98Articles
9Categories
2023-09-18Date
🚨
CISA Adds Eight Known Exploited Vulnerabilities to CatalogCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability CVE-2017-6884 Z…
KEV
🚨
KEV Catalog Reaches 1000, What Does That Mean and What Have We Learned
KEV
🚨
#StopRansomware: Snatch RansomwareSUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically …
KEV
🐛
Microsoft reveals memory corruption bugs in ‘ncurses’ library
🐛
Fortinet Patches High-Severity Vulnerabilities in FortiOS, FortiProxy, FortiWeb Products
⚠️
Retool Falls Victim to SMS-Based Phishing Attack Affecting 27 Cloud Clients
⚠️
The biggest data breach fines, penalties, and settlements so far
⚠️
Several Colombian Government Ministries Hampered by Ransomware Attack at Technology Provider
⚠️
Earth Lusca Employs New Linux Backdoor, Uses Cobalt Strike for Lateral Movement
⚠️
Cyber-related False Claims actions are on the uptick
⚠️
New AMBERSQUID Cryptojacking Operation Targets Uncommon AWS Services
⚠️
Hook: New Android Banking Trojan That Expands on ERMAC's Legacy
⚠️
Microsoft AI researchers accidentally exposed terabytes of internal sensitive data
⚠️
Microsoft mitigated exposure of internal information in a storage account due to overly-permissive SAS token
⚠️
Fortinet Patches High-Severity Vulnerabilities in FortiOS, FortiProxy, FortiWeb Products
⚠️
OT/IoT and OpenTitan, an Open Source Silicon Root of Trust
⚠️
Microsoft leaks 38TB of private data via unsecured Azure storage
⚠️
Earth Lusca Employs New Linux Backdoor, Uses Cobalt Strike for Lateral Movement
⚠️
AWS cryptojacking campaign abuses less-used services to hide
⚠️
Thousands of Juniper devices vulnerable to unauthenticated RCE flaw
⚠️
2023 AT&T Cybersecurity Insights Report: Edge Ecosystem - Theresa Lanowitz, Steve Wint... - BSW #320
📋
Google Extends Security Update Support for Chromebooks to 10 Years
📢
Shelter from the storm – lessons learned from the Storm-0558 Microsoft email attacks
📢
CISA Panel Pitches Idea of a National Cybersecurity Alert System
📢
CISA Releases New Identity and Access Management Guidance
📢
How NIST Cybersecurity Framework 2.0 Tackles Risk Management
📢
Dell security advisory (AV23-559)
📢
Ubuntu security advisory (AV23-558)
📢
IBM security advisory (AV23-560)
📢
2023 AT&T Cybersecurity Insights Report: Edge Ecosystem | Leadership & Communications - BSW #320
📢
CISA Sponsors Hack the Building 2.0 Hospital Competition
📢
Microsoft Edge security advisory (AV23-561)
📢
SprySocks | Lazarus | Fortinet | Juniper | CISA | AI Art | Jason Wood & more – SWN326
🔥
How Equifax Was Breached in 2017
🔥
Financially Motivated UNC3944 Threat Actor Shifts Focus to Ransomware Attacks
🔥
UNC3944 is Now Deploying Ransomware Variants
🔥
More Russian Journalists Investigating Possible Spyware Infections
🔥
Cyber Security Today, Sept. 18, 2023 - How a deepfake voice caused a company to be hacked
🔥
Update: Google Feature Blamed for Retool Breach That Led to Cryptocurrency Firm Hacks
🔥
Blackcat Ransomware Hits Azure Storage With Sphynx Encryptor
🔥
Pentagon’s 2023 Cyber Strategy Focuses on Helping Allies
🔥
TikTok Is Hit With $368 Million Fine Under Europe’s Strict Data Privacy Rules
🔥
Using Hacked LastPass Keys to Steal Cryptocurrency
🔥
ORBCOMM Ransomware Attack Causes Trucking Fleet Management Outage
🔥
CoinEx loses $70 million in cyber attack
🔥
iOS 17 includes these new security and privacy features
🔥
Two Vegas Casinos Fell Victim to Cyberattacks, Shattering the Image of Impenetrable Casino Security
🔥
BlackCat/ALPHV Reportedly Encrypted More Than 100 MGM ESXi Hypervisors
🔥
How Google Authenticator Made One Company's Network Breach Much, Much Worse
🔥
Internet Wide Multi VPN Search From Single /24 Network, (Mon, Sep 18th)
🔥
Are your end-users' passwords compromised? Here's how to check.
🔥
FBI Hacker USDoD Leaks highly Sensitive TransUnion Data
🔥
The International Joint Commission Falls Victim to Ransomware Attack; 80GB Of Data Stolen
🔥
ETH Founder Vitalik Buterin’s X (Twitter) Hacked, $700k Stolen
🔥
UK police officers’ data stolen in cyberattack on ID supplier
🔥
One of the FBI’s most wanted hackers is trolling the U.S. government
🔥
Nuance Notifying 14 NC Healthcare Clients of MOVEit Hacks
🔥
TransUnion Involved in Potential Hacking Incident
🔥
Australian Law Firm Hack Affected 65 Government Agencies
🕵️
Watch out, this LastPass email with "Important information about your account" is a phish
🕵️
ISC Stormcast For Monday, September 18th, 2023 https://isc.sans.edu/podcastdetail/8662, (Mon, Sep 18th)
🕵️
Dragos Raises $74M to Advance OT Protection in Europe, Asia
🕵️
ICS Security Firm Dragos Raises $74 Million in Series D Extension
🕵️
Extradited Russian Hacker Behind ‘NLBrute’ Malware Pleads Guilty
🕵️
Canadian Government Targeted With DDoS Attacks by Pro-Russia Group
🕵️
Multiple Crypto Raids Net Lazarus Group $290m In 15 Weeks
🕵️
Cryptojackers Spread Their Nets To Capture More Than Just EC2
🕵️
Mentorship Monday - Discussions for career and learning!
🕵️
New SprySOCKS Linux malware used in cyber espionage attacks
🕵️
[New PhishER Feature] Immediately Add User-Reported Email Threats to Your M365 Blocklist
🕵️
Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates
🕵️
38TB of data accidentally exposed by Microsoft AI researchers
🕵️
Lazarus APT Stole Almost $240 Million in Crypto Assets Since June
🕵️
Microsoft AI Researchers Expose 38TB of Data, Including Keys, Passwords and Internal Messages
🕵️
How Can FedNow Recruit More US Banks? Lessons From Brazil
🕵️
Revealed: Israeli cyber firms developed an 'insane' new spyware tool. No defense exists
🕵️
US DHS Announces New AI Guardrails
🕵️
Board Members Struggling while Cybersecurity Goals Conflict with Business - BSW #320
🕵️
Sift, LexisNexis Top Digital Fraud Management Forrester Wave
🕵️
APT36 state hackers infect Android devices using YouTube app clones
🕵️
AI Attacks and LLM Security Matters | News - PSW799
🕵️
2024 Security Planning | Making tabletop exercises better! | Enterprise News - ESW332
🕵️
Passkeys | bots | hotels | conning the con | TrendMicro | Pizza | Aaran Leyland & more – SWN327
🌐
Bumblebee malware returns in new attacks abusing WebDAV folders
📡
Latest evolution of ‘pig butchering’ scam lures victim into fake mining scheme
📡
California Settles With Google Over Location Privacy Practices for $93 Million
📡
TikTok Flooded by 'Elon Musk' Cryptocurrency Giveaway Scams
📡
Think Your MFA and PAM Solutions Protect You? Think Again
📡
Fortinet Patches High Severity Vulnerabilities In Multiple Products
📡
Senators Want Clarity From Pentagon On Ukraine Starlink Access Fiasco
📡
How to boost the performance of the whole infosec team | Kaspersky official blog
📡
Clop Gang Stole Data From Major North Carolina Hospitals
📡
CardX Issues Data Leak Notification Impacting Their Customers in Thailand
📡
As Building Blocks for the Digital World, Coding Must be Memory Safe and Secure
📡
Microsoft Paint finally gets support for layers and transparency
📡
Live Webinar | Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication Methods
📡
Windows Subsystem for Linux gets new 'mirrored' network mode
📡
10 tips to ace your cybersecurity job interview