97Articles
8Categories
2023-09-19Date
🚨
CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2023-28434 MinIO Security Feature Bypass Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pos…
KEV
🐛
Thousands of Juniper Devices Vulnerable to Unauthenticated RCE Flaw
🐛
Over 12,000 Juniper Firewalls Found Vulnerable to Recently Disclosed RCE Vulnerability
🐛
Trend Micro Patches Exploited Zero-Day Vulnerability in Endpoint Security Products
⚠️
Microsoft AI Researchers Accidentally Expose 38 Terabytes of Confidential Data
⚠️
6 notable API security initiatives launched in 2023
⚠️
CISA Says Owl Labs Vulnerabilities Requiring Close Physical Range Exploited in Attacks
⚠️
Sources: CrowdStrike will announce its Bionic.ai acquisition for $350M today
⚠️
Thousands of Juniper Appliances Vulnerable to New Exploit
⚠️
Payment Card-Skimming Campaign Now Targeting Websites in North America
⚠️
A year into private ownership, SailPoint cracks the $600M ARR threshold
⚠️
How to avoid the Microsoft GitHub goof that exposed 38TB of sensitive employee data
⚠️
CISA Releases Four Industrial Control Systems Advisories
⚠️
CrowdStrike to Buy AppSec Startup Bionic for Reported $350M
⚠️
GitLab urges users to install security updates for critical pipeline flaw
⚠️
Chinese Spies Infected Dozens of Networks With Thumb Drive Malware
⚠️
New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants
⚠️
Unsung Hero in Cyber Risk Management
⚠️
China's Cyber Offensive: FBI Director Reveals Unmatched Scale of Hacking Operations
⚠️
CrowdStrike announces major build-out of its Falcon product suite
⚠️
New server backdoors posing as security product target telecoms
⚠️
Obfuscated Scans for Older Adobe Experience Manager Vulnerabilities, (Tue, Sep 19th)
⚠️
Azure's Eight XSS Vulns, CNCF's Two Security Audits, CISA's OSS Roadmap, Repojacking - ASW #255
⚠️
Hackers breached International Criminal Court’s systems last week
⚠️
Trend Micro fixes endpoint protection zero-day used in attacks
KEV
⚠️
Howtorotate.com - Open Source Guides on Key Rotations from the Most Popular Providers
📢
CISA Sponsors Third Season of US Cyber Team
📢
Why Entities Should Review Their Online Tracker Use ASAP
📢
Generative AI: Embrace It, But Put Up Guardrails
📢
GitLab security advisory (AV23-562)
📢
Foxit security advisory (AV23-563)
📢
[Control systems] Omron security advisory (AV23-564)
📢
SprySocks, Lazarus, Fortinet, Juniper, CISA, AI Art, More News, & Jason Wood - SWN #326
📢
Cyber Experts Urge House Committee to Avoid Federal Shutdown
🔥
Who’s Behind the 8Base Ransomware Website?
🔥
Bumblebee Loader Resurfaces in New Campaign
🔥
Update: Clorox Reports Production Issues After August Cyberattack
🔥
Update: Australian Law Firm Hack Affected 65 Government Agencies
🔥
Operation Rusty Flag: Azerbaijan Targeted in New Rust-Based Malware Campaign
🔥
German Spy Chief Warns of Cyberattacks Targeting Liquefied Natural Gas Terminals
🔥
How the FBI Fights Back Against Worldwide Cyberattacks
🔥
CyberheistNews Vol 13 #38 No Dice for MGM Vegas As It Battles Ransomware Attack Downtime
🔥
Clorox Blames Damaging Cyberattack for Product Shortage
🔥
Hackers backdoor telecom providers with new HTTPSnoop malware
🔥
‘Cybersecurity Incident’ Hits ICC
🔥
The Clorox Company Admits Cyberattack Causing Disruption
🔥
Operation Rusty Flag: Azerbaijan Targeted in New Rust-Based Malware Campaign
🔥
International Criminal Court says hackers accessed its systems
🔥
'ShroudedSnooper' Backdoors Use Ultra-Stealth in Mideast Telecom Attacks
🕵️
ISC Stormcast For Tuesday, September 19th, 2023 https://isc.sans.edu/podcastdetail/8664, (Tue, Sep 19th)
🕵️
Iranian Hackers Attack Thousands of Organizations Using Password Spraying
🕵️
Transparent Tribe Uses Fake YouTube Android Apps to Spread CapraRAT Malware
🕵️
SEC-T 2023 Stockholm - 21 videos
🕵️
Metaverse Poses Serious Privacy Risks for Users, Report Warns
🕵️
Cybersecurity M&A Roundup for First Half of September 2023
🕵️
Security startup Discern launches AI-powered policy management platform
🕵️
Detecting AI-Generated Text
🕵️
Hacker Conversations: Casey Ellis, Hacker and Ringmaster at Bugcrowd
🕵️
Chinese Hackers Target North American, APAC Firms in Web Skimmer Campaign
🕵️
DEF CON 31 Main Stage Talks
🕵️
Earth Lusca's New SprySOCKS Linux Backdoor Targets Government Entities
🕵️
Alcion Raises $21 Million for Backup-as-a-Service Platform
🕵️
Pakistani APT Uses YouTube-Mimicking RAT to Spy on Android Devices
🕵️
ShroudedSnooper's HTTPSnoop Backdoor Targets Middle East Telecom Companies
🕵️
Romance Scams That Run Your Crypto Wallet Dry
🕵️
Managing CyberRisk in a Mid-Cap Company - Walter Lefmann - CSP 140
🕵️
CakePHP Application Cybersecurity Research - White box penetration testing in action
🕵️
Venafi Leverages Generative AI to Manage Machine Identities
🕵️
Chinese Hackers Use Never Before Seen Linux Backdoor
🕵️
Pro-Russian Actors Initiated A DDoS Attack Against Canadian Organizations
🕵️
HiddenLayer Raises Hefty $50M Round for AI Security Tech
🕵️
CrowdStrike to Acquire Application Intelligence Startup Bionic
🕵️
Stopping Business Logic Attacks: Why a WAF is no Longer Enough - Karl Triebes - ASW #255
🕵️
Microsoft AI Group Accidentally Exposes 38TB of Internal Data
🕵️
The Expel Quarterly Threat Report distills the threats and trends the Expel SOC saw in Q2. Download it now.
🕵️
Expert: Keep Calm, Avoid Overhyping China's AI Capabilities
🕵️
Forrester names Microsoft a Leader in the 2023 Zero Trust Platform Providers Wave™ report
🕵️
Just Released and Ready for Download — Software Firewalls for Dummies
🌐
Transparent Tribe’s CapraRAT Mimics YouTube to Hijack Android Phones
🌐
An Assessment of Russian Threat Group Turla (aka Pensive Ursa)
🌐
New Hook Android Banking Trojan Expands on ERMAC's Legacy
🌐
Inside the Code of a New XWorm Variant
🌐
Inside the Code of a New XWorm Variant
📡
Fraudsters Steal Over $1 Million in Three Weeks in ‘Pig Butchering’ Scam
📡
Live Webinar: Overcoming Generative AI Data Leakage Risks
📡
Microsoft AI Research Division Leak 38TB of Private Data
📡
Cato Networks, valued at $3B, lands $238M ahead of its anticipated IPO
📡
HR phishing: self-evaluation questionnaire | Kaspersky official blog
📡
Hacker Conversations: Casey Ellis From Bugcrowd
📡
Misconfigured SAS Token By Microsoft's AI Team Exposes 38TB Of GitHub Data
📡
Microsoft to start retiring Exchange Web Services in October 2026
📡
Protect CNC Machines in Networked IT/OT Environments
📡
New AMBERSQUID Cryptojacking Operation Targets Uncommon AWS Services
📡
Journey to the Cloud: Navigating the Transformation - Part 2
📡
Phalanx protects company data by automatically securing and tracking sensitive documents
📡
Yikes! My sex video has been uploaded to YouPorn, apparently
📡
Claimants in Celsius crypto bankruptcy targeted in phishing attack