Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for Black Basta Chat Log ...

 Cyber News

The Black Basta ransomware group has fallen off dramatically in 2025, and chat logs leaked recently show that internal squabbling may be behind the group’s slowed activity. Cyble threat intelligence researchers documented 189 Black Basta victims in 2024. Nearly two months into 2025, that number has fallen to eight.   show more ...  

Two weeks ago, a Telegram user who goes by ExploitWhispers leaked the group’s chat logs, which revealed infighting and disagreement over targets among Black Basta members. What might be more useful, however, is an examination of what the chat logs tell us about Black Basta TTPs (tactics, techniques and procedures). So we queried a ChatGPT instance set up by security researchers to examine the Black Basta data, which includes nearly 200,000 chat messages sent between September 2023 and September 2024, to glean indicators of compromise (IoCs), TTPs and more. The chat logs appear to include new information on the group beyond what had previously been reported by CISA and others, including newer vulnerabilities under discussion by group members. Black Basta first appeared in April 2022, likely formed by former members of the Conti and REvil ransomware groups, and Cyble has since documented 528 victims of the group. Black Basta TTPs Revealed by Leaked Chat Logs According to the chat logs, Black Basta favors compromised remote access points for initial access, such as use of Remote Desktop Protocol (RDP) and VPN credentials. Malicious scripts follow, including use of VBS (Visual Basic Script) files to execute malicious payloads​, and command execution via rundll32.exe, a common method for running DLL-based payloads​. File names such as drs1312_signed.zip suggest the use of digitally signed executables to evade detection. Numerous discussions about ESXi hypervisor vulnerabilities included mentions of systems allowing default passwords, and several leaked login credentials for various services suggest that the group employs credential stuffing, brute force, and/or phishing tactics​​. Command and Control (C2) is established by SOCKS proxy servers and SSH command execution, with rotating domains for malware downloads and C2 communication​. Black Basta also uses obfuscation and encryption techniques, with group members discussing antivirus (AV) evasion tactics, and files like e6393196-f020-4c2f-88fc-45ff7e22794f_encrypt_release_allsystem_x64.zip indicate whole-system encryption tactics​. Discussions also mentioned custom-built AV/EDR disablers, and Qakbot trojan evasion, injection and persistence mechanisms​. The group used Cobalt Strike with multiple modifications, including a custom-built Artifact Kit for modifying Cobalt Strike payloads​, the Elevate Kit to integrate privilege escalation exploits​, the Sleep Mask Kit for memory obfuscation and AV evasion​, and the Mutator Kit to modify compiled binaries​. Mimikatz is another frequently used tool. Members have also spoofed IT calls, posing as IT support to obtain access and bypass security​. Vulnerabilities Targeted by Black Basta The chat logs contain a long list of vulnerabilities under discussion by Black Basta members, ranging from Linux and Windows vulnerabilities to network devices, open source frameworks, IT tools and more, and in some cases the group appears to have chained vulnerabilities together. Specific CVEs targeted by Black Basta include: CVE-2022-30190: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution (RCE) vulnerability CVE-2021-44228: The Log4j “Log4Shell” vulnerability CVE-2022-22965: Spring Framework “Spring4Shell” vulnerability CVE-2022-1388: F5 BIG-IP REST authentication vulnerability CVE-2022-0609: Use after free vulnerability in Animation in Google Chrome CVE-2017-11882: Microsoft Office memory corruption vulnerability CVE-2022-41082 and CVE-2022-41040: the Microsoft Exchange “ProxyNotShell” vulnerabilities CVE-2022-27925 and CVE-2022-41352: Zimbra Collaboration vulnerabilities that were used together to gain access and execute a reverse shell CVE-2022-26134: Atlassian Confluence RCE vulnerability CVE-2022-30525: Zyxel RCE vulnerability More recent vulnerabilities under discussion by the group have included: CVE-2024-21762: Fortinet FortiOS RCE CVE-2024-3400: GlobalProtect RCE in Palo Alto Networks PAN-OS CVE-2024-1709: ConnectWise ScreenConnect RCE CVE-2024-26169: Windows Error Reporting Service elevation of privilege vulnerability CVE-2024-23897: A Jenkins CI/CD pipeline vulnerability CVE-2024-1086: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component Black Basta File Hashes and Indicators of Compromise (IoCs) From ransomware files and malware samples to C2 IPs, domains, and compromised credentials, the chat logs also revealed a range of Black Basta indicators of compromise (IoCs). Ransomware files include: e6393196-f020-4c2f-88fc-45ff7e22794f_encrypt_release_allsystem_x64.zip zip CVE-2022-27925-zimbra_Revshell.zip (a backdoored Zimbra exploit)​ Black Basta has been associated with various malware families, including RemcosRAT, AgentTesla, FormBook, and GuLoader. File hashes from shared malware samples include: Remcos RAT: c5793613219a782eb08205921a3f9ed97c2c74de18e0cd36008046d1a5e1288e Agent Tesla: 50d414576bf441cca754e6e3b96dabdf35fed443ecb98f865dc89e623bc2f0e9 Formbook: e19dfc72ad2eea815ef6b4eb9b812471b3bb3cf40333d97e3c552c87db86e65a GuLoader: 5a2f52bb90ed8a2fd9bc0e07937684ac9b9389cdd112760f8dc96e16aa63d513​ IP addresses used by the group for botnet communication, command-and-control (C2), and proxies have included: 214.25.250 8.18.230 161.27.152 98.80.158 60.149.244 227.252.244 238.181.250 118.36.203 60.149.241 165.16.55​ 57.243.97 (used for shell, SOCKS, FTP)​ 253.64.241 (used in UK-based attacks)​ The Biggest Ransomware Group Leak Since Conti The Black Basta chat log leak is likely the biggest leak to hit a ransomware group since Black Basta predecessor Conti was hit by a source code leak in 2022. So while the infighting is certainly entertaining and sheds light on the group’s dynamics, the many tactical details revealed provide a rich data source for threat intelligence researchers and security teams whose job is to stop and respond to threats from Black Basta and others who may adopt its tactics.

image for How to scan huge fil ...

 Business

Scanning the hard drives of work computers is a simple daily procedure that happens without impacting the user or requiring any manual action. In the case of servers, however, things are more complex — especially if done in response to an incident, after which all company storage (perhaps tens of terabytes worth)   show more ...  

need an unscheduled scan. Whats more, you need to ensure absolute data security and no noticeable drop in performance for users. Weve compiled a list of tips and precautions to save you time and prevent further incidents. All tips related to our products are using Kaspersky Endpoint Security as an example, but the same logic applies to other EPP/EDR security products. Preliminary checks Check the configuration of the computer that will perform the scan. Make sure that the OS is updated to the latest version and can connect to all disks being scanned and process the data correctly — that is: read long Unicode file names, handle very large files and files on case-sensitive partitions, and so on. To speed up the scan, use a computer with a powerful multicore CPU, generous memory, and fast local storage for temporary files. Make sure that disk-access is fast. The computer should connect to all storage either directly (local storage) or through a fast network interface using a high-performance protocol (preferably SAN-type). Check your backups. Although scanning should not affect stored data, its important to have a plan B in case of malware infection or file corruption. Therefore, carefully check the date and contents of the most recent backup of all data, consider when data-recovery drills were last performed, and generally make sure the current backup versions are usable. If current backups arent available, assess the risks and time frames, and possibly back up critical data before scanning. Clarify the nature of the data on the disks and the storage specifications. This is to optimize the scan settings. Are the disks arranged in a RAID array? If so, what type? You need to decide whether to scan different disks in parallel, and whether this will boost performance. If the disks are accessible independently, consider parallel scanning from multiple computers. Here again, both access speed and server capacity are key. For a powerful computer limited mainly by access speed to different disks, you can run parallel scanning tasks on a single machine. The nature of the data will greatly affect your decision. If the disks contain many heterogeneous files, or archives with a large number of files, scanning will require significant resources of all types: CPU, memory, temporary folders, etc. The load will be lower if large files in a safe format (video editing sources, database tables, backups/archives known to be untouched) make up a major part of whats being stored. Preparing for scanning Schedule the scan time. Ideally, a weekend, nighttime, or other period when few users access the data. Then you can either completely remove the disks and servers to be scanned from public access, or warn users about possible system slowdown and be sure that only a very small group of people will be affected. Make sure theres enough free space on the disks. Scanning may involve unpacking archives and images, which sometimes requires a lot of space. Check quarantine storage settings. If many infected and suspicious files are found, quarantine may overflow and older samples will be deleted. So its worth allocating plenty of space for quarantine. Agree and enforce an exclusion policy. To reduce scan time, exclude resources that pose no risk and would take a very long time to scan. This category typically includes very large files (with the cutoff ranging from hundreds of megabytes to several gigabytes, depending on the situation), distribution kits, backups, other files that havent been modified since previous scans, and files that are known to be non-executable. However, the last category is not so clear-cut, as there can be malicious fragments hidden in plain text files and images. So its better to be safe than sorry and scan images as well.  Delete temporary files and folders so you dont waste time on them. Scan settings These recommendations should be adjusted in line with your prior assessments and the nature of the data, but the basic advice is: Set the maximum amount of memory and CPU time for scanning, taking into account the server usage profile. If the server is unavailable to users during scanning, you can allocate up to 80% of CPU and memory resources — any higher and the computer may become sluggish. For servers that remain under normal load, these numbers should be significantly lower. In our product settings enable iChecker and iSwift. These technologies speed up scanning of some file formats and exclude data thats been unchanged since the last scan. Here, you can also enable additional options to prevent overloading the system: Do not run multiple scan tasks at the same time and Scan only new and modified files. Disable scanning of password-protected archives; otherwise, password requests will cause the application to stop scanning. Set the maximum size of files for scanning in accordance with what we discussed above. Set the heuristic analysis level to medium. Select actions for infected objects; quarantine will likely be the best choice. Set the logging settings so that the logs contain sufficiently detailed information about scanned objects and scan results. Performance settings are described in more detail on our support site: for Windows and for Linux. Running the scan Start by scanning a small partition or subset of files weighing no more than a terabyte. Evaluate the impact of the scan on server performance (especially important if it continues to serve users) as well as the total time taken, and check the logs for errors. If the scan seems to take too long, try to figure out from the logs what caused the bottleneck. Using this data, adjust the settings accordingly and schedule a big scan. Even after the test, we dont advise running a full scan of the entire data volume in one task. Its better to create multiple scan tasks — each targeting only one of the many storage fragments, such as individual disks. This reduces the risk of a prohibitively long scan time, or a failed scan that has to be restarted from scratch. In the basic scenario, these subtasks are run sequentially as theyre completed. But if the system configuration allows it, dividing the scan into multiple tasks will let you scan independent disks in parallel. During scanning, monitor the system load and the scan progress so as to intervene in time in case of abnormal situations. And after each task is completed, be sure to drill down into the logs!

image for Name That Toon: Ka-C ...

 Feed

Feeling creative? Have something to say about cybersecurity? Submit your caption and our panel of experts will reward the winner with a $25 gift card.

 Feed

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed two security flaws impacting Microsoft Partner Center and Synacor Zimbra Collaboration Suite (ZCS) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities in question are as follows - CVE-2024-49035 (CVSS score: 8.7) - An improper access control

 Feed

More than a year's worth of internal chat logs from a ransomware gang known as Black Basta have been published online in a leak that provides unprecedented visibility into their tactics and internal conflicts among its members. The Russian-language chats on the Matrix messaging platform between September 18, 2023, and September 28, 2024, were initially leaked on February 11, 2025, by an

 Feed

Organizations today face relentless cyber attacks, with high-profile breaches hitting the headlines almost daily. Reflecting on a long journey in the security field, it’s clear this isn’t just a human problem—it’s a math problem. There are simply too many threats and security tasks for any SOC to manually handle in a reasonable timeframe. Yet, there is a solution. Many refer to it as SOC 3.0—an

 Feed

Universities and government organizations in North America and Asia have been targeted by a previously undocumented Linux malware called Auto-Color between November and December 2024, according to new findings from Palo Alto Networks Unit 42. "Once installed, Auto-color allows threat actors full remote access to compromised machines, making it very difficult to remove without specialized

 Feed

Passwords are rarely appreciated until a security breach occurs; suffice to say, the importance of a strong password becomes clear only when faced with the consequences of a weak one. However, most end users are unaware of just how vulnerable their passwords are to the most common password-cracking methods. The following are the three common techniques for cracking passwords and how to

 Feed

The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday warned of renewed activity from an organized criminal group it tracks as UAC-0173 that involves infecting computers with a remote access trojan named DCRat (aka DarkCrystal RAT). The Ukrainian cybersecurity authority said it observed the latest attack wave starting in mid-January 2025. The activity is designed to target the

 Feed

Cybersecurity researchers have flagged a malicious Python library on the Python Package Index (PyPI) repository that facilitates unauthorized music downloads from music streaming service Deezer. The package in question is automslc, which has been downloaded over 104,000 times to date. First published in May 2019, it remains available on PyPI as of writing. "Although automslc, which has been

 Feed

A cross-site scripting (XSS) vulnerability in a virtual tour framework has been weaponized by malicious actors to inject malicious scripts across hundreds of websites with the goal of manipulating search results and fueling a spam ads campaign at scale. Security researcher Oleg Zaytsev, in a report shared with The Hacker News, said the campaign – dubbed 360XSS – affected over 350 websites,

 Blog

Source: socprime.com – Author: Veronika Telychko A novel max-severity RCE vulnerability (CVE-2025-27364) in MITRE Caldera poses a serious risk of system compromise. The flaw can also be chained with another Parallels Desktop security issue, CVE-2024-34331, to double the risks of threats. If exploited, these   show more ...  

security issues could provide hackers with full system control, causing unauthorized […] La entrada CVE-2025–27364 in MITRE Caldera: Exploitation of a New Max-Severity RCE Vulnerability via Linker Flag Manipulation Can Lead to Full System Compromise  – Source: socprime.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 25, 2025 LockBit claims to have “classified information” for FBI Director Kash Patel that could “destroy” the agency if leaked. The ransomware gang LockBit sent a strange message to newly appointed FBI Director Kash   show more ...  

Patel, they offer alleged “classified information” that could “destroy” this agency if […] La entrada LockBit taunts FBI Director Kash Patel with alleged “Classified” leak threat – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 APT

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 25, 2025 The European Union sanctioned the leader of North Korea-linked APT groups for aiding Russia in its war against Ukraine. The European Union announced sanctions against entities aiding Russia in the ongoing conflict with   show more ...  

Ukraine, including Lee Chang Ho, who is the leader of North […] La entrada EU sanctioned the leader of North Korea-linked APT groups – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 25, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM) vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S.   show more ...  

Cybersecurity and Infrastructure Security Agency (CISA) added SonicWall SonicOS and Palo Alto PAN-OS vulnerabilities to its Known Exploited Vulnerabilities (KEV) […] La entrada U.S. CISA adds Adobe ColdFusion and Oracle Agile PLM flaws to its Known Exploited Vulnerabilities catalog – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Breaking News

Source: securityaffairs.com – Author: Pierluigi Paganini Pierluigi Paganini February 25, 2025 Russia’s NKTsKI warns financial sector organizations about a breach at major Russian IT service and software provider LANIT. Russia’s National Coordination Center for Computer Incidents (NKTsKI) warns the financial   show more ...  

sector of security breach at IT service and software provider LANIT, potentially affecting LANTER and […] La entrada Russia warns financial sector organizations of IT service provider LANIT compromise – Source: securityaffairs.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: grahamcluley.com – Author: Graham Cluley Skip to content In episode 39 of the AI Fix, our hosts watch a drone and a robot dog shoot fireworks at each other, xAI launches Grok 3, Mark explains that AIs can design genomes now, a robot starts a punch up, Zuck becomes a mind reader, an AI […] La   show more ...  

entrada The AI Fix #39: AIs value their lives over yours, and flattery gets you nowhere – Source: grahamcluley.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Jayashree Raja outlines the impact of women in data science and highlights several key trailblazers in the field. Source Views: 0 La entrada Women in Data Science: Empowering Innovation se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Come along for Eshika Mahajan’s journey at the 2024 WE Local Bengaluru conference and celebrate the quiet strength and subtle influence of introverts making a difference. Source Views: 0 La entrada An Introvert’s Reflection on 2024 WE Local Bengaluru se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

This May, explore a variety of podcast episodes, blog posts, and magazine articles that honor STEM leaders within the Asian and Pacific American communities. Source Views: 0 La entrada SWE Celebrates Asian American and Pacific Islander Heritage Month se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Mrinal Karvir discusses the different types of bias that exist in AI, as well as how engineers can help reduce bias in this technology, in this episode of Diverse: a SWE podcast. Source Views: 0 La entrada SWE Diverse Podcast Ep 258: Exploring Bias in AI With Mrinal Karvir of Intel se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Hear the stories of three Arab women engineers who are making an impact in STEM around the world. Source Views: 0 La entrada Arab Women in Engineering Spotlight: Global STEM Leaders se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Nichole Elff shares her journey in drag racing and discusses how engineers can embrace the power of their hobbies on this episode of Diverse: a SWE podcast! Source Views: 0 La entrada SWE Diverse Podcast Ep 257: How Hobbies Elevate Your Professional Potential With Nichole Elff of Boston Scientific se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

In March 2024, over 100 SWE participants advocated for policies aimed at fostering an inclusive STEM workforce. Learn more about their strategy, legislative priorities, and experiences in Washington D.C. Source Views: 0 La entrada SWE’s 2024 Congressional Outreach Days: SWE on the Hill se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Marc Handelman Tuesday, February 25, 2025 Home » Security Bloggers Network » DEF CON 32 – Exploiting Bluetooth: From Your Car To The Bank Account$$ Authors/Presenters: Yso & Martin Strohmeier Our sincere appreciation to DEF CON, and the Authors/Presenters for   show more ...  

publishing their erudite DEF CON 32 content. Originating from the conference’s […] La entrada DEF CON 32 – Exploiting Bluetooth: From Your Car To The Bank Account$$ – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed   show more ...  

triggered the security solution. There are several actions […] La entrada AI Tricksters Spin Up Fake DeepSeek Sites to Steal Crypto – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed   show more ...  

triggered the security solution. There are several actions […] La entrada Microsoft 365 Accounts Get Sprayed by Mega-Botnet – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Jai Vijayan, Contributing Writer Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the   show more ...  

security solution. There are several actions that could […] La entrada Max Severity RCE Vuln in All Versions of MITRE Caldera – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Elizabeth Montalbano, Contributing Writer Please enable cookies. Sorry, you have been blocked You are unable to access darkreading.com Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed   show more ...  

triggered the security solution. There are several actions that could […] La entrada North Korea’s Lazarus Pulls Off Biggest Crypto Heist in History – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 APT

Source: securelist.com – Author: Alexander Kolesnikov Q4 2024 saw fewer published exploits for Windows and Linux compared to the first three quarters. Although the number of registered vulnerabilities continued to rise, the total number of Proof of Concept (PoC) instances decreased compared to 2023. Among   show more ...  

notable techniques in Q4, attackers leveraged undocumented RPC interfaces and […] La entrada Exploits and vulnerabilities in Q4 2024 – Source: securelist.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Deeba Ahmed. A massive collection of compromised data, dubbed “ALIEN TXTBASE,” has been integrated into the Have I Been Pwned, (a website that alerts users about data breaches) database. According to Have I Been Pwned’s founder Troy Hunt, this information was harvested from   show more ...  

individuals whose devices were infected with infostealer malware […] La entrada Have I Been Pwned Adds ALIEN TXTBASE Data 280M Emails & Passwords – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Waqas. Swedish law enforcement and security agencies are advocating for legislation that would compel encrypted messaging services, such as Signal and WhatsApp, to implement backdoors. This measure aims to grant authorities access to users’ communications for criminal   show more ...  

investigations. However, this proposal has met with strong resistance from both the service providers […] La entrada Signal Threatens to Exit Sweden Over Government’s Backdoor Proposal – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: hackread.com – Author: Deeba Ahmed. A data breach at DISA Global Solutions, a firm providing background checks, and drugs and alcohol testing services, exposed the personal information of 3.3 million. Learn what data was affected and what steps are being taken. DISA Global Solutions, a company   show more ...  

specializing in workplace compliance and employee screening solutions, […] La entrada US Background Check Firm Data Breach Exposes 3.3M Records – Source:hackread.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: A growing reliance on APIs has fueled security concerns, with nearly all organizations (99%) reporting API-related security issues in the past year. According to the Q1 2025 State of API Security Report by Salt Security, the rapid expansion of API   show more ...  

ecosystems—driven by cloud migration, platform integration and data monetization—is outpacing security […] La entrada 99% of Organizations Report API-Related Security Issues – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: A cyber incident at DISA Global Solutions, Inc. has exposed the sensitive personal information of more than 3.3 million people undergoing employment screenings; the company confirmed to affected individuals last Friday. Breach Timeline and Investigation On April   show more ...  

22, 2024, DISA detected unauthorized access to a limited portion of its network. An […] La entrada DISA Global Solutions Confirms Data Breach Affecting 3.3M People – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: In a bold move that underscores the growing tension between tech companies and governments over encryption, end-to-end encrypted (E2EE) instant messaging app Signal is considering leaving Sweden over a proposed law that could compromise user privacy. The Swedish   show more ...  

government is scheduled to propose a bill in March 2025 that would grant […] La entrada Signal May Exit Sweden If Government Imposes Encryption Backdoor – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-02
Aggregator history
Wednesday, February 26
SAT
SUN
MON
TUE
WED
THU
FRI
FebruaryMarchApril