113Articles
9Categories
2023-08-22Date
🚨
CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication fo…
KEV
πŸ›
Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog
KEV
πŸ›
Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software
KEV
πŸ›
Juniper Networks fixes flaws leading to RCE in firewalls and switches
πŸ›
CISA Warns of Another Exploited Adobe ColdFusion Vulnerability
KEV
πŸ›
Ivanti Sentry zero-day vulnerability fixed, patch ASAP! (CVE-2023-38035)
πŸ›
Customer-configured rules now the biggest contributor to mitigated traffic
πŸ›
Ivanti warns customers another zero-day is under active attack
πŸ›
CVE-2023-23382 Azure Machine Learning Compute Instance Information Disclosure Vulnerability
πŸ›
CVE-2023-28312 Azure Machine Learning Information Disclosure Vulnerability
πŸ›
Technical Details of CVE-2023-30988 - IBM Facsimile Support Privilege Escalation
⚠️
8 open-source OSINT tools you should try
⚠️
Understanding how attackers exploit APIs is more important than ever
⚠️
Ivanti Warns of New Actively Exploited Sentry Zero-Day Bug
KEV
⚠️
10 benefits of security performance metrics for CISOs
⚠️
Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog
KEV
⚠️
Balancing risk and compliance: implications of the SEC’s new cybersecurity regulations
⚠️
eSentire introduces LLM Gateway to help businesses secure generative AI
⚠️
Cerby Raises $17 Million for Access Management Platform for Nonstandard Applications
⚠️
Juniper Networks Junos OS let Attacker Remotely Execute Code
⚠️
Apache Ivy Injection Flaw Let Attackers Exfiltrate Sensitive Data
⚠️
TP-Link Smart Bulb Vulnerabilities Expose Households to Hacker Attacks
⚠️
0-Day In Ivanti's Sentry Gateway Actively Exploited
KEV
⚠️
CISA Warns Of Another Exploited Adobe Coldfusion Vulnerability
⚠️
Ivanti Sentry Flaw: Let Attackers Access Critical APIs Used for Configuration
⚠️
CISA Releases Four Industrial Control Systems Advisories
⚠️
Two Data Breaches in Gadsden: Court System, EMS Report That Data May Have Been Stolen
⚠️
Security in a Cloud Native World & Mobile App Attacks - Asaf Ashkenazi, Jason Rolleston - ASW #252
⚠️
Thousands of Android Malware Apps Use Stealthy APKs to Bypass Security
⚠️
Attacking Your Way to Accurate Answers with Breach and Attack Simulation - Tomer Bar - BH23 #2
⚠️
New Zero-Day Bug Affects All Versions of Ivanti Sentry
⚠️
BlackCat Ransomware Group Targets Japanese Watchmaker Seiko
⚠️
Cuba Ransomware Exploits Veeam Vulnerability
⚠️
Adapting tools & tactics to fight modern ransomware
⚠️
News Alert: AVer joins forces with Nureva to deliver seamless, simplified meeting equipment
πŸ“‹
Carderbee Attacks: Hong Kong Organizations Targeted via Malicious Software Updates
πŸ“’
US CISA Urges Security by Design for AI
πŸ“’
Deceptive AI Bots Spread Malware, Raise Security Concerns
πŸ“’
British Intelligence is Tipping off Ransomware Targets to Disrupt Attacks
πŸ“’
Ex-USSS CISO Explains Agencies' Struggle with Biden EO
πŸ“’
Microsoft Edge security advisory (AV23-494)
πŸ“’
[Control systems] Trane Technologies security advisory (AV23-496)
πŸ“’
[Control systems] Hitachi Energy security advisory (AV23-495)
πŸ“’
[Control systems] Rockwell Automation security advisory (AV23-497)
πŸ“’
New Windows 11 policy lets admins control optional updates installation
πŸ”₯
Atmeltomo - 580,177 breached accounts
πŸ”₯
IT’s rising role in physical security technology
πŸ”₯
Australian Lender Latitude Financial Reports $50 Million in Cyberattack Costs
πŸ”₯
Seiko joins growing list of ALPHV/BlackCat ransomware victims
πŸ”₯
French Town of Sartrouville Recovering From Cyberattack Claimed by Ransomware Gang
πŸ”₯
Australian Software Provider Energy One Hit by Cyberattack
πŸ”₯
CISOs Tout SaaS Cybersecurity Confidence, But 79% Admit to SaaS Incidents, New Report Finds
πŸ”₯
Ecuador’s National Election Agency Says Cyberattacks Caused Absentee Voting Issues
πŸ”₯
CyberheistNews Vol 13 #34 [Must Know] Cybercriminals May Already Have Hacked Your LinkedIn Account. How to Secure.
πŸ”₯
Ransomware Group Starts Leaking Data From Japanese Watchmaking Giant Seiko
πŸ”₯
Australian Energy Software Firm Energy One Hit by Cyberattack
πŸ”₯
Enhanced VMware Cloud helps customers modernize, optimize, and protect their businesses
πŸ”₯
One simple way to cut ransomware recovery costs in half
πŸ”₯
One simple way to cut ransomware recovery costs in half
πŸ”₯
Akira ransomware targets Cisco VPNs to breach organizations
πŸ”₯
Akira Ransomware Targets Cisco VPNs to Breach Organizations
πŸ”₯
Tesla Sues 2 Former Employees Over Insider Data Breach
πŸ”₯
Cold Fusion, EncroChat, Apple Device Spoofing, Tesla Breach, Jason Wood & More - SWN #320
πŸ”₯
Discord.io Stops, Azure AD Pops, Zoom AI Drops, Model Confusion Attacks, Early XSS - ASW #252
πŸ”₯
MOVEit Attack Spree Makes Clop This Summer’s Most-Prolific Ransomware Group
πŸ”₯
Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders.
πŸ”₯
The Role Generative AI Can Play in Threat Detection
πŸ”₯
Monti Ransomware Deploying New Linux Encryptor
πŸ”₯
Scarabs colon-izing vulnerable servers
πŸ•΅οΈ
ISC Stormcast For Tuesday, August 22nd, 2023 https://isc.sans.edu/podcastdetail/8626, (Tue, Aug 22nd)
πŸ•΅οΈ
Maintaining consistent security in diverse cloud infrastructures
πŸ•΅οΈ
DotRunpeX Malware Injector Widely Delivers Known Malware Families to Attack Windows
πŸ•΅οΈ
Have You Ever Heard of the Fernet Encryption Algorithm?, (Tue, Aug 22nd)
πŸ•΅οΈ
Cerby Raises $17 Million for Access Management Platform for Nonstandard Applications
πŸ•΅οΈ
Applying AI to License Plate Surveillance
πŸ•΅οΈ
New β€˜Carderbee’ APT Targeted Chinese Security Software in Supply Chain Attack
πŸ•΅οΈ
Grip Security Lands $41 Million Series B Financing
πŸ•΅οΈ
Grip Security raises $41 million to accelerate growth and extend its market
πŸ•΅οΈ
MITRE appoints Deborah Youmans as CIO
πŸ•΅οΈ
US Military Targeted in Recent HiatusRAT Attack
πŸ•΅οΈ
Kyndryl becomes a VMware Cross-Cloud managed services provider
πŸ•΅οΈ
Hacker Conversations: Cris Thomas (AKA Space Rogue) From Lopht Heavy Industries
πŸ•΅οΈ
Supply Side Security: How to Maintain a Talent Pipeline - Helen Patton - CSP #136
πŸ•΅οΈ
Carderbee APT Uses Legitimate Software in Supply Chain Attack Targeting Hong Kong Firms
πŸ•΅οΈ
Carderbee hacking group hits Hong Kong orgs in supply chain attack
πŸ•΅οΈ
Researchers Uncovered the Developer of CypherRAT and CraxsRAT
πŸ•΅οΈ
New HiatusRAT malware attacks target US Defense Department
πŸ•΅οΈ
Scraped data of 2.6 million Duolingo users released on hacking forum
πŸ•΅οΈ
5 security fixes: Chrime Desktop Stable Update
πŸ•΅οΈ
Lemmy community on disinformation
πŸ•΅οΈ
Training Tuesday - Discussions for certs, training and learning-at-home
πŸ•΅οΈ
Unlocking Discord Nitro Features for Free
πŸ•΅οΈ
The Chaos Communication Camp 2023 - 143 videos - ENGLISH and GERMAN
πŸ•΅οΈ
Microsoft has announced Excel will support Python
πŸ•΅οΈ
Track AWS IAM changes in Git with CloudTrail Attribution
🌐
New Variant of XLoader macOS Malware Disguised as 'OfficeNote' Productivity App
🌐
Cerby lands $17M to manage access to β€˜nonstandard’ enterprise apps
🌐
New Variant of XLoader macOS Malware Disguised as 'OfficeNote' Productivity App
🌐
Crypto Botnet On X Is Powered By ChatGPT
🌐
EVLF DEV - Knowing the Creator of CypherRAT and CraxsRAT
πŸ“‘
Police Insider Tipped Off Criminal Friend About EncroChat Bust
πŸ“‘
Rust Developers Push Back as Serde Project Ships Precompiled Binaries
πŸ“‘
TP-Link Smart Bulbs can Let Hackers Steal Your WiFi Password
πŸ“‘
UK Government Urges More Students to be Cyber Explorers
πŸ“‘
Ukrainian Hackers Claim to Leak Emails of Russian Parliament Deputy Chief
πŸ“‘
Grip Security Raises $41 Million to Accelerate Growth and Extend its Market
πŸ“‘
Microsoft Excel to let you run Python scripts as formulas
πŸ“‘
Apple's Defense Against Apps Vandalizing Other Apps Is Still Broken, Developer Claims
πŸ“‘
TP-Link Smart Bulb Vulns Expose Households To Hacker Attacks
πŸ“‘
Snatch Gang Claims the Hack of South Africa's Department of Defense
πŸ“‘
Measures to protect data when an employee leaves
πŸ“‘
Windows 11 KB5029351 preview update released with Search fixes
πŸ“‘
Smart light bulbs could give away your password secrets