Source: www.bleepingcomputer.com – Author: Bill Toulas Cybersecurity solutions company Fortinet has updated its zero-trust access solution FortiNAC to address a critical-severity vulnerability that attackers could leverage...
Day: June 23, 2023
Microsoft 365 users report Outlook, Teams won’t start or freezes – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Lawrence Abrams Network and IT admins have been dealing with ongoing Microsoft 365 issues this week, reporting that some end users cannot...
Microsoft Teams bug allows malware delivery from external accounts – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Security researchers have found a simple way to deliver malware to an organization with Microsoft Teams, despite restrictions in the...
NSA shares tips on blocking BlackLotus UEFI malware attacks – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan The U.S. National Security Agency (NSA) released today guidance on how to defend against BlackLotus UEFI bootkit malware attacks. BlackLotus...
IOTW: A full timeline of the MOVEit cyber attack
Ransomware gang Clop, which has taken responsibility for the cyber attack launched against document transfer service MOVEit, has announced that it has not stolen data from...
#InfosecurityEurope: BlackBerry Cybersecurity President Warns Against Heavy-Handed AI Regulation – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 The threats posed by the malicious use of generative AI tools, particularly large language model-based (LLM) chatbots, have pushed various governments...
NCSC Updates Cybersecurity Guidance for the Legal Sector – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 The UK’s National Cyber Security Centre (NCSC) has released updated guidance to help law firms mitigate the latest cyber-threats. Worth an...
Manchester University Breach Victims Hit with Triple Extortion – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 Staff and students at Manchester University have been sent threatening emails designed to put pressure on the institution to pay a...
FBI Analyst Gets Three Years For National Security Breach – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 An FBI analyst has been sentenced to 46 months behind bars after illegally retaining hundreds of classified documents at her home...
Breach Roundup: European Investment Bank Suffers Cyberattack – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 3rd Party Risk Management , Breach Notification , Finance & Banking Also: MOVEit Attackers Target Pensioners, UPS Canada Discloses Data Breach...
3 Boardroom Initiatives to See You Through the Cyber Winter – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 CISO Trainings , Leadership & Executive Communication , Training & Security Leadership CISO Marco Túlio Moraes on How to Guide the...
French Ad Tech Firm Fined 40M Euros for GDPR Violations – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 General Data Protection Regulation (GDPR) , Governance & Risk Management , Privacy French Regulator Fines Criteo for Website Cookie Tracking Tools...
Exabeam Gets 3rd CEO Since 2021, Promotes CPO Adam Geller – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 Open XDR , Security Information & Event Management (SIEM) , Security Operations Geller Replaces Michael DeCesare, Who Seeks to ‘Balance Health...
Data Breach Lawsuit Alleges Mismanagement of 3rd-Party Risk – Source: www.databreachtoday.com
Source: www.databreachtoday.com – Author: 1 3rd Party Risk Management , Governance & Risk Management , HIPAA/HITECH Proposed Class Action Filed Against Intellihartx in Wake of Fortra...
The Power of Browser Fingerprinting: Personalized UX, Fraud Detection, and Secure Logins – Source:thehackernews.com
Source: thehackernews.com – Author: . The case for browser fingerprinting: personalizing user experience, improving fraud detection, and optimizing login security Have you ever heard of browser...
Powerful JavaScript Dropper PindOS Distributes Bumblebee and IcedID Malware – Source:thehackernews.com
Source: thehackernews.com – Author: . Jun 23, 2023Ravie LakshmananMalware / Cyber Threat A new strain of JavaScript dropper has been observed delivering next-stage payloads like Bumblebee...
NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems – Source:thehackernews.com
Source: thehackernews.com – Author: . Jun 23, 2023Ravie LakshmananThreat Intel / Endpoint Security The U.S. National Security Agency (NSA) on Thursday released guidance to help organizations...
New Cryptocurrency Mining Campaign Targets Linux Systems and IoT Devices – Source:thehackernews.com
Source: thehackernews.com – Author: . Jun 23, 2023Ravie LakshmananCryptocurrency / IoT Internet-facing Linux systems and Internet of Things (IoT) devices are being targeted as part of...
More than a million GitHub repositories potentially vulnerable to RepoJacking – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Researchers reported that millions of GitHub repositories are likely vulnerable to an attack called RepoJacking. A study conducted by Aqua...
New Mirai botnet targets tens of flaws in popular IoT devices – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Since March 2023, Unit 42 researchers have observed a variant of the Mirai botnet spreading by targeting tens of flaws...
Researchers released a PoC exploit for CVE-2023-20178 flaw in Cisco AnyConnect Secure – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini The proof-of-concept (PoC) exploit code for high-severity vulnerability (CVE-2023-20178) in Cisco AnyConnect Secure was published online. A security researcher has...
Norton parent firm Gen Digital, was victim of a MOVEit ransomware attack too – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Norton parent firm, Gen Digital, was the victim of a ransomware attack that exploited the recently disclosed MOVEit zero-day vulnerability....
Apple addressed actively exploited zero-day flaws in iOS, macOS, and Safari – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Apple rolled out security updates to address actively exploited zero-day flaws in iOS, iPadOS, macOS, watchOS, and Safari. Apple addressed...
Google Backs Creation of Cybersecurity Clinics With $20 Million Donation – Source: www.securityweek.com
Source: www.securityweek.com – Author: Associated Press Free medical clinics and legal aid clinics, where college students and their instructors help their communities while also learning more...
US Military Personnel Receiving Unsolicited, Suspicious Smartwatches – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire The U.S. Army’s Criminal Investigation Division is urging military personnel to be on the lookout for unsolicited, suspicious smartwatches in...
China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire Anti-malware vendor Symantec is warning that a China-linked hacking group flagged as APT15 is targeting foreign affairs ministries in the...
North Korean Hackers Caught Using Malware With Microphone Wiretapping Capabilities – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire A hacking group linked to the North Korean government has been caught using new wiretapping malware in recent surveillance attacks,...
PoC Exploit Published for Cisco AnyConnect Secure Vulnerability – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire A security researcher has published proof-of-concept (PoC) code targeting a recently patched high-severity vulnerability in the Cisco AnyConnect Secure Mobility...
The Benefits of Red Zone Threat Intelligence – Source: www.securityweek.com
Source: www.securityweek.com – Author: Derek Manky Exploit trends help reveal the areas that cybercriminals are actively investigating for potential attacks and what they’re currently targeting. New...
Bipartisan Bill Proposes Cybersecurity Funds for Rural Water Systems – Source: www.securityweek.com
Source: www.securityweek.com – Author: Kevin Townsend A new bill proposes to increase cybersecurity funding for rural water systems by $7.5 million dollars per year. It’s not...