Source: thehackernews.com – Author: . Cisco has released software updates to address a critical security flaw impacting Meeting Management that could permit a remote, authenticated attacker...
Day: January 23, 2025
TRIPLESTRENGTH Hits Cloud for Cryptojacking, On-Premises Systems for Ransomware – Source:thehackernews.com
Source: thehackernews.com – Author: . Google on Wednesday shed light on a financially motivated threat actor named TRIPLESTRENGTH for its opportunistic targeting of cloud environments for...
Memcyco Announces Next-Gen, AI Solution to Combat Fraud and Impersonation Attacks in Real Time – Source:hackread.com
Source: hackread.com – Author: Waqas. Memcyco’s AI-based solution enables organizations of all sizes to better protect their customers from phishing, impersonation fraud and online scams. New...
You are Not Alone, ChatGPT is Down – Source:hackread.com
Source: hackread.com – Author: Waqas. ChatGPT Outage: Service Down on Jan 23, 2025. Learn about the potential causes (DDoS or technical glitch) and the latest updates...
Meta’s pay-or-consent model under fire from EU consumer group – Source: go.theregister.com
Source: go.theregister.com – Author: Richard Speed Meta has again come under fire for its pay-or-consent model in the EU. The complaint has come from the European...
FortiGate config leaks: Victims’ email addresses published online – Source: go.theregister.com
Source: go.theregister.com – Author: Connor Jones Thousands of email addresses included in the Belsen Group’s dump of FortiGate configs last week are now available online, revealing...
Who is DDoSing you? Rivals, probably, or cheesed-off users – Source: go.theregister.com
Source: go.theregister.com – Author: Jessica Lyons In addition to Chinese spies invading organizations’ networks and ransomware crews locking up sensitive files, botnets blasting distributed denial of...
Biz tax rises, inflation and high interest. Why fewer UK tech firms started in 2024 – Source: go.theregister.com
Source: go.theregister.com – Author: Paul Kunert For the first time since the start of the pandemic, the number of tech firms incorporated in the UK has...
Asus lets processor security fix slip out early, AMD confirms patch in progress – Source: go.theregister.com
Source: go.theregister.com – Author: Iain Thomson AMD has confirmed at least some of its microprocessors suffer a microcode-related security vulnerability, the existence of which accidentally emerged...
Oracle emits 603 patches, names one it wants you to worry about soon – Source: go.theregister.com
Source: go.theregister.com – Author: Iain Thomson Oracle has delivered its regular quarterly collection of patches: 603 in total, 318 for its own products, and another 285...
Trump ‘waved a white flag to Chinese hackers’ as Homeland Security axed cyber advisory boards – Source: go.theregister.com
Source: go.theregister.com – Author: Jessica Lyons The Trump administration gutted key cybersecurity advisory boards in its first days, as expert witnesses warned Congress of potentially destructive...
Supply chain attack hits Chrome extensions, could expose millions – Source: go.theregister.com
Source: go.theregister.com – Author: Connor Jones Cybersecurity outfit Sekoia is warning Chrome users of a supply chain attack targeting browser extension developers that has potentially impacted...
CISOs Dramatically Increase Boardroom Influence but Still Lack Soft Skills – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: CISOs are gaining ground in the boardroom, but many of their C-suite peers believe there’s still work to be done to improve...
Cisco Fixes Critical Vulnerability in Meeting Management – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: Cisco has warned about a new privilege escalation vulnerability in its Meeting Management tool that could allow a remote attacker to gain...
New GhostGPT AI Chatbot Facilitates Malware Creation and Phishing – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: Cybercriminals are selling access to a new malicious generative AI chatbot called GhostGPT. The AI tool is designed to assist with malicious...
Chinese threat actors used two advanced exploit chains to hack Ivanti CSA – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini US agencies revealed Chinese threat actors used two advanced exploit chains to breach Ivanti Cloud Service Appliances (CSA). The US...
Cisco addresses a critical privilege escalation bug in Meeting Management – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Cisco addressed a critical flaw in its Meeting Management that could allow it to gain administrator privileges on vulnerable instances....
U.S. President Donald Trump granted a “full and unconditional pardon” to Ross Ulbricht, Silk Road creator – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Donald Trump pardoned Ross Ulbricht, creator of the notorious dark web, drug marketplace Silk Road , after 11 years in...
Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero-days – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Trend Micro’s Zero Day Initiative (ZDI) announced that $380K was awarded on Day 1 of Pwn2Own Automotive 2025. Trend Micro’s...
Two ransomware groups abuse Microsoft’s Office 365 platform to gain access to target organizations – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Two ransomware groups exploiting Microsoft 365 services and default settings to target internal enterprise users. Sophos researchers started investigating two...
The Cyber Resilience Act: How Manufacturers Can Meet New EU Standards and Strengthen Product Security – Source: www.cyberdefensemagazine.com
Source: www.cyberdefensemagazine.com – Author: News team Cybersecurity has become a leading priority for manufacturers of embedded systems and IoT devices. The rapid proliferation of these technologies,...
Trump Pardons Silk Road Founder Ulbricht – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: Donald Trump has used his presidential powers to pardon convicted felon Ross Ulbricht, the founder of notorious dark web marketplace Silk Road....
PlushDaemon APT Targeted South Korean VPN Software – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: A cyber espionage operation targeting South Korean VPN software was conducted in 2023 by a previously undocumented advanced persistent threat (APT) group,...
Tycoon 2FA Phishing Kit Upgraded to Bypass Security Measures – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: A new version of the phishing kit Tycoon 2FA, which uses advanced tactics to bypass multi factor authentication (MFA) and evade detection,...
Cisco BroadWorks SIP Denial of Service Vulnerability – Source:sec.cloudapps.cisco.com
Source: sec.cloudapps.cisco.com – Author: . Cisco BroadWorks SIP Denial of Service Vulnerability High CVE-2025-20165 CWE-789 Download CSAF Email Summary A vulnerability in the SIP processing subsystem...
UK Mail Check: DMARC Reporting Changes to Know – Source: securityboulevard.com
Source: securityboulevard.com – Author: John Bowers The UK National Cyber Security Centre (NCSC), the country’s technical authority for cyber security, has announced changes to its Mail...
DEF CON 32 – The Village Peoples’ Panel What Really Goes On In A Village – Source: securityboulevard.com
Source: securityboulevard.com – Author: Marc Handelman Wednesday, January 22, 2025 Home » Security Bloggers Network » DEF CON 32 – The Village Peoples’ Panel What Really...
Life in the Swimlane with Marian Fehrenbacher, HR Assistant & Office Manager – Source: securityboulevard.com
Source: securityboulevard.com – Author: Maycie Belmore Welcome to the “Life in the Swimlane” blog series. Here we will feature interviews with Swimlaners to learn more about...
Google Cloud Security Threat Horizons Report #11 Is Out! – Source: securityboulevard.com
Source: securityboulevard.com – Author: Anton Chuvakin This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat...
Randall Munroe’s XKCD ‘Human Altitude’ – Source: securityboulevard.com
Source: securityboulevard.com – Author: Marc Handelman via the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security Bloggers...