Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Security researchers hacked a Tesla Modem and collected awards of $722,500 on the first day of Pwn2Own Automotive 2024 for...
Windows 11 KB5034204 update fixes Bluetooth audio issues, 24 bugs – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Microsoft released the January 2024 preview update for Windows 11 versions 22H2 and 23H2, which comes with Bluetooth audio bug...
Microsoft: Recent updates cause Sysprep Windows validation errors – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Microsoft says admins are seeing 0x80073cf2 errors when using the System Preparation (Sysprep) tool to validate Windows installations for deployment...
Exploit released for Fortra GoAnywhere MFT auth bypass bug – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Exploit code is now available for a critical authentication bypass vulnerability in Fortra’s GoAnywhere MFT (Managed File Transfer) software that...
Water services giant Veolia North America hit by ransomware attack – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Veolia North America, a subsidiary of transnational conglomerate Veolia, disclosed a ransomware attack that impacted systems part of its Municipal Water...
Trello API abused to link email addresses to 15 million accounts – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Lawrence Abrams An exposed Trello API allows linking private email addresses with Trello accounts, enabling the creation of millions of data profiles...
X adds passkeys support for iOS users in the United States – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan X, formerly Twitter, announced today that iOS users in the United States can now log into their accounts using passkeys....
Kasseika ransomware uses antivirus driver to kill other antiviruses – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas A recently uncovered ransomware operation named ‘Kasseika’ has joined the club of threat actors that employs Bring Your Own Vulnerable...
US, UK, Australia sanction REvil hacker behind Medibank data breach – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas The Australian, US, and UK governments have announced sanctions for Aleksandr Gennadievich Ermakov, a Russian national considered responsible for the 2022...
Akira ransomware attack on Tietoevry disrupted the services of many Swedish organizations – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Akira ransomware attack on Tietoevry disrupted the services of many Swedish organizations A ransomware attack against the Finnish IT services...
Splunk fixed high-severity flaw impacting Windows versions – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Splunk fixed high-severity flaw impacting Windows versions Splunk addressed multiple vulnerabilities in Splunk Enterprise, including a high-severity flaw impacting Windows...
Watch out, a new critical flaw affects Fortra GoAnywhere MFT – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Watch out, a new critical flaw affects Fortra GoAnywhere MFT Fortra addressed a new authentication bypass vulnerability impacting GoAnywhere MFT...
Australian government announced sanctions for Medibank hacker – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Australian government announced sanctions for Medibank hacker The Australian government announced sanctions for a member of the REvil ransomware group...
Poisoning AI Models – Source: www.schneier.com
Source: www.schneier.com – Author: Bruce Schneier Poisoning AI Models New research into poisoning AI models: The researchers first trained the AI models using supervised learning and...
Side Channels Are Common – Source: www.schneier.com
Source: www.schneier.com – Author: Bruce Schneier Really interesting research: “Lend Me Your Ear: Passive Remote Physical Side Channels on PCs.” Abstract: We show that built-in sensors...
U.S., U.K., Australia Sanction Russian REvil Hacker Behind Medibank Breach – Source:thehackernews.com
Source: thehackernews.com – Author: . Jan 24, 2024NewsroomCryptocurrency / Cybercrime Governments from Australia, the U.K., and the U.S. have imposed financial sanctions on a Russian national...
Patch Your GoAnywhere MFT Immediately – Critical Flaw Lets Anyone Be Admin – Source:thehackernews.com
Source: thehackernews.com – Author: . Jan 24, 2024NewsroomVulnerability / Endpoint Security A critical security flaw has been disclosed in Fortra’s GoAnywhere Managed File Transfer (MFT) software...
Australian Organisations Struggling to Resolve Tensions Between Personalisation, Privacy – Source: www.techrepublic.com
Source: www.techrepublic.com – Author: Matthew Sainsbury Organisations in Australia face a significant challenge with data. On the one hand, there is a demand for personalised services....
Microsoft Says State-Sponsored Attackers Accessed Senior Leaders’ Emails – Source: www.techrepublic.com
Source: www.techrepublic.com – Author: Megan Crouse Microsoft disclosed on Jan. 19 that a nation-state backed attack occurred beginning in November 2023 in which the Russian state-sponsored...
Cybercrime’s Silent Operator: The Unraveling of VexTrio’s Malicious Network Empire – Source: www.securityweek.com
Source: www.securityweek.com – Author: Kevin Townsend VexTrio is a traffic direction system (TDS) with more than 60 affiliates feeding an unknown number of malicious campaigns. The...
Vulnerabilities in Lamassu Bitcoin ATMs Can Allow Hackers to Drain Wallets – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire Hackers could exploit Lamassu Douro ATM vulnerabilities to take over devices, steal bitcoin from users. The post Vulnerabilities in Lamassu...
AI Testing Startup RagaAI Emerges From Stealth With $4.7M in Seed Funding – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire AI testing platform RagaAI raises $4.7 million in seed funding to help identify AI issues and improve security and reliability....
High-Severity Vulnerability Patched in Splunk Enterprise – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire The latest Splunk Enterprise releases patch multiple vulnerabilities, including a high-severity flaw in the Windows version. The post High-Severity Vulnerability...
Aviation Leasing Giant AerCap Hit by Ransomware Attack – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire AerCap, the largest aviation leasing company in the world, was hit by a ransomware attack on January 17th. The post...
Doppel Secures $14M for AI-Powered Brand Protection Technology – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ryan Naraine San Francisco startup banks $14 million in Series A funding led by prominent venture capital outfit Andreesen Horowitz (a16z). The...
Identity Security Firm Silverfort Lands $116 Million Investment – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ryan Naraine Israeli late-stage startup Silverfort raises a whopping $116 million in new financing to scale its ambitions in the identity security...
SEC Says X Account Hacked via SIM Swapping – Source: www.securityweek.com
Source: www.securityweek.com – Author: Ionut Arghire SEC says hackers used SIM swapping to take over its X (formerly Twitter) account on January 9. The post SEC...
Russian Hackers Suspected of Sweden Cyberattack – Source: www.securityweek.com
Source: www.securityweek.com – Author: AFP Swedish government agencies and shops were disrupted by a ransomware attack believed to have been carried out by Russian hackers. The...
F5 Names Samir Sherif as New CISO – Source: www.securityweek.com
Source: www.securityweek.com – Author: SecurityWeek News F5 names Samir Sherif as Chief Information Security Officer (CISO), taking over the role from Gail Coury who will retire...
CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Deep-Dive – Source: securityboulevard.com
Source: securityboulevard.com – Author: Zach Hanley On January 22, 2024 Fortra posted a security advisory for their GoAnywhere MFT product. This advisory details an authentication bypass...



















