MATLOCK.CA
103Articles
9Categories
2023-10-27Date
🚨
CISA Updates Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities With Additional ReleasesToday, CISA updated its guidance addressing two vulnerabilities, CVE-2023-20198 and CVE-2023-20273 , affecting Cisco’s Internetworking Operating System (IOS) XE Software Web User Interface (UI). The guidance now notes that Cisco has fixed these vulnerabilities for the 17.6 Cisco …
KEVCISA.GOV — Fri, 27 Oct 23 1
🐛
VMware warns of critical vulnerability affecting vCenter Server product
THERECORD.MEDIA — 27 Oct 2023
🐛
Apple issued another patch to stop TriangleDB cyber snooping
KEVTHEREGISTER.COM — 27 Oct 2023
🐛
F5 Issues Warning: BIG-IP Vulnerability Allows Remote Code Execution
THEHACKERNEWS.COM — 27 Oct 2023
🐛
F5 Issues Warning Over BIG-IP Vulnerability That Allows Remote Code Execution
THEHACKERNEWS.COM — 27 Oct 2023
🐛
F5 Warns of Critical Remote Code Execution Vulnerability in BIG-IP
SECURITYWEEK.COM — 27 Oct 2023
🐛
F5 fixes BIG-IP auth bypass allowing remote code execution attacks
BLEEPINGCOMPUTER.COM — 27 Oct 2023
🐛
VMware Tools Flaw Let Attackers Escalate Privileges
GBHACKERS.COM — 27 Oct 2023
🐛
Chromium: CVE-2023-5472: Use after free in Profiles
MSRC.MICROSOFT.COM — 27 Oct 2023
🐛
CVE-2023-44323 Adobe: CVE-2023-44323 Adobe PDF Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 27 Oct 2023
⚠️
Dissecting TriangleDB, a Triangulation spyware implant
SECURELIST.COM — 27 Oct 2023
⚠️
Okta’s Latest Security Breach Is Haunted by the Ghost of Incidents Past
WEB.ARCHIVE.ORG — 27 Oct 2023
⚠️
iLeakage attack steals passwords, texts from Apple devices
THEREGISTER.COM — 27 Oct 2023
⚠️
Finding You: The Network Effect of Telecommunications Vulnerabilities for Location Disclosure
CITIZENLAB.CA — 27 Oct 2023
⚠️
Novel Zero-Day Exploits Fuel Q3 Surge in DDoS Attacks
CYBERSECURITYDIVE.COM — 27 Oct 2023
⚠️
Failure to verify OAuth tokens enables account takeover on websites
CSOONLINE.COM — 27 Oct 2023
⚠️
Hackers Earn $350k on Second Day at Pwn2Own Toronto 2023
SECURITYWEEK.COM — 27 Oct 2023
⚠️
Google Expands Its Bug Bounty Program to Tackle Artificial Intelligence Threats
THEHACKERNEWS.COM — 27 Oct 2023
⚠️
Record-Breaking 100 Million RPS DDoS Attack Exploits HTTP/2 Rapid Reset Flaw
THEHACKERNEWS.COM — 27 Oct 2023
⚠️
iLeakage Attack Exploits Safari To Steal Sensitive Data From Macs, iPhones
PACKETSTORMSECURITY.COM — 27 Oct 2023
⚠️
Cybersecurity Resilience Quotient Metric for Measuring Security Effectiveness
SECURITYWEEK.COM — 27 Oct 2023
⚠️
CISA Announces Launch of Logging Made Easy
CISA.GOV — Fri, 27 Oct 23 1
⚠️
N. Korean Lazarus Group Targets Software Vendor Using Known Flaws
THEHACKERNEWS.COM — 27 Oct 2023
⚠️
Apple fixes bug that undermined iOS privacy feature for years
TECHCRUNCH.COM — 27 Oct 2023
⚠️
Stripedfly Malware Framework Infects One Million Windows, Linux Hosts
BLEEPINGCOMPUTER.COM — 27 Oct 2023
⚠️
North Korean Lazarus Group Targets Software Vendor Using Known Flaws
THEHACKERNEWS.COM — 27 Oct 2023
⚠️
Putting Censorship Circumvention to the Test: Security Audit Findings | Tor Project
TORPROJECT.ORG — 27 Oct 2023
⚠️
CISA: Agencies Seeing Steep Decrease in Known Exploited Vulnerabilities on Federal Networks
KEVTHERECORD.MEDIA — 27 Oct 2023
⚠️
News alert: Massachusetts awards $2.3 million grant to strengthen cybersecurity ecosystem statewide
LASTWATCHDOG.COM — 27 Oct 2023
⚠️
CCleaner says hackers stole users’ personal data during MOVEit mass-hack
TECHCRUNCH.COM — 27 Oct 2023
⚠️
Hackers earn over $1 million for 58 zero-days at Pwn2Own Toronto
BLEEPINGCOMPUTER.COM — 27 Oct 2023
⚠️
Careless OAuth Implementation Puts Billions at Risk
DATABREACHTODAY.CO.UK — 2023-10-27
⚠️
Exabeam Lays Off 20% of Staff, F-Secure to Ax Up to 70 Staff
DATABREACHTODAY.CO.UK — 2023-10-27
⚠️
UK's Ofcom Prepares to Enforce Online Safety Bill
DATABREACHTODAY.CO.UK — 2023-10-27
⚠️
CISA Launches Logging Tool For Resource-Poor Organizations
DATABREACHTODAY.CO.UK — 2023-10-27
⚠️
Roundcube Webmail servers under attack – Week in security with Tony Anscombe
WELIVESECURITY.COM — 27 Oct 2023
⚠️
What keeps incident responders up at night: Common pitfalls that cyber responders encounter when arriving at the scene
SECURITYINTELLIGENCE.COM — 27 Oct 2023
📢
IOTW: DDoS attacks hit Czech ministries, pro-Russia group allegedly behind them
CSHUB.COM — 27 Oct 2023
📢
Messaging Service Wiretap Discovered through Expired TLS Cert
SCHNEIER.COM — 2023-10-27
📢
UN Chief Appoints 39-Member Panel to Advise on International Governance of Artificial Intelligence
SECURITYWEEK.COM — 27 Oct 2023
📢
How to Keep Your Business Running in a Contested Environment
THEHACKERNEWS.COM — 27 Oct 2023
📢
[Live Demo] Customizing Your Compliance Training to Increase Effectiveness
KNOWBE4.COM — 27 Oct 2023
📢
CISA Announces New Release of Logging Made Easy
CISA.GOV — Fri, 27 Oct 23 1
📢
UK: NCSC Rolls Out Protective DNS Service for Schools
INFOSECURITY-MAGAZINE.COM — 27 Oct 2023
📢
VMware security advisory (AV23-657)
CYBER.GC.CA — 2023-10-27
📢
FTC Expands Financial Data Breach Reporting Requirements
DATABREACHTODAY.CO.UK — 2023-10-27
📢
[Control systems] NextGen HealthCare security advisory (AV23-659)
CYBER.GC.CA — 2023-10-27
📢
Mozilla security advisory (AV23-658)
CYBER.GC.CA — 2023-10-27
📢
United Nations AI Body to Advise on Risks, Global Governance
DATABREACHTODAY.CO.UK — 2023-10-27
🔥
New England Biolabs leak sensitive data
SECURITYAFFAIRS.COM — 27 Oct 2023
🔥
Hackers that breached Las Vegas casinos rely on violent threats, research shows
CYBERSCOOP.COM — 27 Oct 2023
🔥
Update: Hackers Spent Three Months Accessing Philadelphia City Government Email Accounts
THERECORD.MEDIA — 27 Oct 2023
🔥
Cyber Security Today, Oct. 27, 2023 - Malware hiding as a cryptominer may have infected 1 million PCs since 2017
CYBERSECURITYTODAY.LIBSYN.COM — 27 Oct 2023
🔥
Russian Artists’ Spotify Accounts Defaced by Pro-Ukraine Hackers
THERECORD.MEDIA — 27 Oct 2023
🔥
Toumei - 76,682 breached accounts
HAVEIBEENPWNED.COM — 27 Oct 2023
🔥
Rising Global Tensions Could Portend Destructive Hacks
BANKINFOSECURITY.COM — 27 Oct 2023
🔥
France Says Russian State Hackers Breached Numerous Critical Networks
BLEEPINGCOMPUTER.COM — 27 Oct 2023
🔥
FakeUpdateRU: New Malware Camouflaged as Fake Chrome Update
CYWARE.COM — 27 Oct 2023
🔥
DuckTail Malware Spread via Fake Job Offers From Compromised LinkedIn Profiles
CLUSTER25.DUSKRISE.COM — 27 Oct 2023
🔥
California City Warns of Data Breach After Attack Claim by NoEscape Ransomware
THERECORD.MEDIA — 27 Oct 2023
🔥
US Senator Quizzes 23andMe Over Credential-Stuffing Hack
HEALTHCAREINFOSECURITY.COM — 27 Oct 2023
🔥
Lazarus hackers breached dev repeatedly to deploy SIGNBT malware
BLEEPINGCOMPUTER.COM — 27 Oct 2023
🔥
The Week in Ransomware - October 27th 2023 - Breaking Records
BLEEPINGCOMPUTER.COM — 27 Oct 2023
🔥
Feds Warn Healthcare Sector of AI-Augmented Phishing Threats
DATABREACHTODAY.CO.UK — 2023-10-27
🕵️
Weekly Update 371
TROYHUNT.COM — 27 Oct 2023
🕵️
ISC Stormcast For Friday, October 27th, 2023 https://isc.sans.edu/podcastdetail/8720, (Fri, Oct 27th)
ISC.SANS.EDU — 27 Oct 2023
🕵️
Malicious Android Apps on Google Play With Over 2 Million Installs
GBHACKERS.COM — 27 Oct 2023
🕵️
Your KnowBe4 Fresh Content Updates from October 2023
KNOWBE4.COM — 27 Oct 2023
🕵️
Have you accidentally hired a North Korean IT worker who’s spying on your company?
GRAHAMCLULEY.COM — 27 Oct 2023
🕵️
The evolution of 20 years of cybersecurity awareness
SECURITYINTELLIGENCE.COM — 27 Oct 2023
🕵️
Security Onion Conference 2023 - 7 videos
INFOSEC.PUB — 27 Oct 2023
🕵️
In Other News: Ex-NSA Employee Spying for Russia, EU Threat Landscape, Cyber Education Funding
SECURITYWEEK.COM — 27 Oct 2023
🕵️
Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools
SECURITYWEEK.COM — 27 Oct 2023
🕵️
New Amazon-Themed Phishing Campaign Targets Microsoft Live Outlook Users
KNOWBE4.COM — 27 Oct 2023
🕵️
Now Android and Windows devices aren't safe from Flipper Zero either
RETIOLUS.NET — 27 Oct 2023
🕵️
Cure53 | Pentest-Report Tor Browser & OONI 02.-03.2023
TORPROJECT.ORG — 27 Oct 2023
🕵️
Pumpkin Spice, VMWARE, RoundCube, Apple, Big-IP, Oktapus, Aaran Leyland and More - SWN #337
YOUTUBE.COM — 2023-10-27
🕵️
Friday Squid Blogging: On the Ugliness of Squid Fishing
SCHNEIER.COM — 2023-10-27
🕵️
ISMG Editors: Business, Cyber Resilience in Israel-Hamas War
DATABREACHTODAY.CO.UK — 2023-10-27
🕵️
StripedFly worming miner hides sophisticated code and espionage-ready capabilities
USA.KASPERSKY.COM — 27 Oct 2023
🕵️
Cloudflare mitigated 89 hyper-volumetric HTTP distributed DDoS attacks exceeding 100 million rps
SECURITYAFFAIRS.COM — 27 Oct 2023
🌐
Android Adware Apps on Google Play Amass Two Million Installs
BLEEPINGCOMPUTER.COM — 27 Oct 2023
🌐
Apple Drops Urgent Patch Against Obtuse TriangleDB iPhone Malware
PACKETSTORMSECURITY.COM — 27 Oct 2023
🌐
Report: Consumers are Taking Action to Protect Their Privacy
HELPNETSECURITY.COM — 27 Oct 2023
🌐
Humans Need to Rethink Trust in the Wake of Generative AI
INFOSECURITY-MAGAZINE.COM — 27 Oct 2023
🌐
5 Strategies to Protect Your Software Development Teams from Software Supply Chain Attacks
DATABREACHTODAY.CO.UK — 2023-10-27
🎙️
Cyber Security Today, Week in Review for the week ending Friday, Oct. 27, 2023
CYBERSECURITYTODAY.LIBSYN.COM — 27 Oct 2023
📡
How Kopeechka, an Automated Social Media Accounts Creation Service, Can Facilitate Cybercrime
TRENDMICRO.COM — 27 Oct 2023
📡
Nigerian Police Dismantle Major Cybercrime Hub
INFOSECURITY-MAGAZINE.COM — 27 Oct 2023
📡
Cranium Announces $25 Million in Series A Funding to Secure AI
DARKREADING.COM — 27 Oct 2023
📡
New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding
SECURITYWEEK.COM — 27 Oct 2023
📡
Security Leaders Have Good Reasons to Fear AI-Generated Attacks
HELPNETSECURITY.COM — 27 Oct 2023
📡
Report: Security Not a Priority For a Third of SMBs
INFOSECURITY-MAGAZINE.COM — 27 Oct 2023
📡
In-Home Hospitality App Hello Alfred Exposes User Data
SECURITYAFFAIRS.COM — 27 Oct 2023
📡
Crypto King Tells Judge He Acted On Legal Advice
PACKETSTORMSECURITY.COM — 27 Oct 2023
📡
iPhones Have Been Exposing Your Unique MAC Despite Apple's Promises Elsewise
PACKETSTORMSECURITY.COM — 27 Oct 2023
📡
Hackers Earn $350k On Second Day Of Pwn2Own Toronto 2023
PACKETSTORMSECURITY.COM — 27 Oct 2023
📡
Microsoft Unveils Shady Shenanigans Of Octo Tempest
PACKETSTORMSECURITY.COM — 27 Oct 2023
📡
Windows 11 KB5031455 preview update enables Moment 4 features by default
BLEEPINGCOMPUTER.COM — 27 Oct 2023
📡
Internet access in Gaza is collapsing as ISPs fall offline
TECHCRUNCH.COM — 27 Oct 2023
📡
Microsoft 365 users get workaround for ‘Something Went Wrong’ errors
BLEEPINGCOMPUTER.COM — 27 Oct 2023
📡
SAS 2023: Key Research | Kaspersky official blog
KASPERSKY.COM — 27 Oct 2023
📡
The Federal Partnership for Interoperable Communications (FPIC) Releases the Transition to Advanced Encryption Standard White Paper
CISA.GOV — Fri, 27 Oct 23 1