MATLOCK.CA
162Articles
9Categories
2024-01-09Date
🚨
CISA Warns of Apache Superset Vulnerability ExploitationCISA has added a critical-severity Apache Superset flaw (CVE-2023-27524) to its Known Exploited Vulnerabilities catalog. The post CISA Warns of Apache Superset Vulnerability Exploitation appeared first on SecurityWeek .
KEVSECURITYWEEK.COM — 09 Jan 2024
🚨
CISA warns agencies of fourth flaw used in Triangulation spyware attacksThe U.S. Cybersecurity and Infrastructure Security Agency has added to its to the Known Exploited Vulnerabilities catalog six vulnerabilities that impact products from Adobe, Apache, D-Link, and Joomla. [...]
KEVBLEEPINGCOMPUTER.COM — 09 Jan 2024
🐛
Enterprises with Kyocera printers open to path traversal attacks
CSOONLINE.COM — 09 Jan 2024
🐛
Cacti Blind, SQL Injection Flaw, Enables Remote Code Execution
GBHACKERS.COM — 09 Jan 2024
🐛
Apache OFBiz 0-day sees thousands of daily exploit attempts
THEREGISTER.COM — 9 Jan 2024
🐛
CVE-2024-20666 BitLocker Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20674 Windows Kerberos Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20677 Microsoft Office Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20676 Azure Storage Mover Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20654 Microsoft ODBC Driver Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20657 Windows Group Policy Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20658 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20680 Windows Message Queuing Client (MSMQC) Information Disclosure
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20682 Windows Cryptographic Services Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20683 Win32k Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20690 Windows Nearby Sharing Spoofing Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20691 Windows Themes Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20694 Windows CoreMessaging Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2022-35737 MITRE: CVE-2022-35737 SQLite allows an array-bounds overflow
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20696 Windows Libarchive Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20697 Windows Libarchive Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20698 Windows Kernel Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20699 Windows Hyper-V Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20700 Windows Hyper-V Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21305 Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21307 Remote Desktop Client Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21313 Windows TCP/IP Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21325 Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20672 .NET Core and Visual Studio Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-0056 Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-0057 NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20652 Windows HTML Platforms Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20653 Microsoft Common Log File System Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20655 Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20656 Visual Studio Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20660 Microsoft Message Queuing Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20661 Microsoft Message Queuing Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20662 Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20663 Windows Message Queuing Client (MSMQC) Information Disclosure
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20664 Microsoft Message Queuing Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21316 Windows Server Key Distribution Service Security Feature Bypass
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20681 Windows Subsystem for Linux Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20686 Win32k Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20687 Microsoft AllJoyn API Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-20692 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21306 Microsoft Bluetooth Driver Spoofing Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21309 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21310 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21311 Windows Cryptographic Services Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21312 .NET Framework Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21314 Microsoft Message Queuing Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21318 Microsoft SharePoint Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21319 Microsoft Identity Denial of service vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
🐛
CVE-2024-21320 Windows Themes Spoofing Vulnerability
MSRC.MICROSOFT.COM — 09 Jan 2024
⚠️
Vulnerability Assessments
INFOSEC.PUB — 9 Jan 2024
⚠️
Security Control Frameworks
INFOSEC.PUB — 9 Jan 2024
⚠️
Surge in Open Source Malware Stealing Login Credentials & Sensitive Data
GBHACKERS.COM — 09 Jan 2024
⚠️
Incorporating Mobile Threat Defense into Your Device Management Ecosystem
GBHACKERS.COM — 09 Jan 2024
⚠️
Protecting Windows networks: Get back to basics for the new year
CSOONLINE.COM — 09 Jan 2024
⚠️
Alert: New Vulnerabilities Discovered in QNAP and Kyocera Device Manager
THEHACKERNEWS.COM — 09 Jan 2024
⚠️
Researchers Disclose New Lumma Stealer Campaign Distributed via YouTube
CYWARE.COM — 09 Jan 2024
⚠️
Sensitive Files of Swiss Air Force Stolen in the Hack of Ultra Intelligence & Communications
SECURITYAFFAIRS.COM — 09 Jan 2024
⚠️
PIN-Stealing Android Malware
SCHNEIER.COM — 2024-01-09
⚠️
Update: Apache OFBiz Zero-Day Sees Thousands of Daily Exploit Attempts
THEREGISTER.COM — 09 Jan 2024
⚠️
Saudi Ministry of Industry and Mineral Resources Exposed Sensitive Data for 15 Months
SECURITYAFFAIRS.COM — 09 Jan 2024
⚠️
LoanDepot Takes Systems Offline Following Ransomware Attack
SECURITYWEEK.COM — 09 Jan 2024
⚠️
Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe
THEHACKERNEWS.COM — 09 Jan 2024
⚠️
Months long AsyncRAT campaign targeted key US infrastructure employees
CSOONLINE.COM — 09 Jan 2024
⚠️
Shadow APIs are opening organizations to attacks: Report
CSOONLINE.COM — 09 Jan 2024
⚠️
Online Services Down for German Craft Associations Following ‘Security Incident’
THERECORD.MEDIA — 09 Jan 2024
⚠️
High-Severity Vulnerabilities Patched in QNAP QTS, Video Station, QuMagie, Netatalk Products
KEVSECURITYWEEK.COM — 09 Jan 2024
⚠️
CISA Releases One Industrial Control Systems Advisory
CISA.GOV — Tue, 09 Jan 24 1
⚠️
Apache OFBiz Zero Day Pummeled By Exploit Attempts After Disclosure
PACKETSTORMSECURITY.COM — 09 Jan 2024
⚠️
Criminal IP and Tenable Partner for Swift Vulnerability Detection
BLEEPINGCOMPUTER.COM — 09 Jan 2024
⚠️
Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe
THEHACKERNEWS.COM — 09 Jan 2024
⚠️
Hackers disrupt Beirut airport with anti-Hezbollah message
THERECORD.MEDIA — 9 Jan 2024
⚠️
Bangladesh official alleges cyberattack ‘from Ukraine and Germany’ targeted election
THERECORD.MEDIA — 9 Jan 2024
⚠️
Wiper malware found in analysis of Iran-linked attacks on Albanian institutions
THERECORD.MEDIA — 9 Jan 2024
⚠️
Pro-Ukraine hackers claim breach of Russian internet provider
THERECORD.MEDIA — 9 Jan 2024
⚠️
New decryptor for Babuk Tortilla ransomware variant released
TALOSINTELLIGENCE.COM — 9 Jan 2024
⚠️
Jenkins Brute Force Scans, (Tue, Jan 9th)
ISC.SANS.EDU — 09 Jan 2024
⚠️
Microsoft Ships Urgent Fixes for Critical Flaws in Windows Kerberos, Hyper-V
SECURITYWEEK.COM — 09 Jan 2024
⚠️
Microsoft January 2024 Patch Tuesday fixes 49 flaws, 12 RCE bugs
BLEEPINGCOMPUTER.COM — 09 Jan 2024
⚠️
Critical Patches Issued for Microsoft Products, January 09, 2024
CISECURITY.ORG — 09 Jan 2024
⚠️
Kyocera Printers Open to Path Traversal Attacks
DATABREACHTODAY.CO.UK — 2024-01-09
⚠️
Fortinet Releases Security Updates for FortiOS and FortiProxy
CISA.GOV — Tue, 09 Jan 24 1
⚠️
Microsoft Releases Security Updates for Multiple Products
CISA.GOV — Tue, 09 Jan 24 1
📋
Adobe Patches Code Execution Flaws in Substance 3D Stager
SECURITYWEEK.COM — 09 Jan 2024
📋
Siemens, Schneider Electric Release First ICS Patch Tuesday Advisories of 2024
SECURITYWEEK.COM — 09 Jan 2024
📋
2024’s first Patch Tuesday steps lightly
SOPHOS.COM — 09 Jan 2024
📢
Reimagining Risk in the Emerging Cloud: A GRC Perspective - Solomon Ugah - CSP #156
YOUTUBE.COM — 2024-01-09
📢
Jobs, QNAP, NIST, Spectral Blur, Stuxnet, Swatting, Volkswagen, Jason Wood – SWN #352
YOUTUBE.COM — 2024-01-09
📢
Jobs, QNAP, NIST, Spectral Blur, Stuxnet, Swatting, Volkswagen, Jason Wood - SWN #352
YOUTUBE.COM — 2024-01-09
📢
[Control systems] Schneider Electric security advisory (AV24-012)
CYBER.GC.CA — 2024-01-09
📢
SAP security advisory – January 2024 monthly rollup (AV24-014)
CYBER.GC.CA — 2024-01-09
📢
[Control systems] Siemens security advisory (AV24-013)
CYBER.GC.CA — 2024-01-09
📢
Microsoft security advisory – January 2024 monthly rollup (AV24-018)
CYBER.GC.CA — 2024-01-09
📢
Fortinet security advisory (AV24-017)
CYBER.GC.CA — 2024-01-09
📢
HPE security advisory (AV24-016)
CYBER.GC.CA — 2024-01-09
📢
Google Chrome security advisory (AV24-015)
CYBER.GC.CA — 2024-01-09
🔥
Bangladesh Official Alleges Cyberattack ‘From Ukraine and Germany’ Targeted Election
THERECORD.MEDIA — 09 Jan 2024
🔥
Ransomware Attack on Toronto Zoo Had No Impact on Animal Wellbeing
BLEEPINGCOMPUTER.COM — 09 Jan 2024
🔥
Netgear, Hyundai Latest X Accounts Hacked To Push Crypto Drainers
BLEEPINGCOMPUTER.COM — 09 Jan 2024
🔥
Update: LockBit Claims November Attack on New Jersey Hospital That Disrupted Patient Care
THERECORD.MEDIA — 09 Jan 2024
🔥
Midwives clinic takes nine months to deliver news of data breach
BITDEFENDER.COM — 09 Jan 2024
🔥
Rhysida Ransomware Gang Takes Credit for Christmas Attack on Global Lutheran Organization
THERECORD.MEDIA — 09 Jan 2024
🔥
New York Clinic Must Pay $450K Fine, Spend $1.2M on Security
BANKINFOSECURITY.COM — 09 Jan 2024
🔥
Bosch Nutrunner Vulnerabilities Could Aid Hacker Attacks Against Automotive Production Lines
SECURITYWEEK.COM — 09 Jan 2024
🔥
Ransomware Gang Claims Attack on Capital Health
SECURITYWEEK.COM — 09 Jan 2024
🔥
Continuity in Chaos: Applying Time-Tested Incident Response to Modern Cybersecurity
SECURITYWEEK.COM — 09 Jan 2024
🔥
New Decryptor for Babuk Tortilla Ransomware Variant Released
TALOSINTELLIGENCE.COM — 09 Jan 2024
🔥
Hackers Can Infect Network-Connected Wrenches To Install Ransomware
PACKETSTORMSECURITY.COM — 09 Jan 2024
🔥
LoanDepot Systems Offline Following Ransomware Attack
PACKETSTORMSECURITY.COM — 09 Jan 2024
🔥
Paraguay warns of Black Hunt ransomware attacks after Tigo Business breach
BLEEPINGCOMPUTER.COM — 09 Jan 2024
🔥
Turkish Hackers Target Microsoft SQL Servers in Americas, Europe
SECURITYWEEK.COM — 09 Jan 2024
🔥
Decryptor for Babuk ransomware variant released after hacker arrested
BLEEPINGCOMPUTER.COM — 09 Jan 2024
🔥
AI aides nation-state hackers but also helps US spies to find them, says NSA cyber director
TECHCRUNCH.COM — 09 Jan 2024
🔥
Hackers target Microsoft SQL servers in Mimic ransomware attacks
BLEEPINGCOMPUTER.COM — 09 Jan 2024
🔥
Ransomware victims targeted by fake hack-back offers
BLEEPINGCOMPUTER.COM — 09 Jan 2024
🔥
Fidelity National Financial says hackers stole data on 1.3 million customers
TECHCRUNCH.COM — 09 Jan 2024
🔥
Fallout Mounting From Recent Major Health Data Hacks
DATABREACHTODAY.CO.UK — 2024-01-09
🔥
US SEC’s X account hacked to announce fake Bitcoin ETF approval
BLEEPINGCOMPUTER.COM — 09 Jan 2024
🔥
Cyber insurance requirements: What’s in store for 2024
TRENDMICRO.COM — 09 Jan 2024
🕵️
Browser Certificate Stores and QWACs
INFOSEC.PUB — 9 Jan 2024
🕵️
ISC Stormcast For Tuesday, January 9th, 2024 https://isc.sans.edu/podcastdetail/8802, (Tue, Jan 9th)
ISC.SANS.EDU — 09 Jan 2024
🕵️
Accenture Buys 6point6 to Expand Cyber Portfolio
GBHACKERS.COM — 09 Jan 2024
🕵️
Beware! YouTube Videos Promoting Cracked Software Distribute Lumma Stealer
THEHACKERNEWS.COM — 09 Jan 2024
🕵️
Multiple QNAP High-Severity Flaws Let Attackers Execute Remote Code
GBHACKERS.COM — 09 Jan 2024
🕵️
Cybersecurity Funding Dropped 40% in 2023: Analysis
SECURITYWEEK.COM — 09 Jan 2024
🕵️
Best Practices for Moving Sensitive Data into the Cloud | Leadership & Communications - BSW #333
YOUTUBE.COM — 2024-01-09
🕵️
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
KNOWBE4.COM — 09 Jan 2024
🕵️
Cybersecurity trends: IBM’s predictions for 2024
SECURITYINTELLIGENCE.COM — 09 Jan 2024
🕵️
CyberheistNews Vol 14 #02 AI Breaks Free: New Insights Into The Latest Chatbot Jailbreak Hack
KNOWBE4.COM — 09 Jan 2024
🕵️
Countering Online Fraud With Gen AI Safeguards
DATABREACHTODAY.CO.UK — 2024-01-09
🕵️
Alert: Water Curupira Hackers Actively Distributing PikaBot Loader Malware
THEHACKERNEWS.COM — 09 Jan 2024
🕵️
What's in Store for 2024? - ASW #268
YOUTUBE.COM — 2024-01-09
🕵️
23andMe Blames Users, Abusing Google's OAuth2, Rustls Performance, AI Goes OSINT - ASW #268
YOUTUBE.COM — 2024-01-09
🕵️
DevOps Configuration Management Tier Discussion
INFOSEC.PUB — 9 Jan 2024
🕵️
Using honeytokens to detect (AiTM) phishing attacks on your Microsoft 365 tenant
ZOLDER.IO — 09 Jan 2024
🕵️
Organizations Undercount APIs by One-Third, Experts Warn
DATABREACHTODAY.CO.UK — 2024-01-09
🕵️
Delinea Acquires Authomize to Tackle Identity-Based Threats
SECURITYWEEK.COM — 09 Jan 2024
🕵️
Cybercriminals Celebrate the Holidays with Dark Web Data Dumps, Dubbed  “Leaksmas”
KNOWBE4.COM — 09 Jan 2024
🕵️
Red Flags for Phishing: Verizon Outlines Common Scams to Watch Out For
KNOWBE4.COM — 09 Jan 2024
🕵️
GUEST ESSAY: The case for using augmented reality (AR) and virtual reality (VR) to boost training
LASTWATCHDOG.COM — 09 Jan 2024
🕵️
PAM Provider Delinea Acquires Israeli Startup Authomize
DATABREACHTODAY.CO.UK — 2024-01-09
🕵️
OpenAI: Gen AI 'Impossible' Without Copyrighted Material
DATABREACHTODAY.CO.UK — 2024-01-09
🌐
Deceptive Cracked Software Spreads Lumma Variant on YouTube
FORTINET.COM — 09 Jan 2024
📡
Why Public Links Expose Your SaaS Attack Surface
THEHACKERNEWS.COM — 09 Jan 2024
📡
Google Search bug shows blank page in Firefox for Android
BLEEPINGCOMPUTER.COM — 09 Jan 2024
📡
Nigerian Gets Ten Years for Laundering Scam Funds
INFOSECURITY-MAGAZINE.COM — 09 Jan 2024
📡
US DHS Solicits Synthetic Data Expertise for AI Training
BANKINFOSECURITY.COM — 09 Jan 2024
📡
Turkish Hackers Target Microsoft SQL Servers In Americas, Europe
PACKETSTORMSECURITY.COM — 09 Jan 2024
📡
FTC bans X-Mode from selling phone location data, and orders firm to delete collected data
TECHCRUNCH.COM — 09 Jan 2024
📡
Windows 11 KB5034123 update released with security and Wi-Fi fixes
BLEEPINGCOMPUTER.COM — 09 Jan 2024
📡
Windows 10 KB5034122 update released with fix for shut down bug
BLEEPINGCOMPUTER.COM — 09 Jan 2024
📡
FTC bans data broker from selling Americans’ location data
BLEEPINGCOMPUTER.COM — 09 Jan 2024
📡
China claims it cracked Apple's AirDrop to find numbers, email addresses
BLEEPINGCOMPUTER.COM — 09 Jan 2024
📡
Everything you need to know about VPNs
TECHCRUNCH.COM — 09 Jan 2024
📡
Nigerian gets 10 years for laundering millions stolen from elderly
BLEEPINGCOMPUTER.COM — 09 Jan 2024
📡
Love is in the AI: Finding love online takes on a whole new meaning
WELIVESECURITY.COM — 09 Jan 2024
📡
Securing Application Staging & Production Environments
TRENDMICRO.COM — 09 Jan 2024
📡
Black Basta-Affiliated Water Curupira’s Pikabot Spam Campaign
TRENDMICRO.COM — 09 Jan 2024