Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for Microsoft January 20 ...

 Cyber News

Microsoft’s Patch Tuesday update for January 2025 patches 159 vulnerabilities, including eight zero-days, three of which are being actively exploited. The Microsoft January 2025 Patch Tuesday release note designated 17 of the 159 vulnerabilities as “exploitation more likely,” in addition to the three marked   show more ...  

“exploitation detected.” Hyper-V Vulnerabilities Under Attack There is little information on the three Elevation of Privilege vulnerabilities under active attack, which affect Windows Hyper-V NT Kernel Integration VSP. The researcher who reported the vulnerabilities remains anonymous. Attackers who successfully exploit the vulnerability could gain SYSTEM privileges, Microsoft noted. The three vulnerabilities are: CVE-2025-21333: A 7.8-severity Heap-Based Buffer Overflow vulnerability CVE-2025-21334: A 7.8-severity Use After Free vulnerability CVE-2025-21335: A 7.8-severity Use After Free vulnerability Other Zero-Days in January 2025 Patch Tuesday The other zero-days in the January 2025 Patch Tuesday update include: CVE-2025-21275: A 7.8-severity Windows App Package Installer Elevation of Privilege vulnerability that Microsoft has judged “less likely” to be exploited. CVE-2025-21308: A 6.5-rated Windows Themes Spoofing Vulnerability that affects systems with NTLM enabled. Microsoft credits Blaz Satler of 0patch by ACROS Security for the find. Microsoft notes that “An attacker would have to convince the user to load a malicious file onto a vulnerable system, typically by way of an enticement in an Email or Instant Messenger message, and then convince the user to manipulate the specially crafted file, but not necessarily click or open the malicious file.” CVE-2025-21186, CVE-2025-21366 and CVE-2025-21395 are 7.8-severity Microsoft Access Remote Code Execution vulnerabilities that Microsoft judges to be at lower risk of exploit. What may be most noteworthy about the vulnerabilities is that they’re attributed to the Unpatched.ai vulnerability discovery platform. Other High-Risk Microsoft Vulnerabilities The 17 vulnerabilities at greater risk for exploit but not under active attack include: CVE-2025-21189, CVE-2025-21219, CVE-2025-21268, CVE-2025-21328 and CVE-2025-21329: all are 4.3-severity MapUrlToZone Security Feature Bypass vulnerabilities CVE-2025-21210: a 4.2-severity Windows BitLocker Information Disclosure vulnerability CVE-2025-21269: a 4.3-rated Windows HTML Platforms Security Feature Bypass vulnerability CVE-2025-21292: an 8.8-severity Windows Search Service Elevation of Privilege vulnerability CVE-2025-21298: a 9.8-severity Windows OLE Remote Code Execution vulnerability CVE-2025-21299: a 7.1-rated Windows Kerberos Security Feature Bypass vulnerability CVE-2025-21309: an 8.1-rated Windows Remote Desktop Services Remote Code Execution vulnerability CVE-2025-21314: A 6.5-severity Windows SmartScreen Spoofing vulnerability CVE-2025-21315: A 7.8-rated Microsoft Brokering File System Elevation of Privilege vulnerability CVE-2025-21354, CVE-2025-21362 and CVE-2025-21365: 7.8-severity Microsoft Excel Remote Code Execution vulnerabilities CVE-2025-21364: a 7.8-rated Microsoft Excel Security Feature Bypass vulnerability. Other Patch Tuesday Releases: Fortinet, Ivanti and More Patch Tuesday isn’t limited to Microsoft, as the second Tuesday of each month also sees patch releases from many other vendors. Some of the other noteworthy updates coming out today include patches from Adobe, Fortinet, Ivanti, SAP, SonicWall and Zyxel. The blizzard of patch releases kept CISA busy too, as the agency added Hyper-V and Fortinet (CVE-2024-55591) vulnerabilities to its Known Exploited Vulnerabilities catalog.

image for Passwords 101: don ...

 Tips

Whenever youre asked to log in to an online service, verify your identity, or download a document through a link, youre usually required to enter your username and password. This is so common that most of us do it automatically without thinking twice. However, scammers can trick you into giving them passwords for your   show more ...  

email, government service websites, banking services, or social networks by mimicking the services login form on their own (third-party) website. Dont fall for it: only the email service itself can ask to verify your email password — no one else! The same applies to government services, banks, and social networks. To avoid becoming a victim of fraud, every time you enter a password, take a moment to check where exactly youre logging in, and what window is asking for your credentials. Three main scenarios are possible here — two are safe, one is fraudulent. Here they are. Safe scenarios for entering passwords Logging into your email, social network, or online service through the official website. This is the simplest scenario, but you need to make sure you are indeed on the legitimate site — with no errors in the URL. If youre accessing the online service by clicking a link in an email or from search results, carefully check the browsers address bar before entering your password. Make sure that both the service name and the site address are correct and match each other. Why is it so important to take an extra second to check? Creating phishing copies of legitimate sites is a favorite trick of scammers. A phishing sites address may be almost identical to the original, differing in just a letter or two (for example, the i letter might be replaced with an I), or use a different domain zone. Its also rather simple to create a link that appears to lead to a site but actually takes you somewhere else. Check it out for yourself: this link seems to lead to our blog kaspersky.com/blog but actually redirects you to our other blog — securelist.com. The image below shows examples of legitimate login pages for various services where you can safely enter your username and password. Examples of legitimate login pages for various services. Entering your credentials here is safe Logging in to a site using an auxiliary service. This is a convenient way to log in without creating additional passwords, commonly used for file storage services, collaboration tools, and so on. Auxiliary services are typically large email providers, social networks, or government service sites. The login button may say something like Continue with Google, Continue with Facebook, Continue with Apple, etc. When you click the button, another window opens belonging to the auxiliary service (Google, Facebook, Apple, etc.). It works like this: the external service verifies your identity and confirms this to the site youre logging in to. Its crucial to check the addresses in both windows: make sure that the pop-up window asking for your password really belongs to the auxiliary service you expected (Google, Facebook, Apple, etc.), and the main window really belongs to the legitimate site youre trying to log in to. In many cases, the pop-up window also indicates which site youll be logging in to. This auxiliary service mechanism allows you to enter the desired site without it ever seeing your password. Password verification takes place on the side of the auxiliary service (Google, Facebook, Apple, etc.). IT specialists call this login method single sign-on (SSO). Example of SSO login to eBay through an auxiliary service (Google) that verifies your password. Entering your credentials here is also safe Fraudulent scenario: password theft You receive an email or message with a login link, click it, and end up on a site that very closely resembles a legitimate email, social network, file-sharing, or e-signature service. The site asks you to log in to your account to prove your identity. To this end, youre prompted to enter your email and password for your email, government services site, banking service, or social network directly on this site. In this scenario, either theres no pop-up window from a legitimate service (such as the one in the previous case), or the additional window also belongs to some third-party site. This is a scam designed to steal your Look at the address bar: this is definitely not Netflix! Dont enter your credentials here! account password! Remember, a third-party site cant verify your password — it simply doesnt know it, and passwords are never shared between sites. How to protect yourself from password theft Carefully check the address of the site requesting your password. Only enter a password for a service on the official website of that service — nowhere else. Sometimes a separate window appears for entering a password. Make sure this window is a regular browser window where you can see the address bar and verify the address. Scammers can create lookalike sites with addresses that are hard to distinguish from real ones. To avoid falling into such a trap, use reliable anti-phishing protection on all devices and platforms. We recommend Kaspersky Premium, the winner of an anti-phishing test in 2024. An advanced protection method is to use a password manager for all your accounts. It verifies the actual page address, and will never enter your credentials on an unfamiliar site — no matter how convincing it looks.

image for Microsoft: Happy 202 ...

 Latest Warnings

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day” weaknesses that are already under active attack. Redmond’s inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since 2017.   show more ...  

Rapid7‘s Adam Barnett says January marks the fourth consecutive month where Microsoft has published zero-day vulnerabilities on Patch Tuesday without evaluating any of them as critical severity at time of publication. Today also saw the publication of nine critical remote code execution (RCE) vulnerabilities. The Microsoft flaws already seeing active attacks include CVE-2025-21333, CVE-2025-21334 and, you guessed it– CVE-2025-21335. These are sequential because all reside in Windows Hyper-V, a component that is heavily embedded in modern Windows 11 operating systems and used for security features including device guard and credential guard. Tenable’s Satnam Narang says little is known about the in-the-wild exploitation of these flaws, apart from the fact that they are all “privilege escalation” vulnerabilities. Narang said we tend to see a lot of elevation of privilege bugs exploited in the wild as zero-days in Patch Tuesday because it’s not always initial access to a system that’s a challenge for attackers as they have various avenues in their pursuit. “As elevation of privilege bugs, they’re being used as part of post-compromise activity, where an attacker has already accessed a target system,” he said. “It’s kind of like if an attacker is able to enter a secure building, they’re unable to access more secure parts of the facility because they have to prove that they have clearance. In this case, they’re able to trick the system into believing they should have clearance.” Several bugs addressed today earned CVSS (threat rating) scores of 9.8 out of a possible 10, including CVE-2025-21298, a weakness in Windows that could allow attackers to run arbitrary code by getting a target to open a malicious .rtf files, which are documents typically opened on Office applications like Microsoft Word. Microsoft has rated this flaw “exploitation more likely.” Bob Hopkins at Immersive Labs called attention to the CVE-2025-21311, a 9.8 “critical” bug in Windows NTLMv1 (NT LAN Manager version 1), an older Microsoft authentication protocol that is still used by many organizations. “What makes this vulnerability so impactful is the fact that it is remotely exploitable, so attackers can reach the compromised machine(s) over the internet, and the attacker does not need significant knowledge or skills to achieve repeatable success with the same payload across any vulnerable component,” Hopkins wrote. Kev Breen at Immersive points to an interesting flaw (CVE-2025-21210) that Microsoft fixed in its full disk encryption suite Bitlocker that the software giant has dubbed “exploitation more likely.” Specifically, this bug holds out the possibility that in some situations the hibernation image created when one closes the laptop lid on an open Windows session may not be fully encrypted and could be recovered in plain text. “Hibernation images are used when a laptop goes to sleep and contains the contents that were stored in RAM at the moment the device powered down,” Breen noted. “This presents a significant potential impact as RAM can contain sensitive data (such as passwords, credentials and PII) that may have been in open documents or browser sessions and can all be recovered with free tools from hibernation files.” Tenable’s Narang also highlighted a trio of vulnerabilities in Microsoft Access fixed this month and credited to Unpatched.ai, a security research effort that is aided by artificial intelligence looking for vulnerabilities in code. Tracked as CVE-2025-21186, CVE-2025-21366, and CVE-2025-21395, these are remote code execution bugs that are exploitable if an attacker convinces a target to download and run a malicious file through social engineering. Unpatched.ai was also credited with discovering a flaw in the December 2024 Patch Tuesday release (CVE-2024-49142). “Automated vulnerability detection using AI has garnered a lot of attention recently, so it’s noteworthy to see this service being credited with finding bugs in Microsoft products,” Narang observed. “It may be the first of many in 2025.” If you’re a Windows user who has automatic updates turned off and haven’t updated in a while, it’s probably time to play catch up. Please consider backing up important files and/or the entire hard drive before updating. And if you run into any problems installing this month’s patch batch, drop a line in the comments below, please. Further reading on today’s patches from Microsoft: Tenable blog SANS Internet Storm Center Ask Woody

 Cybercrime

Tennessee-based Mortgage Investors Group (MIG) did not outline how many customers were impacted by the attack but said they have hired a vendor to identify the affected individuals. The company said it expects to notify those customers directly once the process is completed in several weeks.

 Feed

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerability in question is CVE-2024-12686 (CVSS score: 6.6), a medium-severity bug that could

 Feed

What do identity risks, data security risks and third-party risks all have in common? They are all made much worse by SaaS sprawl. Every new SaaS account adds a new identity to secure, a new place where sensitive data can end up, and a new source of third party risk. Learn how you can protect this sprawling attack surface in 2025. What do identity risks, data security risks and third-party

 Feed

The Telegram-based online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least $24 billion in cryptocurrency, dwarfing the now-defunct Hydra to become the largest online illicit marketplace to have ever operated. The figures, released by blockchain analytics firm Elliptic, show that monthly inflows have increased by 51% since July 2024. Huione Guarantee, part

 Feed

Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public internet. "The campaign involved unauthorized administrative logins on management interfaces of firewalls, creation of new accounts, SSL VPN authentication through those accounts, and various other configuration changes," cybersecurity firm

 Feed

Russia-linked threat actors have been attributed to an ongoing cyber espionage campaign targeting Kazakhstan as part of the Kremlin's efforts to gather economic and political intelligence in Central Asia. The campaign has been assessed to be the work of an intrusion set dubbed UAC-0063, which likely shares overlap with APT28, a nation-state group affiliated with Russia's General Staff Main

 Feed

Microsoft has shed light on a now-patched security flaw impacting Apple macOS that, if successfully exploited, could have allowed an attacker running as "root" to bypass the operating system's System Integrity Protection (SIP) and install malicious kernel drivers by loading third-party kernel extensions. The vulnerability in question is CVE-2024-44243 (CVSS score: 5.5), a medium-severity bug

 Feed

New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a quirk in domain ownership to gain access to sensitive data. "Google's OAuth login doesn't protect against someone purchasing a failed startup's domain and   show more ...  

using it to re-create email accounts for former employees," Truffle Security co-founder and CEO Dylan Ayrey said

 AI

In episode 33 of The AI Fix, our hosts watch a robot fall over, ChatGPT demonstrates that it can't draw a watch face but it can fire a gun, a man without a traffic cone gets trapped in his Waymo taxi, Graham discovers what social robots are, and both hosts watch horrified as somebody rips a robot's face off.   show more ...  

Graham explains why Elon Musk has invented an “unhinged” version of Grok and every Tesla will soon come fitted with a built-in racist uncle, and Mark looks into the disturbing phenomenon of “alignment faking”. All this and much more is discussed in the latest edition of "The AI Fix" podcast by Graham Cluley and Mark Stockley.

 Cyber Security News

Source: www.darkreading.com – Author: PRESS RELEASE Today, CISA released the Cybersecurity Performance Goals Adoption Report to highlight how adoption of Cybersecurity Performance Goals (CPGs) benefits our nation’s critical infrastructure sectors. Originally released in October 2022, CISA’s CPGs are   show more ...  

voluntary practices that critical infrastructure owners can take to protect themselves against cyber threats.  This report is based on analysis of […] La entrada CISA Releases the Cybersecurity Performance Goals Adoption Report – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: PRESS RELEASE HONOLULU, Jan. 08, 2025 (GLOBE NEWSWIRE) — Krilla Kaleiwahea LLC (K2), a Native Hawaiian Organization leader in defense, technology, resilience, and workforce development for the U.S. federal government, is proud to announce its selection as a prime   show more ...  

contractor on the prestigious Navy SeaPort contract. This achievement underscores K2’s commitment to […] La entrada K2 Secures Navy SeaPort Next Generation Contract – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: www.darkreading.com – Author: PRESS RELEASE New York City, January 13, 2025 — Grupo Bimbo Ventures, the venture capital arm of Grupo Bimbo, the world’s leading baking company and a significant player in the snack industry, is pleased to announce a strategic investment in NanoLock Security, a   show more ...  

global leader in OT cybersecurity and management solutions for […] La entrada Grupo Bimbo Ventures Announces Investment in NanoLock Security – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Source: MAXSHOT.PL via Shutterstock NEWS BRIEF Microsoft’s Digital Crimes Unit is pursuing legal action to disrupt cybercriminals who create malicious tools that evade the security guardrails and guidelines of generative   show more ...  

AI (GenAI) services to create harmful content. According to an unsealed complaint in the Eastern […] La entrada Microsoft Cracks Down on Malicious Copilot AI Use – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 cloud

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Source: Everett Collection Historical via Alamy Stock Photo Multiple threat actors are actively targeting a recently disclosed maximum-severity security bug in the Aviatrix Controller centralized management platform for cloud networking. In   show more ...  

a worst-case scenario, the vulnerability, identified as CVE-2024-50603 (CVSS 10) could allow an unauthenticated remote adversary […] La entrada Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Elizabeth Montalbano, Contributing Writer Source: Bits and Splits via Shutterstock Attackers are targeting people interested in pirated and cracked software downloads by abusing YouTube and Google search results. Researchers from Trend Micro uncovered the activity on the   show more ...  

video-sharing platform, on which threat actors are posing as “guides” offering legitimate software installation […] La entrada Cyberattackers Hide Infostealers in YouTube Comments, Google Search Results – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Source: Photo Art Lucas via Alamy Stock Photo NEWS BRIEF Telefonica, the multinational telecommunications company headquartered in Madrid, has confirmed that its internal systems were breached by hackers, leading to the theft of   show more ...  

more than 236,000 lines of customer data and close to a half-million […] La entrada Telefonica Breach Exposes Jira Tickets, Customer Data – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Christopher Robinson Source: Wavebreakmedia Ltd FUS1407 via Alamy Stock Photo COMMENTARY As we move into 2025, open source software (OSS) remains central to digital innovation across industries. However, its widespread adoption brings heightened security challenges and   show more ...  

evolving regulatory demands. In the coming year, we expect a rise in targeted OSS supply […] La entrada The Shifting Landscape of Open Source Security – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 cryptocurrency

Source: www.bitdefender.com – Author: Graham Cluley A federal grand jury has indicted a 51-year-old church pastor on 26 counts of fraud, after allegedly using his position to deceive victims into investing in a cryptocurrency investment scam. That in itself would seem unusual, but what is even more bizarre is   show more ...  

that the the pastor alleged to […] La entrada Pastor’s “dream” crypto scheme alleged to be a multi-million dollar scam – Source: www.bitdefender.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 All things Heimdal

Source: heimdalsecurity.com – Author: Madalina Popovici COPENHAGEN, Denmark, and PARIS, France, January 13, 2025 — Heimdal, a top European cybersecurity company, is teaming up with Watsoft, a French IT distributor focused on Managed Service Providers (MSPs). This partnership will help MSPs in France deal with   show more ...  

today’s growing cybersecurity challenges by simplifying how they manage security […] La entrada Heimdal and Watsoft Team Up to Strengthen MSP Cybersecurity in France – Source: heimdalsecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Charles McFarland. The devastating wildfires sweeping through Southern California have left countless neighborhoods in ruins, forcing thousands to evacuate and destroying homes in their path. While many people across the nation are moved to support those affected, this goodwill   show more ...  

often becomes a target for opportunistic cybercriminals. McAfee researchers have discovered that […] La entrada Scammers Exploit California Wildfires: How to Stay Safe  – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Jasdev Dhaliwal. Private tech companies gather tremendous amounts of user data. These companies can afford to let you use social media platforms free of charge because it’s paid for by your data, attention, and time. Big tech derives most of its profits by selling your   show more ...  

attention to advertisers — a well-known business model. Various documentaries (like Netflix’s “The […] La entrada What Personal Data Do Companies Track? – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Cyber

Source: sec.cloudapps.cisco.com – Author: . Cisco ThousandEyes Endpoint Agent for MacOS and RoomOS Certificate Validation Vulnerability Medium CVE-2025-20126 CWE-295 Download CSAF Email Summary A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could   show more ...  

allow an unauthenticated, remote attacker to intercept or manipulate metrics information. This vulnerability exists because the […] La entrada Cisco ThousandEyes Endpoint Agent for MacOS and RoomOS Certificate Validation Vulnerability – Source:sec.cloudapps.cisco.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Five steps to increase your chances of being selected as a breakout session speaker at WE25. Source Views: 0 La entrada WE25 Call for Participation for Breakout Sessions Now Open! se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

In accordance with the The Society of Women Engineers Bylaws, Article XIII – AMENDMENT, this proposed bylaws amendment is being presented to the membership. The SWE Board of Directors will vote on these changes following the 45-day notice period. The amendment proposal contains the rationale and pro/con   show more ...  

considerations. B2520: Amend SWE Bylaws – Absolve Non-Strategic… […] La entrada Important Member Notice for Bylaws Amendment Now Available! se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following   show more ...  

vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2024-12686 (CVSS score of 6.6) The flaw is an […] La entrada U.S. CISA adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: securityaffairs.com – Author: Pierluigi Paganini FunkSec, a new ransomware group that attacked more than 80 victims in December 2024, was developed using AI tools. The FunkSec ransomware-as-a-service (RaaS) group has been active since late 2024, the gang published over 85 victims in December 2024. The   show more ...  

group likely used AI-based systems to quickly develop advanced […] La entrada Inexperienced actors developed the FunkSec ransomware using AI tools – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Stealthy credit card skimmer targets WordPress e-commerce sites, injecting malicious JavaScript into CMS database tables to evade detection. Sucuri researchers warn of a stealthy credit card skimmer campaign targeting WordPress e-commerce sites by   show more ...  

injecting malicious JavaScript into CMS database tables. The attackers hide the malicious code in the WordPress […] La entrada Credit Card Skimmer campaign targets WordPress via database injection – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: securityaffairs.com – Author: Pierluigi Paganini In December, Microsoft sued a group for creating tools to bypass safety measures in its cloud AI products. Microsoft filed a complaint with the Eastern District Court of Virginia against ten individuals for using stolen credentials and custom software to   show more ...  

breach computers running Microsoft’s Azure OpenAI services to generate […] La entrada Microsoft took legal action against crooks who developed a tool to abuse its AI-based services – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Access

Source: securityboulevard.com – Author: Kevin Sapp Managing identities is no longer limited to employees logging into applications. Modern enterprise environments include a growing number of non-human identities – workloads, containers, APIs, and other digital entities that interact autonomously. These   show more ...  

identities enable applications and services to communicate securely and reliably across dynamic, distributed environments. However, they also introduce […] La entrada Why Scalability Matters in Non-Human Identity and Access Management – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 BeyondTrust

Source: www.securityweek.com – Author: Ionut Arghire The US cybersecurity agency CISA is urging federal agencies to patch a second vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) enterprise solutions, based on evidence of active exploitation. Tracked as CVE-2024-12686, the   show more ...  

flaw is a medium-severity command injection issue that was discovered during BeyondTrust’s investigation […] La entrada CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.securityweek.com – Author: Eduard Kovacs A significant number of Ivanti VPNs are still exposed to attacks exploiting a recent vulnerability, and the UK domain registry Nominet has emerged as a victim of exploitation.  Ivanti recently released patches for its Connect Secure VPN appliances to address   show more ...  

CVE-2025-0282, a critical zero-day that allows remote, unauthenticated attackers […] La entrada Many Ivanti VPNs Still Unpatched as UK Domain Registry Emerges as Victim of Exploitation – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Aviatrix

Source: www.securityweek.com – Author: Ionut Arghire Threat actors are exploiting a critical-severity remote code execution (RCE) vulnerability in Aviatrix Controller to deploy malware, cybersecurity firm Wiz reports. The issue, tracked as CVE-2024-50603 (CVSS score of 10/10), exists because user-supplied input   show more ...  

is not properly neutralized, allowing unauthenticated, remote attackers to inject arbitrary code that is executed […] La entrada Critical Aviatrix Controller Vulnerability Exploited Against Cloud Environments – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: www.securityweek.com – Author: Ionut Arghire Information stealer malware allowed threat actors to compromise the credentials of multiple Telefonica employees and access the telecommunication giant’s internal ticketing system. The data breach came to light last week, after members of the Hellcat   show more ...  

ransomware group (which previously claimed the attack on Schneider Electric) boasted on the BreachForums […] La entrada Infostealer Infections Lead to Telefonica Ticketing System Breach – Source: www.securityweek.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons Miscreants running a “mass exploitation campaign” against Fortinet firewalls, which peaked in December, may be using an unpatched zero-day vulnerability to compromise the equipment, according to security researchers who say they’ve observed   show more ...  

the intrusions. The team report the networking gear maker has yet to link the malicious activity to […] La entrada Miscreants ‘mass exploited’ Fortinet firewalls, ‘highly probable’ zero-day used – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cryptojacking

Source: go.theregister.com – Author: Connor Jones “Several cloud deployments” are already compromised following the disclosure of the maximum-severity vulnerability in Aviatrix Controller, researchers say. CVE-2024-50603 leads to remote code execution (RCE) and default deployments of Aviatrix   show more ...  

Controller in AWS allow for privilege escalation, making it especially dangerous. That threat is compounded by the fact that […] La entrada Cryptojacking, backdoors abound as fiends abuse Aviatrix Controller bug – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons Microsoft has sued a group of unnamed cybercriminals who developed tools to bypass safety guardrails in its generative AI tools. The tools were used to create harmful content, and access to the tools were sold as a service to other miscreants. The lawsuit,   show more ...  

filed in December in a US […] La entrada Microsoft sues ‘foreign-based’ cyber-crooks, seizes sites used to abuse AI – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Azure

Source: go.theregister.com – Author: Iain Thomson Microsoft’s multi-factor authentication (MFA) for Azure and Microsoft 365 (M365) was offline for four hours during Monday’s busy start for European subscribers. “Multi-Factor Authentication (MFA) may prevent users from accessing some Microsoft   show more ...  

365 (M365) and Azure Apps,” the software giant said referencing an OP978247 incident report. “User impact: Users […] La entrada Azure, Microsoft 365 MFA outage locks out users across regions – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Brandon Vigliarolo Sweden has committed to sending naval forces into the Baltic Sea following yet another suspected Russian attack on underwater cables in the region. The deployment of three warships and a surveillance airplane from NATO’s newest member to assist the   show more ...  

bloc’s attempts to prevent more subsea cable sabotage marks Sweden’s […] La entrada NATO’s newest member comes out swinging following latest Baltic Sea cable attack – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons A new ransomware crew dubbed Codefinger targets AWS S3 buckets and uses the cloud giant’s own server-side encryption with customer provided keys (SSE-C) to lock up victims’ data before demanding a ransom payment for the symmetric AES-256 keys   show more ...  

required to decrypt it. Halcyon threat hunters say they first spotted […] La entrada Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.schneier.com – Author: Bruce Schneier It was created in 1973 by Peter Kirstein: So from the beginning I put password protection on my gateway. This had been done in such a way that even if UK users telephoned directly into the communications computer provided by Darpa in UCL, they would require a   show more ...  

password. In […] La entrada The First Password on the Internet – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.troyhunt.com – Author: Troy Hunt TL;DR — Email addresses in stealer logs can now be queried in HIBP to discover which websites they’ve had credentials exposed against. Individuals can see this by verifying their address using the notification service and organisations monitoring domains can   show more ...  

pull a list back via a new API. Nasty stuff, stealer […] La entrada Experimenting with Stealer Logs in Have I Been Pwned – Source: www.troyhunt.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-01
Aggregator history
Tuesday, January 14
WED
THU
FRI
SAT
SUN
MON
TUE
JanuaryFebruaryMarch