Source: www.securityweek.com – Author: Eduard Kovacs The cybercriminals behind the Qakbot malware have been observed distributing ransomware and backdoors following the recent infrastructure takedown attempt by...
Author:
Sony Confirms Data Stolen in Two Recent Hacker Attacks – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Sony this week shared information on the impact of two recent unrelated hacker attacks believed to have been carried out...
Lyca Mobile Services Significantly Disrupted by Cyberattack – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs International mobile virtual network operator Lyca Mobile has confirmed that its services were significantly disrupted in recent days due to...
Mozilla Warns of Fake Thunderbird Downloads Delivering Ransomware – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Mozilla issued a warning this week over malicious websites offering Thunderbird downloads after a ransomware group was caught using this...
Qualcomm Patches 3 Zero-Days Reported by Google – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs US chip giant Qualcomm this week announced patches for more than two dozen vulnerabilities found in its products, including three...
Critical TorchServe Flaws Could Expose AI Infrastructure of Major Companies – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs A series of critical vulnerabilities impacting a tool called TorchServe could allow threat actors to take complete control of servers...
Cybersecurity M&A Roundup: 28 Deals Announced in September 2023 – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Twenty-eight cybersecurity-related merger and acquisition (M&A) deals were announced in September 2023. An analysis conducted by SecurityWeek shows that more...
Number of Internet-Exposed ICS Drops Below 100,000: Report – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs The number of internet-exposed industrial control systems (ICS) has continued to decrease over the past years, dropping below 100,000 as...
Unpatched Exim Vulnerabilities Expose Many Mail Servers to Attacks – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs The existence of several unpatched vulnerabilities impacting Exim mail transfer agent (MTA) installations was disclosed last week, more than one...
Recently Patched TeamCity Vulnerability Exploited to Hack Servers – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs In-the-wild exploitation of a critical vulnerability in JetBrains’ TeamCity continuous integration and continuous deployment (CI/CD) server started just days after...
CISA Warns of Old JBoss RichFaces Vulnerability Being Exploited in Attacks – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs US cybersecurity agency CISA is warning organizations that an old vulnerability affecting JBoss RichFaces has been exploited in attacks. The...
NIST Publishes Final Version of 800-82r3 OT Security Guide – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs NIST announced on Thursday that it has published the final version of its latest guide to operational technology (OT) security. ...
Johnson Controls Hit by Ransomware – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Building technology giant Johnson Controls has confirmed being hit by a disruptive cyberattack that appears to have been carried out...
Verisoul Raises $3.25 Million in Seed Funding to Detect Fake Users – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Verisoul, an Austin, Texas-based company that has developed a SaaS platform for detecting and blocking fake users, announced on Thursday...
Government Shutdown Could Bench 80% of CISA Staff – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Roughly 80% of the staff at US cybersecurity agency CISA may be sent home at the end of the week...
Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Google has rushed to patch another Chrome zero-day vulnerability exploited by a commercial spyware vendor. The internet giant announced on...
macOS 14 Sonoma Patches 60 Vulnerabilities – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Apple on Tuesday announced the release of macOS 14 Sonoma. A security advisory published by the tech giant shows that...
New GPU Side-Channel Attack Allows Malicious Websites to Steal Data – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Nearly all modern graphics processing units (GPUs) are vulnerable to a new type of side-channel attack that could be leveraged...
Microsoft Adding New Security Features to Windows 11 – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Microsoft on Tuesday announced the new security features that will be available in the latest version of Windows 11. Windows...
Sony Investigating After Hackers Offer to Sell Stolen Data – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Sony has launched an investigation after a cybercrime group claimed to have compromised the company’s systems, offering to sell stolen...
900 US Schools Impacted by MOVEit Hack at National Student Clearinghouse – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs The National Student Clearinghouse, an educational nonprofit that provides reporting, verification, and research services to colleges and universities in North...
Predator Spyware Delivered to iOS, Android Devices via Zero-Days, MitM Attacks – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs The Predator spyware has been delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and man-in-the-middle (MitM)...
China’s Offensive Cyber Operations in Africa Support Soft Power Efforts – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Chinese state-sponsored threat groups have targeted telecommunications, financial and government organizations in Africa in support of Beijing’s soft power agenda...
SANS Survey Shows Drop in 2023 ICS/OT Security Budgets – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs A survey conducted by the SANS Institute shows that the budgets allocated by organizations for the security of industrial control...
Apple Patches 3 Zero-Days Likely Exploited by Spyware Vendor to Hack iPhones – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Apple announced on Thursday that its latest operating system updates patch three new zero-day vulnerabilities. Based on the previous work...
Cisco to Acquire Splunk for $28 Billion – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Cisco on Thursday announced that it has entered into a definitive agreement to acquire data analysis, security and observability solutions...
Car Cybersecurity Study Shows Drop in Critical Vulnerabilities Over Past Decade – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Research-focused security services provider IOActive has conducted an analysis of car vulnerability trends over the past decade and determined that...
Intel Launches New Attestation Service as Part of Trust Authority Portfolio – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Chip giant Intel announced on the second day of its Intel Innovation 2023 event the general availability of an attestation...
Atos Unify Vulnerabilities Could Allow Hackers to Backdoor Systems – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Two vulnerabilities discovered earlier this year in Atos Unify products could allow malicious actors to cause disruption and even backdoor...
SASE Firm Cato Networks Raises $238 Million at $3 Billion Valuation – Source: www.securityweek.com
Source: www.securityweek.com – Author: Eduard Kovacs Secure access service edge (SASE) solutions provider Cato Networks on Tuesday announced raising $238 million in equity investment at a...