🚨 CISA KEV 2[−]
4 Dec KEVCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnera…CISA.GOV
4 Dec KEVThreat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government ServersSUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) is releasing a Cybersecurity Advisory (CSA) in response to confirmed exploitation of CVE-2023-26360 by unidentified threat actors at a Federal Civilian Executive Branch (FCEB) agency. This vulnerability presents …CISA.GOV
🐛 COMMON VULNERABILITIES AND EXPOSURES 5[−]
4 DecPSA: Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor PluginPACKETSTORMSECURITY.COM
4 DecNew BLUFFS Bluetooth Attack Expose Devices to Adversary-in-the-Middle AttacksNew research has unearthed multiple novel attacks that break Bluetooth Classic's forward secrecy and future secrecy guarantees, resulting in adversary-in-the-middle (AitM) scenarios between two already connected peers. The issues, collectively named BLUFFS, impact Bluetooth …THEHACKERNEWS.COM
4 DecFake WordPress security advisory pushes backdoor pluginWordPress administrators are being emailed fake WordPress security advisories for a fictitious vulnerability tracked as CVE-2023-45124 to infect sites with a malicious plugin. [...]BLEEPINGCOMPUTER.COM
4 DecRussian hackers exploiting Outlook bug to hijack Exchange accountsMicrosoft's Threat Intelligence team issued a warning earlier today about the Russian state-sponsored actor APT28 (aka "Fancybear" or "Strontium") actively exploiting the CVE-2023-23397 Outlook flaw to hijack Microsoft Exchange accounts and steal sensitive information. [...]BLEEPINGCOMPUTER.COM
4 DecP2Pinfect Redis worm targets IoT with version for MIPS devicesThe gang behind a cloud botnet known for targeting servers running the Redis in-memory storage system dubbed P2Pinfect is now looking to expand into the IoT ecosystem, according to a new report. Researchers have recently come across a variant of the P2Pinfect worm designed to run…CSOONLINE.COM
⚠️ VULNERABILITY DISCLOSURE 17[−]
4 DecOver 20,000 Vulnerable Microsoft Exchange Servers Exposed to AttacksOver 30,000 servers have reached the end-of-life stage, with many still vulnerable to critical security issues. Some of these vulnerabilities can lead to remote code execution.BLEEPINGCOMPUTER.COM
4 DecGUEST ESSAY: Taking proactive steps to heal the planet — by reducing the impact of video streamingMost folks don’t realize that the Internet contributes more than 3.7 percent of global greenhouse gas emissions. Related: Big data can foster improved healthcare Within that, video represents over 80 percent of the traffic that flows through this global network … (mor…LASTWATCHDOG.COM
4 DecA Decade of Have I Been PwnedPresently sponsored by: Get insights into malware’s behavior with ANY.RUN: instant results, live VM interaction, fresh IOCs, and configs without limit. A decade ago to the day, I published a tweet launching what would surely become yet another pet project that scratched an itch, …TROYHUNT.COM
4 Dec KEVUS Health Department Urges Hospitals to Patch Critical Citrix Bleed BugThe U.S. Department of Health and Human Services (HHS) has warned hospitals about the actively exploited Citrix Bleed vulnerability used by ransomware gangs to breach networks, emphasizing the urgent need for patching.BLEEPINGCOMPUTER.COM
4 Dec4 budget-savvy strategies for building an effective purple teamPurple teams are like the unicorns of cybersecurity, mixing the best of offense and defense. Think of them as the all-stars who play both sides of the game, finding the weak spots and beefing up the security where it counts. But let's be real — not everyone's got the big bucks to…CSOONLINE.COM
4 DecCyber Security Today, Dec. 4, 2023 - A warning to water treatment utilities, a boot vulnerability could affect millions of PCs, and moreThis episode reports on a campaign against critical infrastructure using PLCs, a vulnerability in PCs, and moreCYBERSECURITYTODAY.LIBSYN.COM
4 DecUpdate: New Relic Admits Attack on Staging Systems, User AccountsWeb tracking and analytics company New Relic has disclosed a cyberattack on its staging systems, which were compromised in mid-November by an unauthorized actor using stolen credentials and social engineering.THEREGISTER.COM
4 DecHackers book profit by scamming Booking.com customersScamsters are found to be using a range of techniques including phishing, infostealers, and social engineering to cheat several customers of Booking.com, as per an investigation carried out by cybersecurity firm SecureWorks . Booking.com customers from the UK, Indonesia, Singapor…CSOONLINE.COM
4 DecArmorCode raises $40M to consolidate security data in one placeArmorCode, a cybersecurity platform that gathers vulnerability data from connected apps and software infrastructure, consolidating the data into a single location and standardizing it for analysis, has raised $40 million in a Series B round led by HighlandX with participation fro…TECHCRUNCH.COM
4 DecGuarding Against the Rise of QR Code Phishing Attacks: How to Protect Yourself and Your OrganizationIn the ever-evolving landscape of cyber threats, scammers and hackers are relentless in exploiting every avenue of communication. From emails to texts, calls to QR codes, malicious actors are finding new ways to compromise your privacy and security.KNOWBE4.COM
4 DecShooting Yourself in the .flags – Jailbreaking the Sonos Era 100submitted by L4s to secops 1 points | 0 comments https://research.nccgroup.com/2023/12/04/shooting-yourself-in-the-flags-jailbreaking-the-sonos-era-100/ Shooting Yourself in the .flags – Jailbreaking the Sonos Era 100::Research performed by Ilya Zhuravlev supporting the Exploit D…RESEARCH.NCCGROUP.COM
4 DecPresident Biden signs Executive Order 14111President Biden signed Executive Order 14111 to reinforce the importance of, and strengthen, the security of Executive Branch federal facilities in the face of both persistent and emerging threats.CISA.GOV
4 DecZarya Hacktivists: More than just Sharepoint., (Mon, Dec 4th)Last week, I wrote about a system associated with pro-Russian hacktivist scanning for vulnerable Sharepoint servers [ 1 ]. Thanks to @DonPasci on X for pointing me to an article by Radware about the same group using Mirai [2][3]. This group has …ISC.SANS.EDU
4 DecPreviewing Black Hat Europe 2023 in London: 16 Hot SessionsRouters in Peril, Battling Burnout, Teaching ChatGPT to Attack and More Winter in London features Hyde Park's Winter Wonderland, Christmas lights galore, and the return of the Black Hat Europe cybersecurity conference, featuring briefings on everything from quantum cryptography a…DATABREACHTODAY.CO.UK
4 DecDecember Android updates fix critical zero-click RCE flawGoogle announced today that the December 2023 Android security updates tackle 85 vulnerabilities, including a critical severity zero-click remote code execution (RCE) bug. [...]BLEEPINGCOMPUTER.COM
4 DecDemocrat Blocks Biden's NSA Nominee Over Data ControversyNational Security Agency Refusing to Reveal Data Collection Practices, Senator Says A senior Democrat on the Senate Intelligence Committee pledged to block Air Force Lt. Gen. Timothy Haugh from serving as director of the National Security Agency until the agency says whether it i…DATABREACHTODAY.CO.UK
4 DecRussian GRU Hackers Target Polish Outlook InboxesMilitary Intelligence Exploits Microsoft Flaw Patched In March Russian military intelligence hackers active in Poland are exploiting a patched flaw in Microsoft Outlook, say cyber defenders from Redmond and Warsaw. Microsoft in a Monday post identifies the hackers as Forest Blizz…DATABREACHTODAY.CO.UK
📢 SECURITY ADVISORIES 8[−]
4 DecProactive, not reactive: the path to ensuring operational resilience in cybersecurityFrom bank robbers in the Wild West to ransomware-as-a-service (RaaS), threats to the world's financial ecosystem have evolved significantly over the years. Technological advancements have led to the rapid evolution of the financial industry, from cash transactions to digital wall…CSOONLINE.COM
4 DecCyber Resilience Act agreement reached as EU legislation edges closerLegislation aims to improve the cyber security of digital products to the benefit of consumers and businesses across the EUCSHUB.COM
4 DecSexual Harassment Prevention Training from…KnowBe4?When you think of KnowBe4, you probably think of phishing training, good password hygiene modules, security awareness, or maybe even data protection compliance such as GDPR. KNOWBE4.COM
4 DecUS CISA: Secure Israeli-Made Technology From Iranian Hackers'Cyber Av3ngers' Didn't Tamper With Water Safety, Says Cyber Agency The U.S. Cybersecurity and Infrastructure Security Agency encouraged all organizations that use equipment developed by an Israeli technology company called Unitronics to bolster their cyber posture amid the Israe…DATABREACHTODAY.CO.UK
🔥 INCIDENT REPORTING 14[−]
4 DecMicrosoft Warns of Malvertising Scheme Spreading CACTUS RansomwareMicrosoft has warned of a new wave of CACTUS ransomware attacks that leverage malvertising lures to deploy DanaBot as an initial access vector. The DanaBot infections led to "hands-on-keyboard activity by ransomware operator Storm-0216 (Twisted Spider, UNC2198), culminating in th…THEHACKERNEWS.COM
4 DecDJvu ransomware Latest Variant Xaro Emerges in the Threat LandscapeA variant of the DJvu ransomware, named Xaro, has been identified in a campaign that leverages cracked software for distribution. Xaro is spread through an archive file masquerading as legitimate freeware. Organizations are advised to whitelist apps or sites to stay safe.CYWARE.COM
4 DecTrickBot Developer Pleads Guilty in US CourtA Russian national, Vladimir Dunaev, has pleaded guilty for his involvement in developing TrickBot malware, which targeted hospitals and healthcare centers with ransomware attacks during the COVID-19 pandemic.BANKINFOSECURITY.COM
4 DecLinux Version of Qilin Ransomware Focuses on VMware ESXiThe Linux encryptor includes extensive command-line options for customization, allowing threat actors to specify exclusion and encryption criteria, as well as configure virtual machines that should not be encrypted.BLEEPINGCOMPUTER.COM
4 DecThe European Space Agency Explores Cybersecurity for Space IndustryThe European Space Agency is developing a Space Cybersecurity Operations Centre (C-SOC) to detect and respond to emerging cyberattacks on space system infrastructures and the space industry.DARKREADING.COM
4 DecRhysida ransomware gang threatens to leak royal family medical dataAttackers plan to release the data unless they are paid £300,000 in bitcoinCSHUB.COM
4 DecDepauw University Warns of Data Breach as Ransomware Attacks on Colleges SurgeThe attack on DePauw University was conducted by the Black Suit ransomware gang, highlighting the increasing trend of ransomware attacks targeting educational institutions.THERECORD.MEDIA
4 DecBlackCat Ransomware Strikes Ho Chi Minh City Power CorporationThe ongoing attack spree by the BlackCat ransomware group extends beyond Vietnam Electricity, with social media platforms like Roblox and Twitch potentially being targeted next.THECYBEREXPRESS.COM
4 DecNew AeroBlade Hackers Target Aerospace Sector in the U.S.The attacks involve the use of weaponized documents with malicious macros that create a reverse shell, allowing the attackers to gain control over the compromised systems.BLEEPINGCOMPUTER.COM
4 DecSupply-chain ransomware attack causes outages at over 60 credit unionsRansomware hits firm that providing cloud services to credit unions in order ensure that their business activities could "operate without interruption, even when nothing else seems to be going well." Read more in my article on the Tripwire State of Security blog.TRIPWIRE.COM
4 DecTipalti investigates claims of data stolen by ransomware gangTipalti says they are investigating claims that the ALPHV ransomware gang breached its network and stole 256 GB of data, including data for Roblox and Twitch. [...]BLEEPINGCOMPUTER.COM
4 DecTipalti investigates claims of data stolen in ransomware attackTipalti says they are investigating claims that the ALPHV ransomware gang breached its network and stole 256 GB of data, including data for Roblox and Twitch. [...]BLEEPINGCOMPUTER.COM
4 Decadvice neededsubmitted by Lophostemon to cybersecurity 2 points | 3 comments Hi, I’m not a coder etc but I’m not a complete noob with computers. My FIL has apparently been scammed / hacked by some shithead (according to wife) who has apparently managed to get control whenever he turns his lap…SH.ITJUST.WORKS
4 DecProtecting credentials against social engineering: Cyberattack SeriesOur fourth installation in the Cyberattack Series examines a smishing and social engineering attack and outlines the steps organizations can take to help minimize the risk and prepare for the possibility. The post Protecting credentials against social engineering: Cyberattack Ser…MICROSOFT.COM
🕵️ THREAT INTELLIGENCE 23[−]
4 DecISC Stormcast For Monday, December 4th, 2023 https://isc.sans.edu/podcastdetail/8762, (Mon, Dec 4th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
4 DecLogoFAIL: UEFI Vulnerabilities Expose Devices to Stealth Malware AttacksThe Unified Extensible Firmware Interface (UEFI) code from various independent firmware/BIOS vendors (IBVs) has been found vulnerable to potential attacks through high-impact flaws in image parsing libraries embedded into the firmware. The shortcomings, collectively labeled …THEHACKERNEWS.COM
4 DecDDoS attack-for-hire services thriving on Dark Web and cyber criminal forumsThreat actors continue to show interest in purchasing DDoS attack-for-hire platforms with the criminal market showing little sign of slowingCSHUB.COM
4 DecNew Proxy Malware Targets Mac Users Through Pirated SoftwareThe proxy trojan connects to a command and control server via DNS-over-HTTPS and supports creating TCP or UDP connections, indicating a sophisticated and wide-ranging campaign targeting multiple systems.BLEEPINGCOMPUTER.COM
4 DecICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian GovernmentSecurity agencies say the Cyber Av3ngers group targeting ICS at multiple water facilities is affiliated with the Iranian government. The post ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government appeared first on SecurityWeek .SECURITYWEEK.COM
4 DecNew Relic Says Hackers Accessed Internal Environment Using Stolen CredentialsNew Relic said hackers gained access to an environment using social engineering and stolen credentials for an employee account. The post New Relic Says Hackers Accessed Internal Environment Using Stolen Credentials appeared first on SecurityWeek .SECURITYWEEK.COM
4 DecCombatting Rogue URL Tricks: Quickly Identify and Investigate the Latest Phishing AttacksEveryone knows you shouldn’t click phishy links. But are your end users prepared to quickly identify the trickiest tactics bad actors use before it’s too late? Probably not.KNOWBE4.COM
4 DecMentorship Monday - Discussions for career and learning!submitted by shellsharks to cybersecurity 1 points | 0 comments Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? …INFOSEC.PUB
4 DecHackers Use Weaponized Documents to Attack U.S. Aerospace IndustryAn American aerospace company has been the target of a commercial cyberespionage campaign dubbed AeroBlade, which appears to be aimed at carrying out both competitive and commercial cyberespionage. The threat actor employed spear-phishing as the means of distribution mechanism. A…GBHACKERS.COM
4 DecNew AeroBlade hackers target aerospace sector in the U.S.A previously unknown cyber espionage hacking group named 'AeroBlade' was discovered targeting organizations in the United States aerospace sector. [...]BLEEPINGCOMPUTER.COM
4 DecRussian Pleads Guilty to Role in Developing TrickBot MalwareRussian national Vladimir Dunaev pleaded guilty to involvement in the development and use of the TrickBot malware that caused tens of millions of dollars in losses. The post Russian Pleads Guilty to Role in Developing TrickBot Malware appeared first on SecurityWeek .SECURITYWEEK.COM
4 DecNorth Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: ReportRecorded Future calculates that North Korean state-sponsored threat actors are believed to have stolen more than $3 billion in cryptocurrency. The post North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report appeared first on SecurityWeek .SECURITYWEEK.COM
4 DecPhishing Kits Undergo an Evolution in Feature Set, Demand, and BrandingNow being commonly referred to as “Scama” – short for Scamming Method – these kits are being sold promoting highly advanced feature sets, turning the novice scammer into a pro.KNOWBE4.COM
4 DecAll Quiet On The Western Front: Your First 100 Days As A CISO - Jim Djoka - Bsides Tirana 2023submitted by ashar to security_cpe 2 points | 0 comments https://infosec.pub/pictrs/image/fc4ffe11-194b-40ed-a043-9005a5812110.png All Quiet On The Western Front: Your First 100 Days As A CISO Jim Djoka The aim of the session is to present the role of the CISO and (hopefully in a…INFOSEC.PUB
4 DecBSides Tirana 2023 - 11 talkssubmitted by ashar to security_cpe 2 points | 0 comments https://infosec.pub/pictrs/image/2bba1134-b982-4727-ac1f-ae0f1e1345f2.png BSides Tirana 2023 playlist BSides Tirana 2023 schedule #CPE #Infosec #SecurityconferenceINFOSEC.PUB
4 DecTop Guns: Defending Corporate Clouds from Malicious MavericksWhile applications and cloud infrastructure present different risk profiles and require different security assessments, they must not be viewed separately with regards to enterprise defense. The post Top Guns: Defending Corporate Clouds from Malicious Mavericks appeared first on …SECURITYWEEK.COM
4 DecLive Webinar | Threat Actor Mapping: Finding the Achilles Heel in Sophisticated AttackersDATABREACHTODAY.CO.UK
4 DecLogoFAIL Bootup Flaw Puts Hundreds of Devices at RiskUEFI Feature Flashing Corporate Logo Can Enable Malware Deployment Hackers could use a firmware specification designed to flash a corporate logo during computer boot up to deliver a malicious payload that circumvents the industry standard for only loading trusted operating system…DATABREACHTODAY.CO.UK
4 DecReal Edge Computing Use Cases | Leadership & Communications - BSW #330This week, we are kick things off with an interview with Theresa Lanowitz, Head of Cybersecurity Evangelism at AT&T Cybersecurity, about Real Edge Computing Use Cases from the AT&T Cybersecurity Insights Report. Then we discuss our Leadership and Communications articles f…YOUTUBE.COM
4 DecReal Edge Computing Use Cases from the AT&T Cybersecurity Insights Report - Theresa La... - BSW #330Theresa Lanowitz joins Business Security Weekly to review real edge computing use cases from the AT&T Cybersecurity Insights Report. Specifically, we'll cover the following industry sector reports, including: - Healthcare - Manufacturing - Retail - US SLED - Transportation Re…YOUTUBE.COM
4 DecUber CISO Speaks Out as CISOs Draft Letters to the CEO, CMO, and CCO - BSW #330In the leadership and communications section, A Letter from the CISO to the CEO, The High Cost Of Ignoring Cybersecurity: Why Your Business Needs Protection, The Art of Speaking Cadence: Unleashing a Powerful Leadership Tool, and more! Visit https://www.securityweekly.com/bsw for…YOUTUBE.COM
4 DecSteve Katz, World's First CISO, Dies in Hospice CareFormer Banking CISO Remembered as Pioneering Leader, Generous Mentor and Colleague Steve Katz, the world's first CISO, died Saturday night while under hospice care in Long Island, New York. He left a strong legacy - not just as a pioneer and trailblazer in cybersecurity leadershi…DATABREACHTODAY.CO.UK
4 DecSurprise Cam Nudes | Staples | Turtle | Apple | 23andme | P2Pinfect | Jason Wood & More! – SWN346This week, Doug Talks: Surprise Cam Nudes, Staples, Turtle, Apple, 23andme, P2Pinfect, Gmail , Jason Wood, and More on the security weekly news. →Full Show Notes: https://securityweekly.com/swn346 →Join the Security Weekly Discord Server: https://discord.gg/pqSwWm4 →Visit our web…YOUTUBE.COM
🌐 CYBER THREAT LANDSCAPE 7[−]
4 DecAccount Takeover Attacks Use ScrubCrypt to Deploy RedLine Stealer MalwareThe initial stage of the infection involves a .bat file delivered through social engineering, containing a base64-encoded payload??. This leads to an obfuscated .NET executable file as the next infection stage??.HUMANSECURITY.COM
4 DecNew P2PInfect Botnet MIPS Variant Targeting Routers and IoT DevicesCybersecurity researchers have discovered a new variant of an emerging botnet called P2PInfect that's capable of targeting routers and IoT devices. The latest version, per Cado Security Labs, is compiled for Microprocessor without Interlocked Pipelined Stages (MIPS) arc…THEHACKERNEWS.COM
4 DecAI and TrustI trusted a lot today. I trusted my phone to wake me on time. I trusted Uber to arrange a taxi for me, and the driver to get me to the airport safely. I trusted thousands of other drivers on the road not to ram my car on the way. At the airport, I trusted ticket agents and mainte…SCHNEIER.COM
4 DecThe Rising Complexities of Software Supply Chain: A Proactive Approach to SecurityDATABREACHTODAY.CO.UK
4 DecNew Variant of P2Pinfect Targets MIPS Devices Including Routers and IoT DevicesThe new variant includes updated evasion techniques, such as Virtual Machine detection, debugger detection, and anti-forensics measures on Linux hosts, making it more difficult for researchers to analyze.CADOSECURITY.COM
4 DecNCCoE 5G Cybersecurity: Connecting the Dots Between IT and Teleco Cybersecurity Capabilities in 5G Systems5G will eventually impact every single industry—from healthcare to financial to even agriculture and transportation...and its impact is only increasing over time. Despite its benefits, it comes with privacy and security risks. An increasing number of interconnected devices increa…NIST.GOV
4 DecStealthier version of P2Pinfect malware targets MIPS devicesThe latest variants of the P2Pinfect botnet are now focusing on infecting devices with 32-bit MIPS (Microprocessor without Interlocked Pipelined Stages) processors, such as routers and IoT devices. [...]BLEEPINGCOMPUTER.COM
📡 INFOSEC NEWS 16[−]
4 DecUS Man Jailed Eight Years for SIM Swapping and Apple Support ImpersonationThe scams involved SIM swapping, social media account takeovers, Zelle payment fraud, and impersonating Apple Support personnel to steal money, NFTs, cryptocurrency, and other valuable digital property.HACKREAD.COM
4 DecThe Current State of Open RAN SecurityThe Open Radio Access Network (ORAN) architecture, while providing standardized interfaces and protocols, is vulnerable to attacks through malicious xApps that can compromise the entire RAN Intelligent Controller (RIC) subsystem.TRENDMICRO.COM
4 DecSophos DNS Protection – Join the EAPCalling all Sophos Firewall users! Join the Early Access Program for our new web protection service.SOPHOS.COM
4 DecBridging the Gap Between Cloud vs On-Premise SecurityIt is crucial to maintain unified visibility, control, and management across both cloud-based and on-premise security measures to bridge the gap and create a comprehensive and future-proof security stack.HELPNETSECURITY.COM
4 DecAstrology Website WeMystic Exposes Over 13 Million User RecordsThe astrology and spiritual content platform WeMystic exposed the sensitive data of its users, including names, email addresses, and dates of birth, due to an open and passwordless MongoDB database.SECURITYAFFAIRS.COM
4 DecMake a Fresh Start for 2024: Clean Out Your User Inventory to Reduce SaaS RiskAs work ebbs with the typical end-of-year slowdown, now is a good time to review user roles and privileges and remove anyone who shouldn’t have access as well as trim unnecessary permissions. In addition to saving some unnecessary license fees, a clean user inventory significantl…THEHACKERNEWS.COM
4 DecAmazon, Google and Microsoft sign “world first” agreement with UK government to...Online Fraud Charter to benefit cyber security ecosystem by reducing online fraud risksCSHUB.COM
4 DecNew Relic Says Hackers Accessed Internal Environment Using Stolen CredentialsPACKETSTORMSECURITY.COM
4 DecMore Than 1,500 Hugging Face API Tokens Exposed, Major Projects VulnerableThe exposed API tokens had write permissions, allowing attackers to modify files in account repositories and potentially manipulate existing models, posing a significant threat to organizations and their applications.THEREGISTER.COM
4 DecEstablishing New Rules for Cyber WarfareThe International Committee of the Red Cross (ICRC) has released a set of rules for civilian hackers involved in cyber conflicts. The rules aim to clarify the line between civilians and combatants in cyberspace during times of war.DARKREADING.COM
4 Dec23andMe confirms hackers stole ancestry data on 6.9 million usersOn Friday, genetic testing company 23andMe announced that hackers accessed the personal data of 0.1% of customers, or about 14,000 individuals. The company also said that by accessing those accounts, hackers were also able to access “a significant number of files containing profi…TECHCRUNCH.COM
4 DecMicrosoft fixes Outlook Desktop crashes when sending emailsMicrosoft has fixed a known issue causing Outlook Desktop clients to crash when sending emails from Outlook.com accounts. [...]BLEEPINGCOMPUTER.COM
4 DecWindows 11 KB5032288 update improves Copilot, fixes 11 bugsMicrosoft has released the KB5032288 November 2023 Windows 11 preview update with improvements for the Copilot AI assistant and almost a dozen bug fixes. [...]BLEEPINGCOMPUTER.COM