Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for CISA Warns of Active ...

 Firewall Daily

The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities (KEV) Catalog by adding two critical vulnerabilities, both actively being exploited in the wild. These vulnerabilities, related to Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM),   show more ...  

have been identified as security risks to federal agencies and organizations worldwide. The vulnerabilities in question are CVE-2017-3066, a deserialization vulnerability affecting Adobe ColdFusion, and CVE-2024-20953, a similar vulnerability found within Oracle's Agile PLM. Deserialization vulnerabilities, such as these, occur when untrusted data is used by a program to reconstruct an object or other data structure. Malicious actors often exploit these flaws to execute arbitrary code, potentially compromising systems. CVE-2017-3066: Adobe ColdFusion Deserialization Vulnerability  CVE-2017-3066 refers to a Java deserialization vulnerability within the Apache BlazeDS library in Adobe ColdFusion. This vulnerability is particularly prevalent in older versions of ColdFusion, including ColdFusion 2016 Update 3 and earlier, ColdFusion 11 Update 11 and earlier, and ColdFusion 10 Update 22 and earlier. Adobe confirmed that the vulnerability could allow remote attackers to execute arbitrary code on the affected systems if successfully exploited.  For organizations running these older versions of Adobe ColdFusion, the risk is significant. Exploiting this deserialization vulnerability could enable attackers to gain unauthorized access to sensitive data or control over the affected systems. The vulnerability was discovered by Moritz Bechler of AgNO3 GmbH & Co. KG and was subsequently addressed by Adobe with security hotfixes. These updates mitigate the Java deserialization vulnerability by updating the Apache BlazeDS library, effectively patching the flaw.  Adobe issued hotfixes to resolve the issue, which are highly recommended for customers using vulnerable versions of ColdFusion. Users are advised to upgrade to ColdFusion 2016 Update 4, ColdFusion 11 Update 12, or ColdFusion 10 Update 23. These updates can be found in Adobe's technical notes, which also contain security configuration guidelines for enhancing system protection.  CVE-2024-20953: Oracle Agile PLM Deserialization Vulnerability  Another addition to the CISA catalog is CVE-2024-20953, a vulnerability found in Oracle’s Agile Product Lifecycle Management (PLM) system. Oracle published this vulnerability on February 17, 2024, and it affects Agile PLM version 9.3.6. This deserialization vulnerability is especially concerning, as it is easily exploitable by low-privileged attackers with network access via HTTP. Successful exploitation of CVE-2024-20953 could lead to the complete takeover of the Oracle Agile PLM system, giving attackers the ability to manipulate data, compromise confidentiality, integrity, and availability, and potentially cause severe operational disruptions.  With a CVSS (Common Vulnerability Scoring System) score of 8.8, this vulnerability is classified as high severity, impacting not only the confidentiality and integrity of the system but also its availability. Exploits targeting this vulnerability could result in disastrous consequences, especially in environments where Oracle Agile PLM plays a central role in managing supply chains, product lifecycles, and other critical business functions.  Oracle strongly urges users to apply available patches provided in their Critical Patch Update released in January 2024. As is the case with many security flaws, Oracle emphasizes the importance of keeping systems updated and recommends that customers ensure their installations are patched to prevent exploitation. Organizations using older or unsupported versions of Oracle Agile PLM are at heightened risk and should prioritize upgrading to more secure versions.  The Significance of Deserialization Vulnerabilities  Both CVE-2017-3066 and CVE-2024-20953 highlight the growing threat posed by deserialization vulnerabilities. These flaws allow attackers to inject malicious data into the deserialization process, enabling them to gain unauthorized access to systems, execute malicious code, or escalate their privileges. As demonstrated by both Adobe ColdFusion and Oracle Agile PLM, these types of vulnerabilities are widespread in various industries and software products.  Deserialization vulnerabilities are particularly dangerous because they often allow attackers to bypass traditional security defenses, such as input validation. Since these vulnerabilities are commonly exploited remotely, they represent a critical threat to both private and governmental organizations, particularly in environments that rely on enterprise-level solutions like ColdFusion or Agile PLM.  Conclusion  To mitigate the risks posed by CVE-2017-3066 and CVE-2024-20953, organizations must prioritize security best practices, such as regularly applying security patches provided by Adobe and Oracle, monitoring network traffic for suspicious activity, educating staff about safe practices, implementing strong access controls to protect sensitive data, and staying up-to-date with CISA’s Known Exploited Vulnerabilities Catalog. As cyberattacks continue to target industries, protecting systems from these vulnerabilities should be a top priority. By following these strategies, organizations can reduce the likelihood of exploitation and minimize potential damage from attacks on affected products like Adobe ColdFusion and Oracle Agile PLM.

image for New EU Sanctions Bla ...

 Firewall Daily

The Council of the European Union took decisive action to impose a new set of sanctions on Russia, with the aim of addressing threat to Ukraine's sovereignty. The sanctions were codified in Council Implementing Regulation (EU) 2025/389, which represents a new update to the Regulation (EU) No 269/2014.   These   show more ...  

restrictive measures are targeted at individuals and entities whose actions are directly contributing to Russia’s continued aggression and destabilization efforts in Ukraine. The European Council has emphasized that this regulatory update is part of the EU's broader strategy to isolate Russia economically and prevent further Russian encroachment in the region.  The Council of the European Union: Key Figures and Entities Sanctioned  A major aspect of the sanctions package includes the designation of individuals and organizations involved in supporting Russia’s military operations and information warfare efforts. Among those sanctioned is Lee Chang Ho, the 58-year-old head of North Korea’s Reconnaissance General Bureau (RGB), which is North Korea's intelligence agency.   Lee has been implicated in orchestrating cyberattacks, with notable involvement from the infamous Lazarus group, a hacker collective linked to North Korean state-sponsored cyber warfare operations. Lee's actions, including his coordination of cyberwarfare and battlefield strategy in Ukraine, directly contribute to undermining Ukraine's territorial integrity. He has reportedly overseen the deployment of North Korean personnel, including cyberattack units like Lazarus and Kimsuky, and has directed guerrilla-style military operations within Ukraine.  The sanctions imposed by the European Union target 48 individuals and 35 entities across various sectors, including military, business, and politics. The individuals identified include high-ranking military officials, business magnates, and politicians who are deeply intertwined with Russia’s military-industrial complex.  Sanctions on Military and Political Figures  The European Union's sanctions extend beyond business leaders to influential political and military figures, many of whom are directly connected to Russia’s unlawful annexation of Crimea and ongoing occupation of Ukrainian territories. Individuals like Yury Nimchenko, a Russian senator from Crimea, and Sergey Karyakin, a former chess Grandmaster turned Russian senator, are specifically named for their roles in advancing policies that threaten Ukraine’s sovereignty. These figures are part of a larger network that promotes Russian-backed separatist movements within Ukrainian territory.  The EU regulation also targets figures within Russia’s military-industrial complex, including Dmitry Lelikov, Deputy General Director of Rostec, a company that produces advanced Russian military hardware. Rostec has been integral to supplying military equipment for Russia’s ongoing conflict with Ukraine. The European Council's sanctions aim to cut off the financial and logistical support that these individuals provide to Russia’s war efforts.  Legal and Economic Implications  The sanctions outlined in Regulation (EU) 2025/389 are comprehensive and multifaceted. They impose asset freezes and travel bans, effectively isolating the sanctioned individuals and entities from accessing the European market and financial system. This makes it nearly impossible for those named to continue supporting or profiting from Russia’s destabilizing actions in Ukraine. These legal measures are binding across all EU member states, ensuring a unified response to Russian actions and further contributing to the Council of the European Union’s broader strategy of economic isolation.  Conclusion  The Council of the European Union sanctions, as outlined in Regulation (EU) 2025/389, represent a key element of the EU’s broader strategy to curtail Russia’s territorial ambitions and prevent further destabilization in Ukraine. By targeting individuals and entities involved in Russia’s military, defense, and political sectors, including those financing the war effort and supporting Russian encroachment, the EU aims to weaken Russia’s military-industrial complex and disrupt its ability to sustain the conflict.

image for SEC’s CETU: A Dedi ...

 Cyber News

The Securities and Exchange Commission (SEC) has announced the launch of the Cyber and Emerging Technologies Unit (CETU), a dedicated team focused on addressing cyber-related misconduct and safeguarding retail investors from fraudulent activities in the emerging technologies sector. This new unit, which will replace   show more ...  

the existing crypto assets and the cyber unit, will be led by Laura D’Allaird and consist of approximately 30 fraud specialists and attorneys from various SEC offices. Strengthening Investor Protection With cyber threats and financial fraud evolving rapidly, the SEC aims to enhance its ability to detect and reduce misconduct that exploits technological advancements. The CETU’s primary mission is to ensure that innovation within the financial sector does not come at the expense of investor protection and market integrity. “Under Laura’s leadership, this new unit will complement the work of the Crypto Task Force led by Commissioner Hester Peirce,” said Acting Chairman Mark T. Uyeda. “Importantly, the new unit will also allow the SEC to deploy enforcement resources judiciously. The unit will not only protect investors but will also facilitate capital formation and market efficiency by clearing the way for innovation to grow. It will root out those seeking to misuse innovation to harm investors and diminish confidence in new technologies.” Focus Areas of the CETU The CETU will leverage its team’s extensive expertise in financial technology (fintech) and cybersecurity to address various cyber-related risks and fraud schemes. The unit will concentrate its efforts on the following key areas: Fraud involving emerging technologies: The CETU will target scams that use artificial intelligence (AI), machine learning, and other advanced technologies to deceive investors and manipulate markets. Exploitation of social media, dark web, and fraudulent websites: Online platforms have become popular tools for fraudulent schemes. CETU will track and mitigate scams that rely on social media deception, dark web transactions, and misleading websites to lure unsuspecting investors. Hacking and illicit access to material nonpublic information: Cybercriminals who gain unauthorized access to confidential financial data and trade on insider information will face increased scrutiny and enforcement action. Takeovers of retail brokerage accounts: Unauthorized access to individual investors' brokerage accounts has become a growing concern. CETU will work to identify and prevent account hijacking incidents that result in financial losses. Blockchain and cryptocurrency fraud: With the rise of digital assets, the SEC remains committed to regulating and preventing fraudulent activities in the blockchain and crypto space. CETU will target Ponzi schemes, unregistered offerings, and deceptive practices involving crypto assets. Regulatory compliance of financial institutions: Ensuring that brokerage firms, investment advisors, and other regulated entities adhere to cybersecurity laws and best practices will be a core function of the unit. Public company disclosures on cybersecurity risks: The SEC will scrutinize disclosures by publicly traded companies to ensure they provide accurate and complete information about cybersecurity threats and incidents that may impact investors. The Need for a Stronger Cyber Enforcement Strategy The formation of CETU reflects the SEC’s growing focus on cyber threats that undermine investor confidence and market stability. Over the past decade, cybercriminals have increasingly used technology-driven methods to manipulate financial markets and exploit unsuspecting investors. By establishing this specialized unit, the SEC aims to stay ahead of evolving cyber risks and strengthen enforcement actions against fraudulent actors. The replacement of the Crypto Assets and Cyber Unit with CETU signals a broader approach that extends beyond cryptocurrency-related fraud. While crypto fraud remains a major concern, the SEC recognizes that cyber threats in the financial sector are not limited to digital assets. The CETU will cover a wider range of technological risks, ensuring that the SEC can address emerging fraud tactics effectively. Laura D’Allaird to Lead the CETU Laura D’Allaird, a highly experienced SEC official with a background in cybersecurity enforcement, will head the newly established unit. Her leadership is expected to bring a strategic vision that aligns with the SEC’s goal of maintaining investor protection while fostering responsible innovation in financial markets. D’Allaird’s appointment has been welcomed by industry experts, who emphasize the importance of experienced leadership in tackling sophisticated cyber threats. Her role will involve coordinating efforts across SEC offices, collaborating with other regulatory bodies, and ensuring that enforcement actions effectively deter cyber-related financial crimes. Implications for Investors and Market Participants The creation of CETU is a significant step toward enhancing investor protection in an increasingly digital financial landscape. Investors should expect increased scrutiny of online investment opportunities, particularly those involving AI-driven financial services, blockchain-based projects, and social media-driven trading schemes. For financial institutions and publicly traded companies, the CETU’s establishment highlights the need for strong cybersecurity measures and transparent disclosures. Compliance with SEC regulations will be critical, and firms may face heightened enforcement actions if they fail to meet cybersecurity requirements.

image for Malicious code in fa ...

 Threats

Can you imagine a world where, every time you wanted to go somewhere, you had to reinvent the wheel and build a bicycle from scratch? We cant either. Why reinvent something that already exists and works perfectly well? The same logic applies to programming: developers face routine tasks every day, and instead of   show more ...  

inventing their own wheels and bicycles (which might even be not up to par), they simply grab ready-made bicycles code from open-source GitHub repositories. This solution is available to anyone —  including criminals who use the worlds best free open-source code as bait for attacks. Theres plenty of evidence to back this up, and heres the latest: our experts have uncovered an active malicious campaign, GitVenom, targeting GitHub users. What is GitVenom? GitVenom is what we named this malicious campaign, in which unknown actors created over 200 repositories containing fake projects with malicious code: Telegram bots, tools for hacking the game Valorant, Instagram automation utilities, and Bitcoin wallet managers. At first glance, all the repositories look legitimate. Especially impressive is the well-designed README.MD file — a guide on how to work with the code — with detailed instructions in multiple languages. In addition to that, attackers added multiple tags to their repositories. Attackers used AI to write detailed instructions in multiple languages Another indicator reinforcing the apparent legitimacy of these repositories is the large number of commits. The attackers repositories have tons of them — tens of thousands. The attackers werent, of course, manually updating each of the 200 repositories to maintain authenticity, but simply used timestamp files that updated every few minutes. The combination of detailed documentation and numerous commits creates the illusion that the code is genuine and safe to use. GitVenom: Two years of activity The campaign started a long time ago: the oldest fake repository we found is about two years old. In the meantime, GitVenom has affected developers in Russia, Brazil, Turkey, and other countries. The attackers covered a wide range of programming languages: malicious code was found in Python, JavaScript, C, C#, and C++ repositories. Regarding the functionality of these projects, the features described in the README file didnt even match the actual code — in reality, the code doesnt do half of what it claims. But thanks to it, victims end up downloading malicious components. These include: A Node.js stealer that collects usernames and passwords, crypto wallet data, and browser history, packages the stolen data into a .7z archive, and sends it to the attackers through Telegram. AsyncRAT — an open-source remote administration Trojan, which can also function as a keylogger. Quasar — an open-source backdoor. A clipper that searches the clipboard for crypto wallet addresses and replaces them with attacker-controlled addresses. Notably, in November 2024, the hacker wallet used in this attack received a one-time deposit of about 5 BTC (approximately US$485,000 at the time of the study). You can read more about the details of this malicious campaign in our full research published on SecureList. How to protect yourself from malicious code on GitHub In short, the best defense is vigilance. Since over 100 million developers use GitHub, attackers will likely continue to spread malicious code through this popular platform. The only question is how theyll do it — a decade ago, no one imagined that attackers would be able to conduct campaigns like GitVenom for so long and with such persistence. Therefore, every developer should maintain their cybersecurity hygiene when working with GitHub. Analyze code before integrating it into an existing project. Use malware protection on both computers and smartphones. Check less obvious indicators carefully: contributor accounts, the number of stars (likes), and the project creation date. If the account was created three days ago, the repository two days ago, and it only has one star, theres a good chance the project is fake and the code is malicious. Dont download files from direct links to GitHub shared in chats, suspicious channels, or on unverified websites. If you find a suspicious repository, report it to GitHub — this could save others devices not protected with a Kaspersky Premium.

 Feed

Various industrial organizations in the Asia-Pacific (APAC) region have been targeted as part of phishing attacks designed to deliver a known malware called FatalRAT. "The threat was orchestrated by attackers using legitimate Chinese cloud content delivery network (CDN) myqcloud and the Youdao Cloud Notes service as part of their attack infrastructure," Kaspersky ICS CERT said in a Monday

 Feed

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws impacting Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities in question are listed below - CVE-2017-3066 (CVSS score: 9.8) - A deserialization vulnerability impacting

 Feed

The first quarter of 2025 has been a battlefield in the world of cybersecurity. Cybercriminals continued launching aggressive new campaigns and refining their attack methods. Below is an overview of five notable malware families, accompanied by analyses conducted in controlled environments. NetSupport RAT Exploiting the ClickFix Technique In early 2025, threat actors began exploiting a technique

 Feed

A large-scale malware campaign has been found leveraging a vulnerable Windows driver associated with Adlice's product suite to sidestep detection efforts and deliver the Gh0st RAT malware. "To further evade detection, the attackers deliberately generated multiple variants (with different hashes) of the 2.0.2 driver by modifying specific PE parts while keeping the signature valid," Check Point

 Feed

Cybersecurity researchers are calling attention to an ongoing campaign that's targeting gamers and cryptocurrency investors under the guise of open-source projects hosted on GitHub. The campaign, which spans hundreds of repositories, has been dubbed GitVenom by Kaspersky. "The infected projects include an automation instrument for interacting with Instagram accounts, a Telegram bot that enables

 Feed

Cybersecurity researchers have flagged an updated version of the LightSpy implant that comes equipped with an expanded set of data collection features to extract information from social media platforms like Facebook and Instagram. LightSpy is the name given to a modular spyware that's capable of infecting both Windows and Apple systems with an aim to harvest data. It was first documented in

 Feed

Opposition activists in Belarus as well as Ukrainian military and government organizations are the target of a new campaign that employs malware-laced Microsoft Excel documents as lures to deliver a new variant of PicassoLoader.  The threat cluster has been assessed to be an extension of a long-running campaign mounted by a Belarus-aligned threat actor dubbed Ghostwriter (aka Moonscape,

 AI

In episode 39 of the AI Fix, our hosts watch a drone and a robot dog shoot fireworks at each other, xAI launches Grok 3, Mark explains that AIs can design genomes now, a robot starts a punch up, Zuck becomes a mind reader, an AI cracks a ten-year science question in two days, and an anatomically accurate synthetic   show more ...  

human recreates a terrifying scene from The Long Good Friday. Graham learns that it always pays to be polite before running over 15 people with a train, and Mark discovers why AIs value some lives more than others, particularly their own. All this and much more is discussed in the latest edition of "The AI Fix" podcast by Graham Cluley and Mark Stockley.

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the   show more ...  

security solution. There are several actions that could […] La entrada Zero-Day Bug Pops Up in Parallels Desktop for Mac – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Australia

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed   show more ...  

triggered the security solution. There are several actions […] La entrada Australia Latest Domino to Fall in Gov’t Kaspersky Bans – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Elizabeth Montalbano, Contributing Writer Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed   show more ...  

triggered the security solution. There are several actions that could […] La entrada DeepSeek’s ByteDance Data-Sharing Raises Fresh Security Concerns – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Could

Source: www.darkreading.com – Author: Nate Nelson, Contributing Writer Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the   show more ...  

security solution. There are several actions that could […] La entrada Could the Plot of Netflix’s ‘Zero Day’ Occur IRL? – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Mike Kosak Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution.   show more ...  

There are several actions that could trigger this […] La entrada How APT Naming Conventions Make Us Less Safe – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: Die Ransomware-Bande Akira brüstet sich damit, den IT-Dienstleister InSyst um sensible Daten beraubt zu haben. Die Hackerbande Akira soll Daten von InSyst gestohlen haben. Quality Pixel – Shutterstock.com Der IT-Dienstleister InSyst wurde offenbar Ziel einer   show more ...  

Ransomware-Attacke. Die Ransomware-Gruppe Akira fügte das Unternehmen kürzlich zu ihrer Opferliste im Darknet hinzu. Die Hacker […] La entrada Deutscher IT-Dienstleister im Visier von Ransomware-Angreifern – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: Investigation revealed that BingX, & Phemex hacks were also connected to the same cluster as Bybit’s, confirming the threat actor’s identity as the Lazarus group. An independent investigation into the $1.5 billion hack suffered by the Bybit cryptocurrency   show more ...  

exchange on Friday has revealed connections to the infamous Lazarus group. A day […] La entrada Bybit’s $1.5B hack linked to North Korea’s Lazarus group – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: Panicking bank customers is neither difficult nor expensive, as a recent study shows, suggesting that CISOs must also keep disinformation campaigns in mind. The British research organization Say No To Disinfo has simulated an AI-driven disinformation campaign in cooperation   show more ...  

with communications specialists Fenimore Harper. As part of the campaign, 500 bank […] La entrada AI can kill banks: Cybersecurity’s disinformation gap – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSO and CISO

Source: www.csoonline.com – Author: Research shows various ways to classify CISOs based on role expectations, strengths and experience – distinctions that matter when it comes to ensuring that security leaders land in jobs where they will succeed. When executives at a startup asked security leader George   show more ...  

Gerchow to advise them on selecting a CISO, Gerchow […] La entrada Strategic? Functional? Tactical? Which type of CISO are you? – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: Regional Editor for Australia and New Zealand News 23 Feb 20253 mins Data and Information SecurityGovernmentSecurity Less than a year after US issued ban on all Kaspersky products, Australia prohibits its use across government agencies due to unacceptable security risk. The   show more ...  

Secretary of the Department of Home Affairs issued on Friday […] La entrada Australia bans the use of Kaspersky products by government entities – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Tuyet-Hanh Schnell from the Asian Connections AG reflects on learning about Asian leaders and innovators outside of traditional school environments. Source Views: 0 La entrada Asian American and Pacific Islander History From an Immigrant Perspective se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Discover the current state of membership belonging in SWE using data from over 60 interviews conducted by the SWE Senate in FY24. Source Views: 0 La entrada SWE Senate Explores Membership Belonging Within SWE se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Explore the intersection of Asian American and Pacific Islander Heritage Month and Mental Health Awareness Month in this episode of Diverse: a SWE podcast! Source Views: 0 La entrada SWE Diverse Podcast Ep 259: Addressing Mental Health Stigmas in Asian Cultures se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Speaker of the Senate Kristine Barnes (she/her) shares a recap of the SWE Senate’s important work and achievements throughout FY24. Source Views: 0 La entrada SWE Senate Year-End Update se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Waqas. A new botnet-powered cyber attack is putting Microsoft 365 users at risk. Security researchers at SecurityScorecard have reported that over 130,000 compromised devices are being used to launch coordinated password-spraying attacks against Microsoft 365 accounts. What’s   show more ...  

Happening? Instead of relying on the usual login mechanisms that trigger alerts through repeated […] La entrada Botnet of 130K Devices Targets Microsoft 365 in Password-Spraying Attack – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Android

Source: www.bitdefender.com – Author: Graham Cluley A serious security vulnerability has been found in popular stalkerware apps, exposing the sensitive personal information and communications of millions of people. Stalkerware is a type of spyware, frequently used to spy on every message sent or received by a   show more ...  

romantic partner, learn who they are speaking to on […] La entrada Flaw found in stalkerware apps, exposing millions of people. Here’s how to find out if your phone is being spied upon – Source: www.bitdefender.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.troyhunt.com – Author: Troy Hunt I like to start long blog posts with a tl;dr, so here it is: We’ve ingested a corpus of 1.5TB worth of stealer logs known as “ALIEN TXTBASE” into Have I Been Pwned. They contain 23 billion rows with 493 million unique website and email address   show more ...  

pairs, affecting 284M […] La entrada Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs – Source: www.troyhunt.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.troyhunt.com – Author: Troy Hunt Wait – it’s Tuesday already?! When you listen to this week’s (ok, last week’s) video, you’ll probably get the sense I was a bit overloaded. Yeah, so that didn’t stop, and the stealer log processing and new feature building just   show more ...  

absolutely swamped me. Plus, I spent from then until […] La entrada Weekly Update 440 – Source: www.troyhunt.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: The flaws allow attackers to use a serialization oversight to compromise systems for remote code execution. CISA is warning Adobe and Oracle customers about in-the-wild exploitation of critical vulnerabilities affecting the services of these leading enterprise software   show more ...  

providers. The US cybersecurity watchdog added vulnerabilities in Adobe ColdFusion (CVE-2017-3066) and Oracle Agile […] La entrada Critical deserialization bugs in Adobe, Oracle software actively exploited, warns CISA – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: Der Großhändler Stürmer Maschinen wurde Ziel einer Ransomware-Attacke. Die Täter haben 800 Gigabyte Daten gestohlen. Die Ransomware-Bande Lynx erpresst den Großhändler Stürmer Maschinen mit gestohlenen Daten. DC Studio – Shutterstock.com Die Ransomware-Bande Lynx hat   show more ...  

den Maschinengroßhändler Stürmer Maschinen kürzlich auf ihre Opferliste gesetzt. Auf ihrer Leak-Seite im Darknet behaupten die Cyberkriminellen, […] La entrada Stürmer Maschinen von Ransomware-Attacke getroffen – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CSOonline

Source: www.csoonline.com – Author: To ensure minimal business disruption, CISOs must have the right incident recovery strategies, roles, and processes in place. Security experts share tips on assembling your playbook. When a company experiences a major IT systems outage — such as from a cybersecurity   show more ...  

incident — it’s essentially out of business for however long […] La entrada How to create an effective incident response plan – Source: www.csoonline.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-02
Aggregator history
Tuesday, February 25
SAT
SUN
MON
TUE
WED
THU
FRI
FebruaryMarchApril