Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history

 Malware and Vulnerabilities

In a briefing at Black Hat Asia, Shmuel Cohen, security researcher at SafeBreach, described how he not only reverse-engineered and cracked into the company's signature Cortex product but also weaponized it to deploy a reverse shell and ransomware.

 Feed

Palo Alto Networks has shared more details of a critical security flaw impacting PAN-OS that has come under active exploitation in the wild by malicious actors. The company described the vulnerability, tracked as CVE-2024-3400 (CVSS score: 10.0), as "intricate" and a combination of two bugs in versions PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 of the software. "In

 Feed

Users of the CrushFTP enterprise file transfer software are being urged to update to the latest version following the discovery of a security flaw that has come under targeted exploitation in the wild. "CrushFTP v11 versions below 11.1 have a vulnerability where users can escape their VFS and download system files," CrushFTP said in an advisory released Friday.

 Alarming

Source: www.infosecurity-magazine.com – Author: 1 A new study by CyberSN warns that the overall number of cybersecurity job postings in the US decreased by 22% from 2022 to 2023. The cyber job platform provider added that this decline is alarming and could impact national security, as some of these roles are   show more ...  

essential for maintaining organizational […] La entrada Alarming Decline in Cybersecurity Job Postings in the US – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Akira

Source: www.infosecurity-magazine.com – Author: 1 The Akira ransomware group has generated around $42m in proceeds in the period from March 2023 to January 2024, according to a joint advisory from Europol and US and Dutch government agencies. The ransomware-as-a-service (RaaS) actor is believed to have impacted   show more ...  

over 250 organizations across North America, Europe and Australia […] La entrada Akira Ransomware Group Rakes in $42m, 250 Organizations Impacted – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini MITRE revealed that nation-state actors breached its systems via Ivanti zero-days The MITRE Corporation revealed that a nation-state actor compromised its systems in January 2024 by exploiting Ivanti VPN zero-days. In April 2024, MITRE disclosed a   show more ...  

security breach in one of its research and prototyping networks. The security team […] La entrada MITRE revealed that nation-state actors breached its systems via Ivanti zero-days – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 APT

Source: securityaffairs.com – Author: Pierluigi Paganini FBI chief says China is preparing to attack US critical infrastructure China-linked threat actors are preparing cyber attacks against U.S. critical infrastructure warned FBI Director Christopher Wray. FBI Director Christopher Wray warned this week that   show more ...  

China-linked threat actors are preparing an attack against U.S. critical infrastructure, Reuters reported. According […] La entrada FBI chief says China is preparing to attack US critical infrastructure – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 8base ransomware

Source: securityaffairs.com – Author: Pierluigi Paganini United Nations Development Programme (UNDP) investigates data breach The United Nations Development Programme (UNDP) has initiated an investigation into an alleged ransomware attack and the subsequent theft of data. The United Nations Development   show more ...  

Programme (UNDP) is investigating an alleged ransomware attack that resulted in data theft. The United Nations Development […] La entrada United Nations Development Programme (UNDP) investigates data breach – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.databreachtoday.com – Author: 1 Artificial Intelligence & Machine Learning , Governance & Risk Management , Next-Generation Technologies & Secure Development But Accurate Data Doesn’t Always Result In Accurate Outcomes Akshaya Asokan (asokan_akshaya) • April 19, 2024     The   show more ...  

U.K. Information Commissioner’s Office is proving the relationship between how generative AI is used and […] La entrada UK ICO Weighs Role of ‘Accuracy’ in Generative AI – Source: www.databreachtoday.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.databreachtoday.com – Author: 1 Thank you for registering with ISMG Complete your profile and stay up to date Need help registering? Contact Support Original Post url: https://www.databreachtoday.com/webinars/live-webinar-modernizing-identity-management-from-legacy-systems-to-w-5537 Category &   show more ...  

Tags: – La entrada Live Webinar | Modernizing Identity Management: From Legacy Systems to Cutting-Edge Security – Source: www.databreachtoday.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.databreachtoday.com – Author: 1 Cybercrime , Fraud Management & Cybercrime ‘GhostR’ Claims to Have 5.3 Million Records from Major Screening Database Chris Riotta (@chrisriotta) • April 19, 2024     A hacker is threatening to publish data from the World-Check know-your-customer   show more ...  

database owned by the London Stock Exchange Group. (Image: Shutterstock) A hacker who […] La entrada Hacker Threatens to Expose Sensitive World-Check Database – Source: www.databreachtoday.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.databreachtoday.com – Author: 1 Governance & Risk Management , Incident & Breach Response , Patch Management Threat Actor Exploited Ivanti Zero-Day Vulnerabilities in Cyberattack Chris Riotta (@chrisriotta) • April 19, 2024     Hackes got into an unclassified Mitre network by using   show more ...  

Ivanti Connect Secure zero-day vulnerabilities. (Image: Shutterstock) Mitre, a federally funded research […] La entrada Mitre Says Hackers Breached Unclassified R&D Network – Source: www.databreachtoday.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.databreachtoday.com – Author: 1 Identity & Access Management , Security Operations , Video How Ping-ForgeRock Merger Provides Enhanced Deployment Flexibility, More Services Michael Novinson (MichaelNovinson) • April 19, 2024     Andre Durand, founder and CEO, Ping Identity (Image: Ping   show more ...  

Identity) Andre Durand, founder and CEO, Ping Identity (Image:Ping Identity) The Ping Identity-ForgeRock merger […] La entrada CEO Andre Durand on Why Ping, ForgeRock Are Better Together – Source: www.databreachtoday.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.schneier.com – Author: Bruce Schneier HomeBlog Comments Jerome • April 19, 2024 8:20 PM @Clive Robinson RE Bondi Junction incident. I guess its an internationally known location thus making news in your fair Albion. Thank you very much for making the effort to express your kindness, care and   show more ...  

consideration. Which is of course a […] La entrada Friday Squid Blogging: Squid Trackers – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.cyberdefensemagazine.com – Author: Stevin By Rigo Van den Broeck, Executive Vice President, Cyber Security Product Innovation at Mastercard Cybercrime is set to cost $10.3 trillion worldwide by 2025, and it’s growing fast. It’s a multi-pronged mutating threat that excels at evading detection.   show more ...  

But left unchecked, it can pose major systemic risks to critical infrastructure. […] La entrada The Importance of Cyber Hygiene for Businesses – Source: www.cyberdefensemagazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Anton Chuvakin Vaguely relevant but very cyber image from Dall-E One pattern I spotted after looking at the evolution of IT and security organizations over the years, including my time at Gartner is: change is hard, but transformation is harder. Perhaps it is an IT   show more ...  

Axiom of some sort, with a Theorem I […] La entrada Baby ASO: A Minimal Viable Transformation for Your SOC – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Jeffrey Burt The takedown this week of a massive phishing-as-a-service (PhaaS) operation spanned law enforcement agencies from both sides of the Atlantic and is the latest example of an increasingly aggressive approach by authorities to disrupt the operations of   show more ...  

high-profile cybercriminal gangs. Agencies from 19 countries participated in the operation against […] La entrada LabHost Phishing Platform is Latest Target of International Law Agencies – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Analytics & Intelligence

Source: securityboulevard.com – Author: Shriram Sharma Security operations centers (SOCs) are the front lines in the battle against cyber threats. They use a diverse array of security controls to monitor, detect, and swiftly respond to any cyber menace.These controls are essential for keeping information   show more ...  

systems safe around the clock. Modern SOCs in large organizations handle […] La entrada Choosing SOC Tools? Read This First [2024 Guide] – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Marc Handelman Authors/Presenters: *Sina Sajadmanesh, Ali Shahin Shamsabadi, Aurélien Bellet, Daniel Gatica-Perez* Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access.   show more ...  

Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel. Permalink *** […] La entrada USENIX Security ’23 – GAP: Differentially Private Graph Neural Networks with Aggregation Perturbation – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Kaustubh Jagtap Author:  Kaustubh Jagtap, Product Marketing Director, SafeBreach On April 18th, the United States’ Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Europol’s European Cybercrime Centre (EC3), and the   show more ...  

Netherlands’ National Cyber Security Centre (NCSC-NL) issued an urgent advisory about Akira ransomware’s recently exhibited malicious behavior (as […] La entrada SafeBreach Coverage for AA24-109A (Akira Ransomware) – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Compliance

Source: securityboulevard.com – Author: Brian Robertson The newest version of the European Union Network and Information Systems directive, or NIS2, came into force in January 2023. Member States have until October 2024 to transpose it into their national law. One of the most critical changes with NIS2 is the   show more ...  

schedule for reporting a cybersecurity breach.  […] La entrada Taking Time to Understand NIS2 Reporting Requirements – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Marc Handelman via the inimitable Daniel Stori at Turnoff.US! Permalink *** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: http://turnoff.us/geek/linux-wc/ Original Post URL:   show more ...  

https://securityboulevard.com/2024/04/daniel-storis-wc/ Category & Tags: Humor,Security Bloggers Network,Daniel Stori,Sarcasm,satire,turnoff.us – Humor,Security Bloggers Network,Daniel Stori,Sarcasm,satire,turnoff.us La entrada Daniel Stori’s ‘WC’ – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Marc Handelman Security Bloggers Network  Home » Security Bloggers Network » USENIX Security ’23 – Inductive Graph Unlearning by Marc Handelman on April 19, 2024 Authors/Presenters: *Cheng-Long Wang, Mengdi Huai, Di Wang* Many thanks to USENIX for publishing their   show more ...  

outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to […] La entrada USENIX Security ’23 – Inductive Graph Unlearning – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 API security

Source: securityboulevard.com – Author: Natalia Kazankova Security testing allows you to evaluate the robustness of applications and systems and identify potential weaknesses that attackers may exploit. DAST and fuzzing are two popular, important, and proven security testing methods. DAST (dynamic application   show more ...  

security testing) searches for security vulnerabilities and weaknesses by executing the application, whilst fuzz […] La entrada From DAST to dawn: why fuzzing is better solution | Code Intelligence – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CISA

Source: securityboulevard.com – Author: David Lindner, Director, Application Security Insight #1 One of the most significant errors an organization can make is assuming they are not a target. This belief is especially prevalent among small and medium-sized businesses (SMBs), and it represents a dangerous   show more ...  

oversight. An estimated 69% of SMBs reported experiencing at least one […] La entrada Cybersecurity Insights with Contrast CISO David Lindner | 4/19/24 – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2024-04
Aggregator history
Saturday, April 20
MON
TUE
WED
THU
FRI
SAT
SUN
AprilMayJune