MATLOCK.CA
125Articles
9Categories
2023-08-24Date
🚨
More than 3,000 Openfire servers exposed to attacks using a new exploitThe experts pointed out that the bug has been exploited for more than two months, but yet to be added to the CISA KEV catalog. The researchers discovered approximately 6,300 servers on Shodan and a bit more using the Censys search engine.
KEVSECURITYAFFAIRS.COM — 24 Aug 2023
🚨
CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2023- 38831 RARLAB WinRAR Code Execution Vulnerability CVE-2023- 32315 Ignite Realtime Openfire Path Traversal Vulnerability These types of vulner…
KEVCISA.GOV — Thu, 24 Aug 23 1
🐛
GroundPeony Group Exploiting Zero-day Flaw to Attack Government Agencies
GBHACKERS.COM — 24 Aug 2023
🐛
Thousands of Unpatched Openfire XMPP Servers Still Exposed to High-Severity Flaw
THEHACKERNEWS.COM — 24 Aug 2023
🐛
WinRAR Security Flaw Exploited in Zero-Day Attacks to Target Traders
THEHACKERNEWS.COM — 24 Aug 2023
🐛
Hackers use public ManageEngine exploit to breach internet org
BLEEPINGCOMPUTER.COM — 24 Aug 2023
🐛
FBI: Patches for Recent Barracuda ESG Zero-Day Ineffective
SECURITYWEEK.COM — 24 Aug 2023
🐛
CVE-2023-30943 - Playing Dominos with Moodle's Security (1/2)
SONARSOURCE.COM — 24 Aug 2023
🐛
Ivanti Sentry Authentication Bypass CVE-2023-38035 Deep-Dive, IOCs, and Exploit POC
HORIZON3.AI — 24 Aug 2023
⚠️
Managing Bug Bounty Programs At Scale - Dr. Jared DeMott - PSW #796
YOUTUBE.COM — 2023-08-24
⚠️
Webinar: The external attack surface & AI’s role in proactive security
HELPNETSECURITY.COM — 24 Aug 2023
⚠️
Lack of visibility into cloud access policies leaves enterprises flying blind
HELPNETSECURITY.COM — 24 Aug 2023
⚠️
Threat Actors Leverage LLMs-related Facebook Ads to Steal Credentials
CYWARE.COM — 24 Aug 2023
⚠️
Bitwarden launches E2EE Secrets Manager
HELPNETSECURITY.COM — 24 Aug 2023
⚠️
Specialized third-party solutions prove effective against malicious bots, ATO attacks, script risks
CSOONLINE.COM — 24 Aug 2023
⚠️
NoFilter: Tool that Escalates Privilege Abusing Windows Filtering Platform
GBHACKERS.COM — 24 Aug 2023
⚠️
UK court finds teenagers guilty of carrying out LAPSUS$ hacking spree
KEVCSOONLINE.COM — 24 Aug 2023
⚠️
Traders Targeted by Cybercriminals in Attack Exploiting WinRAR Zero-Day
SECURITYWEEK.COM — 24 Aug 2023
⚠️
Bugs in NVIDIA Graphics Driver Leads to Memory Corruption
TALOSINTELLIGENCE.COM — 24 Aug 2023
⚠️
Ermetic CNAPP available on Google Cloud Marketplace
HELPNETSECURITY.COM — 24 Aug 2023
⚠️
What are Brute Force Attacks, and How to Protect Your APIs Against them?
GBHACKERS.COM — 24 Aug 2023
⚠️
Lessons learned from the Microsoft Cloud breach
SECURITYINTELLIGENCE.COM — 24 Aug 2023
⚠️
ImmuniWeb releases Mobile Neuron to scan for OWASP Mobile Top 10 vulnerabilities, iOS/Android weaknesses
CSOONLINE.COM — 24 Aug 2023
⚠️
Lazarus Group Exploits ManageEngine Vulnerability to Deploy QuiteRAT
TALOSINTELLIGENCE.COM — 24 Aug 2023
⚠️
Talon unveils digital experience capabilities, equipping IT teams with advanced metrics
HELPNETSECURITY.COM — 24 Aug 2023
⚠️
WinRAR 0-Day That Uses Poisoned JPG And TXT Files Under Exploit Since April
PACKETSTORMSECURITY.COM — 24 Aug 2023
⚠️
FBI: Patches For Recent Barracuda ESG Zero-Day Ineffective
PACKETSTORMSECURITY.COM — 24 Aug 2023
⚠️
Kingston IronKey Keypad 200C hardware-encrypted USB Type-C drive released
HELPNETSECURITY.COM — 24 Aug 2023
⚠️
Exploit released for Ivanti Sentry bug abused as zero-day in attacks
BLEEPINGCOMPUTER.COM — 24 Aug 2023
⚠️
Cyberattack disrupts major Mississippi health system
SCMAGAZINE.COM — 24 Aug 2023
⚠️
Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware
THEHACKERNEWS.COM — 24 Aug 2023
⚠️
CISA Releases Six Industrial Control Systems Advisories
CISA.GOV — Thu, 24 Aug 23 1
⚠️
The delta between perception and preparedness
CSOONLINE.COM — 24 Aug 2023
⚠️
Webshells: Why an old tactic is still relevant
KEVCSOONLINE.COM — 24 Aug 2023
⚠️
Jupiter X Core WordPress plugin could let hackers hijack sites
BLEEPINGCOMPUTER.COM — 24 Aug 2023
⚠️
Court finds autistic members of LAPSUS$ gang responsible for GTA 6 hack and other high profile breaches
BITDEFENDER.COM — 24 Aug 2023
⚠️
Mississippi Hospital System Still Struggling With Attack
DATABREACHTODAY.CO.UK — 2023-08-24
⚠️
Flax Typhoon using legitimate software to quietly access Taiwanese organizations
MICROSOFT.COM — 24 Aug 2023
⚠️
Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop
ERRNO.FR — 24 Aug 2023
⚠️
Why Decentralization is the Only Way to Prevent Cybersecurity Breaches?
PROGRAMMING.DEV — 24 Aug 2023
⚠️
Deep dive into the recent bugs in the NVMe protocol and the impact on cloud providers and on-premises servers.
CYBERARK.COM — 24 Aug 2023
⚠️
Changes to UK Surveillance Regime May Violate International Law
JUSTSECURITY.ORG — 24 Aug 2023
⚠️
Learn how to protect your data and systems from upstream and Side Channel attacks with the Clean Source principle and Azure solutions. Discover the power of PAW and Confidential Compute
GITHUB.COM — 24 Aug 2023
📢
How digital identity protects connected cars
HELPNETSECURITY.COM — 24 Aug 2023
📢
ImmuniWeb introduces ImmuniWeb Neuron Mobile, an automated mobile app security testing solution
HELPNETSECURITY.COM — 24 Aug 2023
📢
DarkGate Reloaded via Malvertising and SEO Poisoning Campaigns
MALWAREBYTES.COM — 24 Aug 2023
📢
Cypago, which aims to automate compliance and governance for companies, raises $13M
TECHCRUNCH.COM — 24 Aug 2023
📢
Cisco security advisory (AV23-500)
CYBER.GC.CA — 2023-08-24
📢
Trulioo enhances identity verification with “person match” intelligent routing
CSOONLINE.COM — 24 Aug 2023
📢
NIST publishes draft post-quantum cryptography standards, calls for industry feedback
CSOONLINE.COM — 24 Aug 2023
📢
[Control systems] Opto 22 security advisory (AV23-502)
CYBER.GC.CA — 2023-08-24
📢
[Control systems] KNX Association security advisory (AV23-501)
CYBER.GC.CA — 2023-08-24
📢
[Control systems] Rockwell Automation security advisory (AV23-504)
CYBER.GC.CA — 2023-08-24
📢
[Control systems] CODESYS security advisory (AV23-503)
CYBER.GC.CA — 2023-08-24
📢
Record startup funding, identity and context, and the Hot Ones format comes to Cyber! - ESW #329
YOUTUBE.COM — 2023-08-24
📢
Insights from a CISO Survival Guide
CSOONLINE.COM — 24 Aug 2023
🔥
How to spot phishing on a hacked WordPress website | Kaspersky official blog
KASPERSKY.COM — 24 Aug 2023
🔥
SpyCloud raises $110 million to accelerate identity threat protection
HELPNETSECURITY.COM — 24 Aug 2023
🔥
Hosting Provider CloudNordic Loses All Customer Data in Ransomware Attack
SECURITYWEEK.COM — 24 Aug 2023
🔥
UK Court Concludes Teenager Behind Huge Hacking Campaign
SECURITYWEEK.COM — 24 Aug 2023
🔥
Transatlantic Cable podcast, episode 313 | Kaspersky official blog
KASPERSKY.COM — 24 Aug 2023
🔥
New "Whiffy Recon" Malware Triangulates Infected Device Location via Wi-Fi Every Minute
THEHACKERNEWS.COM — 24 Aug 2023
🔥
St Helens Council Warns of Phishing After Ransomware Breach
INFOSECURITY-MAGAZINE.COM — 24 Aug 2023
🔥
Cloud hosting firms hit by devastating ransomware attack
HELPNETSECURITY.COM — 24 Aug 2023
🔥
Title Lender TMX Now Says Payment Card Data Stolen in Breach
DATABREACHTODAY.CO.UK — 2023-08-24
🔥
6 Ransomware Trends & Evolutions to Watch For
TRENDMICRO.COM — 24 Aug 2023
🔥
Millions stolen from crypto platforms Exactly Protocol and Harbor Protocol
THERECORD.MEDIA — 24 Aug 2023
🔥
Sensitive Data of 10m at Risk After French Employment Agency Breach
INFOSECURITY-MAGAZINE.COM — 24 Aug 2023
🔥
Cryptohack Roundup: Tornado Cash in the Eye of the Storm
DATABREACHTODAY.CO.UK — 2023-08-24
🔥
Ransomware hackers dwell time drops to 5 days, RDP still widely used
BLEEPINGCOMPUTER.COM — 24 Aug 2023
🔥
University of Minnesota Confirms Data Breach, Says Ransomware Not Involved
SECURITYWEEK.COM — 24 Aug 2023
🔥
FBI warns of patched Barracuda ESG appliances still being hacked
BLEEPINGCOMPUTER.COM — 24 Aug 2023
🔥
Breach Roundup: Rhysida Ransom Gang Cops to Hospital Hacks
DATABREACHTODAY.CO.UK — 2023-08-24
🔥
Ransomware Economy Players, Pentest War Stories, & Ransomware Groups Working Together - ESW #329
YOUTUBE.COM — 2023-08-24
🔥
SevenRooms - 1,205,385 breached accounts
HAVEIBEENPWNED.COM — 24 Aug 2023
🔥
Scarab Ransomware Deployed Using SpaceColon Toolkit
DATABREACHTODAY.CO.UK — 2023-08-24
🕵️
How I made a qwerty ?keyboard walk? password generator with ChatGPT [Guest Diary], (Wed, Aug 23rd)
ISC.SANS.EDU — 24 Aug 2023
🕵️
ISC Stormcast For Thursday, August 24th, 2023 https://isc.sans.edu/podcastdetail/8630, (Thu, Aug 24th)
ISC.SANS.EDU — 24 Aug 2023
🕵️
AI and the evolution of surveillance systems
HELPNETSECURITY.COM — 24 Aug 2023
🕵️
Does a secure coding training platform really work?
HELPNETSECURITY.COM — 24 Aug 2023
🕵️
Kali Linux 2023.3 released: Major overhaul of Kali Autopilot, 9 new tools, and more!
HELPNETSECURITY.COM — 24 Aug 2023
🕵️
FBI Urges Immediate Removal of Patched Barracuda ESG Devices
DATABREACHTODAY.CO.UK — 2023-08-24
🕵️
Kali Linux 2023.3 Released: What’s New!
GBHACKERS.COM — 24 Aug 2023
🕵️
Russian Toolkit Aims to Make Online Scamming Easy for Anyone
DATABREACHTODAY.CO.UK — 2023-08-24
🕵️
Digital Identity Protection Firm SpyCloud Raises $110 Million
SECURITYWEEK.COM — 24 Aug 2023
🕵️
Simplify Secure Enterprise Device Management With QR Codes
GBHACKERS.COM — 24 Aug 2023
🕵️
Parmesan Anti-Forgery Protection
SCHNEIER.COM — 2023-08-24
🕵️
nao-sec.org
NAO-SEC.ORG — 24 Aug 2023
🕵️
Rockwell ThinManager Vulnerabilities Could Expose Industrial HMIs to Attacks
SECURITYWEEK.COM — 24 Aug 2023
🕵️
New Telegram Bot "Telekopye" Powering Large-scale Phishing Scams from Russia
THEHACKERNEWS.COM — 24 Aug 2023
🕵️
Duolingo Users Should Be on the Lookout for Targeted Phishing Attacks
KNOWBE4.COM — 24 Aug 2023
🕵️
New Relic enhances its AIOps capabilities with recommended alerts
HELPNETSECURITY.COM — 24 Aug 2023
🕵️
Lora Projects, WinRAR, Kali Mobile, Benchmarks Vs. IRL, & VPN HYPE! - PSW #796
YOUTUBE.COM — 2023-08-24
🕵️
Telekopye: Hunting Mammoths using Telegram bot
WELIVESECURITY.COM — 24 Aug 2023
🕵️
Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks
SECURITYWEEK.COM — 24 Aug 2023
🕵️
Mysterious Malware Uses Wi-Fi Scanning to Get Location of Infected Device
SECURITYWEEK.COM — 24 Aug 2023
🕵️
Wireshark 4.0.8 Release: What’s New!
GBHACKERS.COM — 24 Aug 2023
🕵️
NETGEAR launches PR60X Pro Router
HELPNETSECURITY.COM — 24 Aug 2023
🕵️
North Korea ready to cash out more than $40 million in Bitcoin after summer of hacks, warns FBI
TRIPWIRE.COM — 24 Aug 2023
🕵️
Tackling the Perennial Problem | Enterprise News | Black Hat Executive Interviews - ESW329
YOUTUBE.COM — 2023-08-24
🕵️
Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint
SECURITYWEEK.COM — 24 Aug 2023
🕵️
Tackling the Perennial Problem of Device Management - Jason Meller - ESW #329
YOUTUBE.COM — 2023-08-24
🕵️
BSides Perth 2023 - 17 videos
YOUTUBE.COM — 24 Aug 2023
🕵️
Devoxx Greece 2023 - 71 videos - ENGLISH language
YOUTUBE.COM — 24 Aug 2023
🕵️
Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop
ERRNO.FR — 24 Aug 2023
🕵️
Frosty Trails: Threat-Hunting For Identity Threats In Snowflake Snowflake
REZONATE.IO — 24 Aug 2023
🕵️
News alert: Cypago unveils Cyber GRC Automation (CGA) platform to simplify GRC processes
LASTWATCHDOG.COM — 24 Aug 2023
🌐
Safe Online Surfing Launching for 2023-2024 School Year | Federal Bureau of Investigation
FBI.GOV — 24 Aug 2023
🌐
HP Report Details Tactics Used to Evade Detection Tools
SECURITYBOULEVARD.COM — 24 Aug 2023
🌐
National intelligence office issues cyber warning for government and commercial satellites
NEXTGOV.COM — 24 Aug 2023
🌐
Smoke Loader Drops Whiffy Recon Wi-Fi Scanning and Geolocation Malware
SECUREWORKS.COM — 24 Aug 2023
🌐
New Whiffy Recon malware uses WiFi to triangulate your location
BLEEPINGCOMPUTER.COM — 24 Aug 2023
🎙️
S3 Ep149: How many cryptographers does it take to change a light bulb?
NAKEDSECURITY.SOPHOS.COM — 24 Aug 2023
📡
OT and IT Visibility and Efficiency Barriers
TRENDMICRO.COM — 24 Aug 2023
📡
Tornado Cash Founders Charged in Billion-Dollar Crypto Laundering Scandal
THEHACKERNEWS.COM — 24 Aug 2023
📡
Brazil’s Top Escort Service Exposes Millions of Escort and Client Data
HACKREAD.COM — 24 Aug 2023
📡
Redline Stealer Demonstrates a Low-Barrier-to-Entry Threat
ECLECTICIQ.COM — 24 Aug 2023
📡
The Hidden Dangers of Public Wi-Fi
THEHACKERNEWS.COM — 24 Aug 2023
📡
Rockwell ThinManager Vulns Could Expose Industrial HMIs To Attacks
PACKETSTORMSECURITY.COM — 24 Aug 2023
📡
Tornado Cash Crypto Mixer Devs Charged With Money Laundering
PACKETSTORMSECURITY.COM — 24 Aug 2023
📡
Last call for mWISE, the security conference for frontline practitioners.
BLEEPINGCOMPUTER.COM — 24 Aug 2023
📡
New Windows updates cause UNSUPPORTED_PROCESSOR blue screens
BLEEPINGCOMPUTER.COM — 24 Aug 2023
📡
Telekopye: Hunting Mammoths using Telegram bot
WELIVESECURITY.COM — 24 Aug 2023
📡
Sensor Intel Series: Top CVEs in July 2023
F5.COM — 24 Aug 2023
📡
Sensor Intel Series: Top CVEs in July 2023
F5.COM — 24 Aug 2023