The activity is part of a&

 Feed

The China-linked threat actor known as Evasive Panda orchestrated both watering hole and supply chain attacks targeting Tibetan users at least since September 2023. The end of the attacks is to deliver malicious downloaders for Windows and macOS that deploy a known backdoor called MgBot and a previously undocumented Windows implant known as Nightdoor. The findings come from ESET, which

 Feed

In today's rapidly evolving SaaS environment, the focus is on human users. This is one of the most compromised areas in SaaS security management and requires strict governance of user roles and permissions, monitoring of privileged users, their level of activity (dormant, active, hyperactive), their type (internal/ external), whether they are joiners, movers, or leavers, and more.  Not

 Data loss

Is there any truth behind the alleged data breach at Fortnite maker Epic Games? Who launched the ransomware attack that caused a fallout at pharmacies? And what’s the latest on the heart-breaking hack of Finnish therapy clinic Vastaamo? All this and much much more is discussed in the latest edition of the   show more ...  

“Smashing Security” podcast … Continue reading "Smashing Security podcast #362: Ransomware fraud, pharmacy chaos, and suicide"

 Business email compromise

If you have been optimistically daydreaming that losses attributed to cybercrime might have reduced in the last year, it's time to wake up. The FBI's latest annual Internet Crime Complaint Center (IC3) report has just been published, and makes for some grim reading. Read more in my article on the Tripwire State of Security blog.

 Cyber Security News

Source: www.schneier.com – Author: Bruce Schneier The Washington Post is reporting on the FBI’s increasing use of push notification data—”push tokens”—to identify people. The police can request this data from companies like Apple and Google without a warrant. The investigative technique goes back   show more ...  

years. Court orders that were issued in 2019 to Apple and Google […] La entrada Surveillance through Push Notifications – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.proofpoint.com – Author: 1 Proofpoint, a leading cybersecurity and compliance company, released its tenth annual State of the Phish report, revealing that more than two-thirds (68%) of employees knowingly put their organizations at risk, potentially leading to ransomware or malware infections, data   show more ...  

breaches, or financial loss. And while the incidence of successful phishing attacks […] La entrada 68 Percent of Employees Willingly Gamble with Organizational Security – Source: www.proofpoint.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: William Penfield Last month, we unveiled our Active ASPM Platform which includes our newest feature, no-code automation workflows. OX has established itself as a frontrunner in automating the discovery, analysis, and prioritization of security risks throughout the entire   show more ...  

software supply chain, earning recognition as a Gartner Cool Vendor in platform engineering […] La entrada Say Goodbye to Manual AppSec Overhead: Unleashing the Power OX’s Automated No-Code Workflows – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: cyberwire Paris, France, March 7th, 2024, Cyberwire Company Open Sources FHE Libraries to Build Privacy-Preserving Blockchain and AI Applications for the First Time. Investment secured to bring Fully Homomorphic Encryption (FHE) to the fore, giving developers the ability   show more ...  

to address data privacy challenges across blockchain and AI use cases. Zama, an […] La entrada Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: madhav API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action madhav Thu, 03/07/2024 – 04:56 APIs (Application Programming Interfaces) are the backbone of modern digital innovation. They drive seamless connectivity, enable rapid   show more ...  

development, and power countless business-critical applications. Yet, amidst this accelerated adoption of APIs […] La entrada API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 authentication

Source: securityboulevard.com – Author: Axiad In a recent blog post, we discussed what phishing-resistant multi-factor authentication (MFA) is and why it matters. In this post, we discuss how organizations should go about adopting unphishable authentication. According to Axiad’s 2023 State of Authentication   show more ...  

Survey, 49% of respondents said phishing is the most likely attack to happen. […] La entrada How to Adopt Phishing-Resistant MFA – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Blog

Source: securityboulevard.com – Author: The Constella Team IoT’s (Internet of Things) rapid development has unleashed a powerful digital transformation, shifting the way corporations operate and serve customers. In 2020, the IoT market was valued at $310 billion and is expected to reach over $1,840 billion by   show more ...  

2028. While digitization has significantly grown, so has the […] La entrada How Does Identity Theft Affect Your Business? – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Blog

Source: securityboulevard.com – Author: The Constella Team There’s a rising trend of domain disputes, possibly due to a new tactic called cybersquatting. Attackers wait for a business’s domain name to expire so they can buy it for themselves, keeping companies from being able to use their own names for   show more ...  

their websites. Registration status is important […] La entrada What Is Domain Monitoring and Why Do I Need It? – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 alphv

Source: securityboulevard.com – Author: Jeffrey Burt Healthcare providers groups are ramping up pressure on the federal government, lawmakers, and UnitedHealth Group to help hospitals, healthcare clinics, and pharmacies that have gone more than two weeks without payments following the devastating ransomware   show more ...  

attack on Change Healthcare, a UnitedHealth company. Meanwhile, notorious ransomware-as-a-service (RaaS) group BlackCat – […] La entrada Healthcare Groups Push for Help in Wake of Ransomware Attack on Change – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Blog

Source: securityboulevard.com – Author: Paul Asadoorian One time while attending a conference and getting ready to hop in an Uber (although it may have been a cab at the time), I was passing my luggage to be loaded in the vehicle. Perhaps it was the Las Vegas heat, coupled with being exhausted after a long   show more ...  

[…] La entrada Protecting Rugged Gear from UEFI Threats and Secure Boot Vulnerabilities – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BLEEPINGCOMPUTER

Source: www.bleepingcomputer.com – Author: Bill Toulas FBI’s Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, which recorded a 22% increase in reported losses compared to 2022, amounting to a record of $12.5 billion. The number of relevant complaints submitted to the FBI   show more ...  

in 2023 reached 880,000, 10% higher than the previous […] La entrada FBI: U.S. lost record $12.5 billion to online crime in 2023 – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini CISA adds Apple iOS and iPadOS memory corruption bugs to its Known Exploited Vulnerabilities Catalog U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple iOS and iPadOS memory corruption vulnerabilities to its Known Exploited   show more ...  

Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited […] La entrada CISA adds Apple iOS and iPadOS memory corruption bugs to its Known Exploited Vulnerabilities Catalog – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apache Hadoop

Source: securityaffairs.com – Author: Pierluigi Paganini Linux Malware targets misconfigured misconfigured Apache Hadoop, Confluence, Docker, and Redis servers A new Linux malware campaign campaign is targeting misconfigured Apache Hadoop, Confluence, Docker, and Redis instances. Researchers from Cado Security   show more ...  

observed a new Linux malware campaign targeting misconfigured Apache Hadoop, Confluence, Docker, and Redis instances. The threat […] La entrada Linux Malware targets misconfigured misconfigured Apache Hadoop, Confluence, Docker, and Redis servers – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini CISA ADDS ANDROID PIXEL AND SUNHILLO SURELINE BUGS TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Android Pixel and Sunhillo SureLine vulnerabilities to its Known Exploited Vulnerabilities   show more ...  

catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) […] La entrada CISA ADDS ANDROID PIXEL AND SUNHILLO SURELINE BUGS TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks Researchers warn that the cybercrime groups GhostSec and Stormous have joined forces in a new ransomware campaign. The GhostSec and Stormous ransomware gang are jointly   show more ...  

conducting a ransomware campaign targeting various organizations in multiple countries, Cisco Talos reported. GhostSec […] La entrada Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apple

Source: securityaffairs.com – Author: Pierluigi Paganini Apple emergency security updates fix two new iOS zero-days Apple released emergency security updates to address two new iOS zero-day vulnerabilities actively exploited in the wild against iPhone users. Apple released emergency security updates to address   show more ...  

two iOS zero-day vulnerabilities, respectively tracked as CVE-2024-23225 and CVE-2024-23296, that were exploited […] La entrada Apple emergency security updates fix two new iOS zero-days – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini VMware urgent updates addressed Critical ESXi Sandbox Escape bugs VMware released urgent patches to address critical ESXi sandbox escape vulnerabilities in the ESXi, Workstation, Fusion and Cloud Foundation products Virtualization giant VMware released   show more ...  

urgent updates to fix critical ESXi sandbox escape vulnerabilities in the ESXi, Workstation, Fusion, and Cloud […] La entrada VMware urgent updates addressed Critical ESXi Sandbox Escape bugs – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini US Gov sanctioned Intellexa Consortium individuals and entities behind Predator spyware attacks The U.S. government sanctioned two individuals and five entities linked to the development and distribution of the Predator spyware used to target Americans.   show more ...  

Today, the Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced actions […] La entrada US Gov sanctioned Intellexa Consortium individuals and entities behind Predator spyware attacks – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini CISA ADDS MICROSOFT WINDOWS KERNEL BUG USED BY LAZARUS APT TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Microsoft Windows Kernel vulnerability to its Known Exploited Vulnerabilities   show more ...  

catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2024-21338 (CVSS Score 7.8) Microsoft Windows Kernel Exposed […] La entrada CISA ADDS MICROSOFT WINDOWS KERNEL BUG USED BY LAZARUS APT TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityaffairs.com – Author: Pierluigi Paganini Experts disclosed two severe flaws in JetBrains TeamCity On-Premises software Two new security flaws in JetBrains TeamCity On-Premises software can allow attackers to take over affected systems. Rapid7 researchers disclosed two new critical security   show more ...  

vulnerabilities, tracked as CVE-2024-27198 (CVSS score: 9.8) and CVE-2024-27199 (CVSS score:7.3), in JetBrains TeamCity On-Premises. An attacker can […] La entrada Experts disclosed two severe flaws in JetBrains TeamCity On-Premises software – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 cyber

Source: www.darkreading.com – Author: David Strom Source: Delphotos via Alamy Stock Photo After US election integrity and security took center stage as a political football after the 2020 Presidential race, the Cybersecurity and Infrastructure Security Agency (CISA) is doing what it can to dispel security   show more ...  

concerns around this year’s trip to the polls. CISA officials said […] La entrada How CISA Fights Cyber Threats During Election Primary Season – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Elizabeth Montalbano, Contributing Writer Source: Piotr Malczyk via Alamy Stock Photo A 20-year-old Trojan resurfaced recently with new variants that target Linux and impersonate a trusted hosted domain to evade detection. Researchers from Palo Alto Networks spotted a new   show more ...  

Linux variant of the Bifrost (aka Bifrose) malware that uses a deceptive […] La entrada Linux Variants of Bifrost Trojan Evade Detection via Typosquatting – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 business

Source: www.darkreading.com – Author: Kit Merker Source: Kiyoshi Takahase Segundo via Alamy Stock Photo COMMENTARY Artificial intelligence (AI) is challenging our preexisting ideas of what’s possible with technology. AI’s transformative potential could upend a variety of diverse tasks and business   show more ...  

scenarios by applying computer vision and large vision models (LVMs) to usher in a new […] La entrada Don’t Give Your Business Data to AI Companies – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 China-Linked

Source: www.darkreading.com – Author: Robert Lemos, Contributing Writer Source: China Rokas Tenys via Shutterstock A targeted watering-hole cyberattack linked to a Chinese threat group infected visitors to a Buddhism festival website and users of a Tibetan language translation application. The cyber-operations   show more ...  

campaign by the so-called Evasive Panda hacking team began September 2023 or earlier and […] La entrada China-Linked Cyber Spies Blend Watering Hole, Supply Chain Attacks – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Source: Kiyoshi Takahase Segundo via Alamy Stock Photo COMMENTARY Cybersecurity leaders are constantly on the hunt for tools and strategies to navigate the complex landscape of digital threats. But despite consistently being held accountable for safeguarding digital assets,   show more ...  

chief information security officers (CISOs) have long grappled with a glaring deficiency in […] La entrada CISO Sixth Sense: NIST CSF 2.0’s Govern Function – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Source: rafapress via Shutterstock Researchers have spotted a concerted cyber compromise campaign targeting cloud servers running vulnerable instances of Apache Hadoop, Atlassian Confluence, Docker, and Redis. The attackers are dropping a   show more ...  

cryptomining tool, but also installing a Linux-based reverse shell that would allow potential future targeting and […] La entrada Cloud-y Linux Malware Rains on Apache, Docker, Redis & Confluence – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Dark Reading Staff Source: Ryan McGinnis via Alamy Stock Photo Fidelity Investments Life Insurance Company (FILI) is notifying nearly 30,000 affected individuals of a third-party data breach that has compromised their information. According to a notice filed with the state   show more ...  

of Maine, third-party service provider Infosys McCamish (IMS) notified Fidelity in […] La entrada First BofA, Now Fidelity: Same Vendor Behind Third-Party Breaches – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: PRESS RELEASE COLUMBUS, Ohio — February 29, 2024: Veeam® Software, the #1 leader by market share in Data Protection and Ransomware Recovery, today announced the new Veeam Data Cloud, which is built on Microsoft Azure and delivers the confidence and reliability of the   show more ...  

industry’s leading platform with the ease and accessibility of […] La entrada Veeam Launches Veeam Data Cloud – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Apple

Source: www.darkreading.com – Author: Tara Seals, Managing Editor, News, Dark Reading Source: mauritius images GmbH via Alamy Stock Photo Apple has released emergency security updates to fix two critical iOS zero-day vulnerabilities that cyberattackers are actively using to compromise iPhone users at the kernel   show more ...  

level. According to Apple’s security bulletin released March 5, the memory-corruption […] La entrada Patch Now: Apple Zero-Day Exploits Bypass Kernel Security – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2024-03
Aggregator history
Thursday, March 07
FRI
SAT
SUN
MON
TUE
WED
THU
MarchAprilMay