Source: securityaffairs.com – Author: Pierluigi Paganini The LockBit ransomware group threatens to leak medical data of cancer patients stolen from Varian Medical Systems. The LockBit ransomware...
Day: August 9, 2023
Microsoft Patch Tuesday for August 2023 fixed 2 actively exploited flaws – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Microsoft Patch Tuesday security updates for August 2023 addressed 74 vulnerabilities, including two actively exploited flaws. Microsoft Patch Tuesday security...
UK Electoral Commission discloses a data breach – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini The UK Electoral Commission suffered a data breach that exposed voters’ personal information between 2014 and 2022. The UK Electoral...
Sweet Security Emerges From Stealth With $12 Million Seed Funding and a Cloud Runtime Solution – Source: www.securityweek.com
Source: www.securityweek.com – Author: Kevin Townsend Israeli startup Sweet Security has emerged from stealth, launched a Cloud Runtime Security Suite, and announced a $12 million seed...
Microsoft Paid Out $13 Million via Bug Bounty Programs for Fourth Consecutive Year – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs For the fourth consecutive year, Microsoft has announced paying out more than $13 million through its bug bounty programs. The...
Cloud Security Firm Kivera Raises $3.5 Million in Seed Funding – Source: www.securityweek.com
Source: www.securityweek.com – Author: Kevin Townsend Australian startup cloud security firm Kivera has raised $3.5 million seed funding from General Advance, Round 13 Capital and angel...
Intel Addresses 80 Firmware, Software Vulnerabilities – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Intel on Tuesday released a total of 46 new security advisories to inform customers about 80 vulnerabilities affecting the company’s...
Automated Security Control Assessment: When Self-Awareness Matters – Source: www.securityweek.com
Source: www.securityweek.com – Author: Torsten George Exploitation of software vulnerabilities by cyber adversaries has dominated headlines the last couple of months (e.g., Ivanti EPMM flaw, Points.com,...
SAP Patches Critical Vulnerability in PowerDesigner Product – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs German software giant SAP has fixed more than a dozen new vulnerabilities with its August 2023 Patch Tuesday updates, including...
New ‘Inception’ Side-Channel Attack Targets AMD Processors – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Researchers on Tuesday disclosed the details of a new CPU side-channel attack named Inception that impacts AMD processors. The Inception...
40 Vulnerabilities Patched in Android With August 2023 Security Updates – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Just over 40 vulnerabilities have been patched by Google in the Android operating system with the release of the August...
Downfall: New Intel CPU Attack Exposing Sensitive Information – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs The details of a new side-channel attack targeting Intel processors were disclosed on Tuesday. The attack, discovered by a researcher...
Rapid7 Announces Layoffs, Office Closings Under Restructuring Plan – Source: www.securityweek.com
Source: www.securityweek.com – Author: Mike Lennon Rapid7 (NASDAQ: RPD) is the latest cybersecurity vendor to announce layoffs, with the Boston-based firm announcing a restructuring plan late...
Microsoft Visual Studio Code flaw lets extensions steal passwords – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Microsoft’s Visual Studio Code (VS Code) code editor and development environment contains a flaw that allows malicious extensions to retrieve...
Microsoft Office update breaks actively exploited RCE attack chain – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Ionut Ilascu Microsoft today released a defense-in-depth update for Microsoft Office that prevents exploitation of a remote code execution (RCE) vulnerability tracked...
Northern Ireland Police Officers Vulnerable After Data Leak – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 A serious data leak has exposed the personal details of police officers and civilian personnel working at the Police Service of...
Notorious Phishing-as-a-Service Platform Shuttered – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 A phishing-as-a-service (PaaS) platform which may have been responsible for over 150,000 phishing domains has been taken offline after an Interpol-led...
Summer Spending Pressure Fuels Loan Fee Fraud Fears – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 The UK’s financial regulatory has warned consumers to be on the lookout for loan fee fraudsters after revealing new research claiming...
Microsoft Patches 80+ Flaws Including Two Zero-Days – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 Microsoft released updates for 87 vulnerabilities yesterday, including two that are being actively exploited in the wild. The first zero-day was...
Tampa General Hospital Sued Over Data Breach – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 Law firm Morgan & Morgan has lodged a class-action lawsuit against Tampa General Hospital on behalf of three victims affected by...
ICO to investigate risk to police officers after Northern Ireland data breach – Source: www.theguardian.com
Source: www.theguardian.com – Author: Rory Carroll Ireland correspondent The UK’s Information Commissioner’s Office has launched an investigation into an unprecedented data breach that disclosed details of...
Electoral Commission and PSNI data breaches: what we know so far – Source: www.theguardian.com
Source: www.theguardian.com – Author: Dan Milmo Global technology editor The UK election watchdog and Northern Ireland’s police service both announced serious data breaches on Tuesday, in...
UK Electoral Commission Data Breach Exposes Information of 40 Million Voters – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Livia Gyongyoși The UK Electoral Commission revealed a cyberattack that exposed the personal data of all registered voters between 2014 and 2022....
Downfall Vulnerability Exposes Intel CPUs to Data and Encryption Keys Stealing – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Livia Gyongyoși Downfall vulnerability impacts various Intel microprocessors and enables encryption keys, passwords, and other sensitive data exfiltration. The flaw was dubbed...
Enhancing Cybersecurity with Remote Browser Isolation (RBI) – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Mihaela Popa In an age where the internet is vital for business, cyberattacks, malware, and phishing attempts have evolved to exploit vulnerabilities...
The FBI Is Investigating a Ransomware Attack that Disrupted Hospital Operations in 4 States – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Madalina Popovici A large healthcare network operating across multiple states recently experienced widespread network disruptions due to a cyberattack, confirmed by the...
New Deep Learning Model Decodes Keyboard Sounds with 95% Accuracy – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Madalina Popovici A team of researchers has introduced an innovative approach referred to as a “deep learning-based acoustic side-channel attack,” designed to...
Keep your sensitive data secure by using Encrypted Forms 2.0 from Jotform – Source: grahamcluley.com
Source: grahamcluley.com – Author: Graham Cluley Graham Cluley Security News is sponsored this week by the folks at Jotform. Thanks to the great team there for...
Time is money, and online game scammers have lots of it – Source:
Source: – Author: 1 Gamers and cybersecurity professionals have something in common – the ever-terrible presence of hacking, scams, and data theft – but how and...
Check cybersecurity pre-invest – Week in security with Tony Anscombe – Source:
Source: – Author: 1 When you invest in a company, do you check its cybersecurity? The U.S. Securities and Exchange Commission has adopted new cybersecurity rules....