97Articles
9Categories
2023-10-19Date
🚨
CISA Adds Two Known Exploited Vulnerability to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability CVE-2021-1435 Cisco IOS XE Web UI Command Injection Vulnerabili…
KEV
🐛
Google TAG Detects State-Backed Threat Actors Exploiting WinRAR Flaw
🐛
Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw
🐛
Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000
🐛
Over 40,000 Cisco IOS XE devices infected with backdoor using zero-day
⚠️
Meet the Cyber Mercenary who can Overthrow a Government - Chris Rock - PSW #803
⚠️
Government-Backed Actors Exploiting WinRAR Vulnerability
⚠️
North Korean Hackers Exploiting Critical Flaw in DevOps Tool
⚠️
NIST provides solid guidance on software supply chain security in DevSecOps
⚠️
How the US DOD Cyber Strategy changes national cyber defense
⚠️
Iran Traps Middle East Nation in 8-Month Espionage Campaign
⚠️
Eastern European Energy and Defense Firms Targeted With MATA Backdoor
⚠️
Operations of Healthcare Solutions Giant Henry Schein Disrupted by Cyberattack
⚠️
North Korean Hackers Exploiting Recent TeamCity Vulnerability
⚠️
Ransomware actor exploits unsupported ColdFusion servers—but comes away empty-handed
⚠️
Casio discloses data breach impacting customers in 149 countries
⚠️
Vulnerability Scanning: How Often Should I Scan?
⚠️
Fried Squid, Flipper Zero BLM Spam, Apple Devices, Signal Vulns? & Android TV Devices - PSW #803
⚠️
CISA, NSA, FBI, and MS-ISAC Release Update to #StopRansomware Guide
⚠️
Palo Alto Networks updates Prisma Cloud with integrated cloud security
⚠️
CISA, NSA, FBI, and MS-ISAC Release Phishing Prevention Guidance
⚠️
RagnarLocker ransomware dark web site seized in international sting
⚠️
Ragnar Locker ransomware’s dark web extortion sites seized by police
⚠️
CISA Releases One Industrial Control Systems Advisory
⚠️
Telegram is still leaking user IP addresses to contacts
⚠️
Hackers exploit zero-day to compromise tens of thousands of Cisco devices
KEV
⚠️
Is the Ragnar Locker Ransomware Group Headed for Oblivion?
⚠️
Cybercrime, Crowdsourcing, Enterprise News – Shane Sims, Philippe Humeau – ESW #336
⚠️
A warning to software founders developing apps with lean teams and open source code
⚠️
Engaging insiders to combat insider threats
⚠️
6 essential steps for identity security in multi-cloud environments
⚠️
The State of Cybercrime and Breach Response - Shane Sims - ESW #336
⚠️
Cryptojacking campaign Qubitstrike targets exposed Jupyter Notebook instances
⚠️
Leveraging Open Source and Network Effects to Fight Cybercrime at Scale - Philippe Humeau - ESW #336
⚠️
Oracle Releases October 2023 Critical Patch Update Advisory
⚠️
Hackers Leaks Millions of 23andMe User Details on Dark Web
⚠️
The MGM Resorts attack: initial analysis
📋
Lloyd’s of London finds hypothetical cyberattack could cost world economy $3.5 trillion
📢
hack.lu 2023
📢
US Government Releases Anti-Phishing Guidance
📢
F5 security advisory (AV23-638)
📢
Atlassian security advisory (AV23-639)
📢
Cryptohack Roundup: Crypto's Role in Terrorist Financing
📢
Admin of E-Root Marketplace was Arrested for RDP & SSH Passwords
🔥
Hackers Using Secure USB Drives to Attack Government Entities
🔥
Ukrainian Hacktivists Claim Trigona Ransomware Takedown
🔥
Henry Schein Provides Information on Cybersecurity Incident
🔥
Former Uber CISO Appealing His Conviction
🔥
Report: Global Economy Could Lose $3.5 Trillion in Systemic Cyberattack
🔥
Lost and Stolen Devices: A Gateway to Data Breaches and Leaks
🔥
Endpoint security in the cloud: What you need to know
🔥
Californian IT Company DNA Micro Leaks Private Mobile Phone Data of Over 820,000 Customers
🔥
Iranian hackers lurked in Middle Eastern govt network for 8 months
🔥
BlackCat Group Adopts a New Tactic to Circumvent Security Solutions
🔥
Microsoft extends Purview Audit log retention after July breach
🔥
BlackCat ransomware uses new ‘Munchkin’ Linux VM in stealthy attacks
🔥
Plastic Surgeons Warned About New Face of Cyber Extortion
🔥
E-Root admin faces 20 years for selling stolen RDP, SSH accounts
🔥
Breach Roundup: Citrix Patch Not Sufficient
🔥
GOP Rep: Government, Private Sector Must Plan for Big Attack
🕵️
ISC Stormcast For Thursday, October 19th, 2023 https://isc.sans.edu/podcastdetail/8708, (Thu, Oct 19th)
🕵️
BSidesCLT 2023 - Bsides Charlotte - 11 talks
🕵️
Iran-Linked OilRig Targets Middle East Governments in 8-Month Cyber Campaign
🕵️
New Campaign by Iranian APT Group Targets Middle Eastern Government
🕵️
CipherStash Raises $3 Million for Encryption-in-Use Technology
🕵️
Google Play Protect Gets Real-Time Code Scanning
🕵️
US Charge Man with Running Stolen Credentials Marketplace
🕵️
3 Ways the Threat Landscape Is Changing
🕵️
Sophisticated MATA Framework Strikes Eastern European Oil and Gas Companies
🕵️
Phishing-as-a-Service: As Simple As Uploading A Logo
🕵️
News alert: NetWitness launches 12.3 update to deliver visibility across the entire enterprise
🕵️
FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program
🕵️
Harmonic Lands $7M Funding to Secure Generative AI Deployments
🕵️
Mata Malware Targeted East European Energy, Defense Sectors
🕵️
North Korea Taps IT Contract Workers to Fund Weapons Program
🕵️
Finnish Hacker Charged with Multiple Counts of Extortion
🕵️
Microsoft Security Copilot Early Access Program: Harnessing generative AI to empower security teams
🌐
Google Play Protect Introduces Real-Time Code-Level Scanning for Android Malware
🌐
Ex-Navy IT manager jailed for selling people’s data on the dark web
🌐
Fake KeePass site uses Google Ads and Punycode to push malware
🌐
Strengthening the weakest link: top 3 security awareness topics for your employees
📡
Finland Charges Psychotherapy Hacker With Extortion
📡
Google Play Protect Bolsters Security Against Malicious Apps
📡
Darwinium Raises $18 Million for Edge-Based Fraud Prevention Tech
📡
Moldovan Accused of Running Cybercrime Marketplace to Face Charges in US
📡
Hacker Leaks Millions of New 23andMe Genetic Data Profiles
📡
WhatsApp gets support for multiple accounts on the same phone
📡
UK Warns Nuclear Power Plant Operator of Cybersecurity Failings
📡
Former Navy IT Manager Sentenced to Prison for Hacking, Selling PII
📡
Hacker Leaks Millions More 23AndMe User Records On Cybercrime Forum
📡
You Need To Update WinRAR, Right Now
📡
There's A New Way To Flip Bits In DRAM
📡
Privacy Advocates To TSA: Slow Down Plans For mDLs
📡
Millions of new 23andMe genetic data profiles leak on cybercrime forum
📡
India targets Microsoft, Amazon tech support scammers in nationwide crackdown
📡
Side Eye attack: Eavesdropping through video stabilization | Kaspersky official blog
📡
Pioneering Automated Moving Target Defense (AMTD)