MATLOCK.CA
131Articles
8Categories
2023-08-21Date
🚨
CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability These types of vulnerabilities are frequent attack vectors for malicious…
KEVCISA.GOV — Mon, 21 Aug 23 1
🐛
WinRAR vulnerable to remote code execution, patch now! (CVE-2023-40477)
HELPNETSECURITY.COM — 21 Aug 2023
🐛
Cuba Ransomware Expands Horizons: New Industries, New Tools
CYWARE.COM — 21 Aug 2023
🐛
New WinRAR Vulnerability Could Allow Hackers to Take Control of Your PC
THEHACKERNEWS.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-2312 Use after free in Offline
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4349 Use after free in Device Trust Connectors
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4350 Inappropriate implementation in Fullscreen
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4351 Use after free in Network
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4352 Type Confusion in V8
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4353 Heap buffer overflow in ANGLE
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4354 Heap buffer overflow in Skia
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4355 Out of bounds memory access in V8
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4356 Use after free in Audio
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4357 Insufficient validation of untrusted input in XML
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4358 Use after free in DNS
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4359 Inappropriate implementation in App Launcher
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4360 Inappropriate implementation in Color
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4361 Inappropriate implementation in Autofill
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4362 Heap buffer overflow in Mojom IDL
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4363 Inappropriate implementation in WebShare
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4364 Inappropriate implementation in Permission Prompts
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4365 Inappropriate implementation in Fullscreen
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4366 Use after free in Extensions
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4367 Insufficient policy enforcement in Extensions API
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
Chromium: CVE-2023-4368 Insufficient policy enforcement in Extensions API
MSRC.MICROSOFT.COM — 21 Aug 2023
🐛
WinRAR users urged to upgrade to fix critical vulnerabilities
CSOONLINE.COM — 21 Aug 2023
🐛
CVE Report for Damn Vulnerable Web Application (DVWA)
NVD.NIST.GOV — 21 Aug 2023
⚠️
How EU lawmakers can make mandatory vulnerability disclosure responsible
HELPNETSECURITY.COM — 21 Aug 2023
⚠️
Cisco Patches High-Severity Vulnerabilities in Enterprise Applications
SECURITYWEEK.COM — 21 Aug 2023
⚠️
Four Juniper Junos OS Flaws can be Chained to Remotely Hack Devices
SECURITYAFFAIRS.COM — 21 Aug 2023
⚠️
Tasks that bog down security teams (and what to do about them)
CSOONLINE.COM — 21 Aug 2023
⚠️
Are you prepared for the rise of the artificial intelligence CISO?
CSOONLINE.COM — 21 Aug 2023
⚠️
Tesla Discloses Data Breach Related to Whistleblower Leak
SECURITYWEEK.COM — 21 Aug 2023
⚠️
Fighting API Bots with Cloudflare's Invisible Turnstile
TROYHUNT.COM — 21 Aug 2023
⚠️
How EU Lawmakers Can Make Mandatory Vulnerability Disclosure Responsible
HELPNETSECURITY.COM — 21 Aug 2023
⚠️
Cybersecurity Study Reveals Web App Vulnerability Crisis
INFOSECURITY-MAGAZINE.COM — 21 Aug 2023
⚠️
Flaws in Juniper Switches and Firewalls Can Be Chained for Remote Code Execution
SECURITYWEEK.COM — 21 Aug 2023
⚠️
Google Brings AI Magic to Fuzz Testing With Eye-Opening Results
SECURITYWEEK.COM — 21 Aug 2023
⚠️
US Gov Warns of Foreign Intelligence Cyberattacks Against US Space Industry
SECURITYWEEK.COM — 21 Aug 2023
⚠️
Japanese watchmaker Seiko breached by BlackCat ransomware gang
BLEEPINGCOMPUTER.COM — 21 Aug 2023
⚠️
Why Managed File Transfer Products Are a Hacker's Paradise
DATABREACHTODAY.CO.UK — 2023-08-21
⚠️
Ivanti warns of new actively exploited MobileIron zero-day bug
KEVBLEEPINGCOMPUTER.COM — 21 Aug 2023
⚠️
CISA, NSA, and NIST Publish Factsheet on Quantum Readiness
CISA.GOV — Mon, 21 Aug 23 1
⚠️
CISA, NSA and NIST Publish New Resource for Migrating to Post-Quantum Cryptography
CISA.GOV — Mon, 21 Aug 23 1
⚠️
Ransomware Attacks Trends/Impacts & Using Generative AI to Up Your Cyberdefenses - BSW #317
YOUTUBE.COM — 2023-08-21
⚠️
Ivanti Ships Urgent Patch for API Authentication Bypass Vulnerability
SECURITYWEEK.COM — 21 Aug 2023
⚠️
News Alert: airSlate partners with Forthright to launch automated business-efficiency, workflow tool
LASTWATCHDOG.COM — 21 Aug 2023
⚠️
mTLS: When certificate authentication is done wrong
GITHUB.BLOG — 21 Aug 2023
⚠️
Vulnerability Summary for the Week of August 14, 2023
CISA.GOV — 21 Aug 2023
⚠️
Ford SYNC 3 infotainment vulnerable to Wi-Fi hijacking
GO.THEREGISTER.COM — 21 Aug 2023
⚠️
Breaking Secure Boot on the Silicon Labs Gecko platform
QUARKSLAB.COM — 2023-08-21
📢
The future of SIEM: Embracing predictive analytics
SECURITYINTELLIGENCE.COM — 21 Aug 2023
📢
Australia’s .AU Domain Administrator Denies Data Breach After Ransomware Posting
THERECORD.MEDIA — 21 Aug 2023
📢
Federally Insured Credit Unions Required to Report Cyber Incidents Within 72 Hours
SECURITYWEEK.COM — 21 Aug 2023
📢
CISA Hiring Hits High Score, and We're Not Done!!
CISA.GOV — Mon, 21 Aug 23 1
📢
Ex-USSS CISO Explains Agencies' Struggle with Biden EO
TRENDMICRO.COM — 21 Aug 2023
📢
Dell security advisory (AV23-490)
CYBER.GC.CA — 2023-08-21
📢
IBM security advisory (AV23-491)
CYBER.GC.CA — 2023-08-21
📢
Ubuntu security advisory (AV23-492)
CYBER.GC.CA — 2023-08-21
📢
Ivanti security advisory (AV23-493)
CYBER.GC.CA — 2023-08-21
📢
US CISA Urges Security by Design for AI
DATABREACHTODAY.CO.UK — 2023-08-21
🔥
Network detection and response in the modern era
HELPNETSECURITY.COM — 21 Aug 2023
🔥
Cyber Security Today, August 21, 2023 - The latest ransomware news, and security patches issued by Cisco, Juniper and Jenkins
CYBERSECURITYTODAY.LIBSYN.COM — 21 Aug 2023
🔥
This Malware Turned Thousands of Hacked Windows and macOS PCs into Proxy Servers
THEHACKERNEWS.COM — 21 Aug 2023
🔥
US Agencies Warn of Cyberattacks on Space Industry by Foreign Intelligence Entities
BANKINFOSECURITY.COM — 21 Aug 2023
🔥
Telsa data breach caused by ‘insider wrongdoing’
CSHUB.COM — 21 Aug 2023
🔥
Tesla says data breach impacting 75,000 employees was an insider job
TECHCRUNCH.COM — 21 Aug 2023
🔥
[Eye-Opening] Increase of Phishing Attacks in Australia Should Alarm Organizations
KNOWBE4.COM — 21 Aug 2023
🔥
Australian Lender Latitude Financial Reports AU$76 Million Cyberattack Costs
SECURITYWEEK.COM — 21 Aug 2023
🔥
Tesla Discloses Data Breach Impacting 75,000 People's Personal Information
SECURITYWEEK.COM — 21 Aug 2023
🔥
The Hidden Benefits of Negotiating With Ransomware Attackers
DATABREACHTODAY.CO.UK — 2023-08-21
🔥
Japanese Watchmaker Seiko Breached by BlackCat Ransomware Gang
BLEEPINGCOMPUTER.COM — 21 Aug 2023
🔥
Donald's Patriot Legal Defense Fund Site Got Hacked
PACKETSTORMSECURITY.COM — 21 Aug 2023
🔥
Entering the 3rd week of real estate software provider Rapattoni's supposed ransomware attack
ARSTECHNICA.COM — 21 Aug 2023
🔥
Leak of 75k staff records was insiders' fault, Tesla claims
GO.THEREGISTER.COM — 21 Aug 2023
🔥
Largest switching and terminal railroad in US investigating ransomware data theft
THERECORD.MEDIA — 21 Aug 2023
🕵️
The complex world of CISO responsibilities
HELPNETSECURITY.COM — 21 Aug 2023
🕵️
ISC Stormcast For Monday, August 21st, 2023 https://isc.sans.edu/podcastdetail/8624, (Mon, Aug 21st)
ISC.SANS.EDU — 21 Aug 2023
🕵️
Organizations invest in AI tools to elevate email security
HELPNETSECURITY.COM — 21 Aug 2023
🕵️
HiatusRAT Malware Resurfaces: Taiwan Firms and U.S. Military Under Attack
THEHACKERNEWS.COM — 21 Aug 2023
🕵️
Quick Malware Triage With Inotify Tools, (Mon, Aug 21st)
ISC.SANS.EDU — 21 Aug 2023
🕵️
Chrome will tell users when extensions they use are removed from Chrome Web Store
HELPNETSECURITY.COM — 21 Aug 2023
🕵️
White House Announces AI Cybersecurity Challenge
SCHNEIER.COM — 2023-08-21
🕵️
Brazilian Hacker Claims Bolsonaro Asked Him to Hack Into the Voting System Ahead of 2022 Vote
SECURITYWEEK.COM — 21 Aug 2023
🕵️
Suspected North Korean Hackers Target Joint Military Exercise Between South Korea and the US
SECURITYWEEK.COM — 21 Aug 2023
🕵️
Webinar Tomorrow:  ZTNA Superpowers CISOs Should Know
SECURITYWEEK.COM — 21 Aug 2023
🕵️
Brazen Malware Operation Targets Taiwanese Firms and U.S. Military Procurement System
THEHACKERNEWS.COM — 21 Aug 2023
🕵️
Overcoming the Inertia of Assessing and Securing APIs
DATABREACHTODAY.CO.UK — 2023-08-21
🕵️
3,000+ Android Malware Using Unique Compression Methods to Avoid Detection
GBHACKERS.COM — 21 Aug 2023
🕵️
Interpol Arrested 14 cybercriminals and uncovered 20,674 suspicious cyber networks
GBHACKERS.COM — 21 Aug 2023
🕵️
VersaAI delivers AI-assisted enhancements across the Versa Networks portfolio
HELPNETSECURITY.COM — 21 Aug 2023
🕵️
Researchers Uncover Real Identity of CypherRAT and CraxsRAT Malware Developer
SECURITYWEEK.COM — 21 Aug 2023
🕵️
The Only Leader in Single-Vendor SASE. Period.
PALOALTONETWORKS.COM — 21 Aug 2023
🕵️
Researchers Uncover Real Identity of CypherRAT and CraxsRAT Malware Developer
SECURITYWEEK.COM — 21 Aug 2023
🕵️
Zero Authority: Future of Security and Business Enablement
DATABREACHTODAY.CO.UK — 2023-08-21
🕵️
HiatusRAT Returns after a Hiatus in a Fresh Wave of Attacks
CYWARE.COM — 21 Aug 2023
🕵️
Security Money: The Index is Still Trying to Recover | Black Hat Executive Interviews - BSW #317
YOUTUBE.COM — 2023-08-21
🕵️
Researchers Spoof an Apple Device and Trick Users Into Sharing Sensitive Data
SECURITYAFFAIRS.COM — 21 Aug 2023
🕵️
GUEST ESSAY: Lessons to be learned from the waves of BofA phone number spoofing scams
LASTWATCHDOG.COM — 21 Aug 2023
🕵️
Security Money: The Index is Still Trying to Recover - BSW #317
YOUTUBE.COM — 2023-08-21
🕵️
UK Competition Regulator Clears Broadcom, VMware Merger
DATABREACHTODAY.CO.UK — 2023-08-21
🕵️
SIEM and SOAR in 2023: Key trends and new changes
SECURITYINTELLIGENCE.COM — 21 Aug 2023
🕵️
ColdFusion | EncroChat | Ivanti | Sneaky Amazon | Spoofing Apple | Jason Wood & more – SWN320
YOUTUBE.COM — 2023-08-21
🕵️
Managing Bug Bounty Programs At Scale | News - PSW796
YOUTUBE.COM — 2023-08-21
🕵️
Tackling the Perennial Problem | Enterprise News | Black Hat Executive Interviews - ESW329
YOUTUBE.COM — 2023-08-21
🕵️
Openfire | Firepower | Barracuda | CosmicBeetle | Encryption | Aaran Leyland & more – SWN321
YOUTUBE.COM — 2023-08-21
🕵️
Mentorship Monday - Discussions for career and learning!
INFOSEC.PUB — 21 Aug 2023
🕵️
Threat Hunting Newsletter
MARCUSEDMONDSON.SUBSTACK.COM — 21 Aug 2023
🕵️
WinRAR vuln could allow code to run when files are opened
THEREGISTER.COM — 21 Aug 2023
🕵️
Alarm raised over broken authorization in Mozilla VPN client
THEREGISTER.COM — 21 Aug 2023
🕵️
“Please do not make it public”: Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping
CITIZENLAB.CA — 21 Aug 2023
🕵️
Hackers Rig Casino Card-Shuffling Machines for ‘Full Control’ Cheating
WEB.ARCHIVE.ORG — 21 Aug 2023
🕵️
TunnelCrack attack may cause vulnerable VPNs to leak traffic
THEREGISTER.COM — 21 Aug 2023
🕵️
An Apple Malware-Flagging Tool Is ‘Trivially’ Easy to Bypass
WIRED.COM — 21 Aug 2023
🕵️
Google paves way for FIDO2 security keys that can resist quantum computer attacks
ZDNET.COM — 21 Aug 2023
🌐
Israel, US to Invest $4 Million in Critical Infrastructure Security Projects
SECURITYWEEK.COM — 21 Aug 2023
🌐
Turns Out AI Probably Isn’t Very Good at Writing Malware
THEREGISTER.COM — 21 Aug 2023
🌐
Google Chrome's New Feature Alerts Users About Auto-Removal of Malicious Extensions
THEHACKERNEWS.COM — 21 Aug 2023
🌐
CypherRAT And CraxsRAT Malware Developer Identified
PACKETSTORMSECURITY.COM — 21 Aug 2023
🌐
A Bard’s Tale – how fake AI bots try to install malware
WELIVESECURITY.COM — 21 Aug 2023
📡
Jenkins Patches High-Severity Vulnerabilities in Multiple Plugins
SECURITYWEEK.COM — 21 Aug 2023
📡
ProjectDiscovery Raises $25M to Launch a Cloud Version of Its Threat-Scanning Platform
TECHCRUNCH.COM — 21 Aug 2023
📡
How to Investigate an OAuth Grant for Suspicious Activity or Overly Permissive Scopes
THEHACKERNEWS.COM — 21 Aug 2023
📡
Interpol Arrests 14 Who Scammed $40m From Victims In Cyber Surge
PACKETSTORMSECURITY.COM — 21 Aug 2023
📡
WinRAR Hit With High Severity Code Execution Flaw
PACKETSTORMSECURITY.COM — 21 Aug 2023
📡
Ongoing Duo outage causes Azure Auth authentication errors
BLEEPINGCOMPUTER.COM — 21 Aug 2023
📡
Built-in authenticator in Kaspersky Password Manager | Kaspersky official blog
KASPERSKY.COM — 21 Aug 2023
📡
“Snakes in airplane mode” – what if your phone says it’s offline but isn’t?
NAKEDSECURITY.SOPHOS.COM — 21 Aug 2023
📡
Sneaky Amazon Google ad leads to Microsoft support scam
BLEEPINGCOMPUTER.COM — 21 Aug 2023
📡
Sneaky Amazon Google Ad Leads to Microsoft Support Scam
BLEEPINGCOMPUTER.COM — 21 Aug 2023
📡
TP-Link smart bulbs can let hackers steal your WiFi password
BLEEPINGCOMPUTER.COM — 21 Aug 2023