186Articles
9Categories
2024-03-12Date
πŸ›
Hackers Compromised TeamCity Server To Install BianLian’s GO Backdoor
πŸ›
Experts Released PoC Exploit for Critical Progress Software OpenEdge Bug
πŸ›
CVE-2024-20671 Microsoft Defender Security Feature Bypass Vulnerability
πŸ›
CVE-2024-21392 .NET and Visual Studio Denial of Service Vulnerability
πŸ›
CVE-2024-21411 Skype for Consumer Remote Code Execution Vulnerability
πŸ›
CVE-2024-21418 Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21421 Azure SDK Spoofing Vulnerability
πŸ›
CVE-2024-21426 Microsoft SharePoint Server Remote Code Execution Vulnerability
πŸ›
CVE-2024-21429 Windows USB Hub Driver Remote Code Execution Vulnerability
πŸ›
CVE-2024-21430 Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
πŸ›
CVE-2024-21438 Microsoft AllJoyn API Denial of Service Vulnerability
πŸ›
CVE-2024-21439 Windows Telephony Server Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21441 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
πŸ›
CVE-2024-21442 Windows USB Print Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21443 Windows Kernel Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21444 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
πŸ›
CVE-2024-21445 Windows USB Print Driver Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21446 NTFS Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21450 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
πŸ›
CVE-2024-21451 Microsoft ODBC Driver Remote Code Execution Vulnerability
πŸ›
CVE-2024-26197 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
πŸ›
CVE-2024-26159 Microsoft ODBC Driver Remote Code Execution Vulnerability
πŸ›
CVE-2024-26190 Microsoft QUIC Denial of Service Vulnerability
πŸ›
CVE-2024-26198 Microsoft Exchange Server Remote Code Execution Vulnerability
πŸ›
CVE-2024-26199 Microsoft Office Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26201 Microsoft Intune Linux Agent Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26203 Azure Data Studio Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26161 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
πŸ›
CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability
πŸ›
CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21334 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
πŸ›
CVE-2024-21390 Microsoft Authenticator Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21400 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21407 Windows Hyper-V Remote Code Execution Vulnerability
πŸ›
CVE-2024-21408 Windows Hyper-V Denial of Service Vulnerability
πŸ›
CVE-2024-21419 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
πŸ›
CVE-2024-21427 Windows Kerberos Security Feature Bypass Vulnerability
πŸ›
CVE-2024-21431 Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
πŸ›
CVE-2024-21432 Windows Update Stack Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21433 Windows Print Spooler Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21434 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21435 Windows OLE Remote Code Execution Vulnerability
πŸ›
CVE-2024-21436 Windows Installer Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21437 Windows Graphics Component Elevation of Privilege Vulnerability
πŸ›
CVE-2024-21440 Microsoft ODBC Driver Remote Code Execution Vulnerability
πŸ›
CVE-2024-21448 Microsoft Teams for Android Information Disclosure Vulnerability
πŸ›
CVE-2024-26160 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
πŸ›
CVE-2024-26162 Microsoft ODBC Driver Remote Code Execution Vulnerability
πŸ›
CVE-2024-26166 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
πŸ›
CVE-2024-26169 Windows Error Reporting Service Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26170 Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26173 Windows Kernel Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26174 Windows Kernel Information Disclosure Vulnerability
πŸ›
CVE-2024-26176 Windows Kernel Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26177 Windows Kernel Information Disclosure Vulnerability
πŸ›
CVE-2024-26178 Windows Kernel Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26181 Windows Kernel Denial of Service Vulnerability
πŸ›
CVE-2024-26182 Windows Kernel Elevation of Privilege Vulnerability
πŸ›
CVE-2024-26185 Windows Compressed Folder Tampering Vulnerability
πŸ›
CVE-2023-28746 Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
πŸ›
CVE-2024-26204 Outlook for Android Information Disclosure Vulnerability
πŸ›
CVE-2024-26165 Visual Studio Code Elevation of Privilege Vulnerability
πŸ›
Microsoft Patch Tuesday - March 2024 - SANS Internet Storm Center
⚠️
Flipkart - 552,094 breached accounts
⚠️
WordPress Plugin Flaw Exposes 200,000+ Websites to XSS Attacks
⚠️
Thinking beyond BitLocker: Managing encryption across Microsoft services
⚠️
British Authorities Have Never Detected a Breach of Ransomware Sanctions β€” But is That Good or Bad News?
⚠️
Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites
⚠️
Justice Department Beefs up Focus on Artificial Intelligence Enforcement, Warns of Harsher Sentences
⚠️
Muddled Libra Hackers Using Pentesting Tools To Gain Admin Access
⚠️
Chinese espionage a prime concern for connected vehicles
⚠️
Exploited Building Access System Vulnerability Patched 5 Years After Disclosure
⚠️
CTEM 101 - Go Beyond Vulnerability Management with Continuous Threat Exposure Management
⚠️
EquiLend Warns Employees Their Data Was Stolen by Ransomware Gang
⚠️
CloudGrappler: Open Source Tool that Detects Hacking Activity
⚠️
How Not to Become the Target of the Next Microsoft Hack
⚠️
Russia-aligned hackers take down French state services in massive DDoS attack
⚠️
CloudGrappler: Open-Source Tool Detects Activity in Cloud Environments
⚠️
Researchers Expose Microsoft SCCM Misconfigurations Usable in Cyberattacks
⚠️
ODNI Releases New Open-Source Intelligence Strategy With Limited Details
⚠️
CISA Releases One Industrial Control Systems Advisory
⚠️
CISA Publishes SCuBA Hybrid Identity Solutions Guidance
⚠️
Muddled Libra Threat Group Abuses Pentesting Tools to Infiltrate Networks
⚠️
Never Before Seen Linux Malware Gets Installed Using 1-Day Exploits
⚠️
Exploited Building Access System Vulnerability Patched 5 Years After Disclosure
⚠️
CISA Breached By Hackers Exploiting Ivanti Bugs
⚠️
Microsoft waited 6 months to patch actively exploited admin-to-kernel vulnerability
KEV
⚠️
HHS Resources, Funding to Bolster Healthcare Cyber Efforts
⚠️
Microsoft March 2024 Patch Tuesday fixes 60 flaws, 18 RCE bugs
⚠️
Fortinet Releases Security Updates for Multiple Products
⚠️
Building a 911 Cyber Civil Defense System for Healthcare
⚠️
Patch Tuesday: Microsoft Flags Major Bugs in HyperV, Exchange Server
⚠️
Adobe Releases Security Updates for Multiple Products
⚠️
Microsoft Releases Security Updates for Multiple Products
⚠️
Patch Tuesday, March 2024 Edition
⚠️
Ransomware Talent Surges to Akira After LockBit's Demise
⚠️
Google’s Security Command Center Enterprise fills gaps across cloud security lifecycle
⚠️
Critical Patches Issued for Microsoft Products, March 13, 2024
⚠️
Vulnerability Reward Program: 2023 Year in Review
πŸ“‹
ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities
πŸ“‹
Adobe Patches Critical Flaws in Enterprise Products
πŸ“‹
Microsoft Patch Tuesday - March 2024, (Tue, Mar 12th)
πŸ“‹
59 CVEs primed for Microsoft’s March Patch Tuesday
πŸ“‹
Windows KB5035849 update failing to install with 0xd000034 errors
πŸ“’
Welcoming the Liechtenstein Government to Have I Been Pwned
πŸ“’
US Federal Budget Proposes $27.5B for Cybersecurity
πŸ“’
Hackers Advertising FUD APK Crypter that Runs on all Android Devices
πŸ“’
CISA Lacks Staff with Skills Needed to Safeguard OT
πŸ“’
How data residency impacts security and compliance
πŸ“’
[Control systems] Schneider Electric security advisory (AV24-135)
πŸ“’
CISA’s OT Attack Response Team Understaffed: GAO
πŸ“’
SAP security advisory – March 2024 monthly rollup (AV24-136)
πŸ“’
[Control systems] Siemens security advisory (AV24-137)
πŸ“’
Dem Bones, Leather, QNAP, CISA, Microsoft, PyPI, France, AirBnB, Josh Marpet and More - SWN #368
πŸ“’
Fortinet security advisory (AV24-138)
πŸ“’
Adobe security advisory (AV24-139)
πŸ“’
Microsoft security advisory – March 2024 monthly rollup (AV24-140)
πŸ”₯
The French Government Says It’s Being Targeted by Unusual Intense Cyberattacks
πŸ”₯
Update: Third-Party Breach and Missing MFA Led to British Library Attack
πŸ”₯
Ransomware Attacks are Hitting Critical Infrastructure More Often, FBI Says
πŸ”₯
Roku Cancels Unauthorized Subscriptions and Provides Refunds for 15K Breached Accounts
πŸ”₯
Update: Okta Says Data Leaked on Hacking Forum Not From its Systems
πŸ”₯
The 2024 Sophos Threat Report: Cybercrime on Main Street
πŸ”₯
French Government Agencies Hit by Cyberattacks of β€˜Unprecedented Intensity’
πŸ”₯
EquiLend Ransomware Attack Leads to Data Breach
πŸ”₯
US, Russia Accuse Each Other of Potential Election Cyberattacks
πŸ”₯
Report: Three-Quarters of Cyber Incident Victims are Small Businesses
πŸ”₯
Securing Connections: 3rd Party Risk Mgmt Expert Insights - Charles Spence - CSP #165
πŸ”₯
EquiLend Ransomware Attack Leads To Data Breach
πŸ”₯
Live Webinar | Identity Under Siege in the EU: How to Combat Data Breaches with Proactive Measures
πŸ”₯
New DoNex Ransomware Observed in the Wild Targeting Enterprises
πŸ”₯
Stanford: Data of 27,000 people stolen in September ransomware attack
πŸ•΅οΈ
ISC Stormcast For Tuesday, March 12th, 2024 https://isc.sans.edu/podcastdetail/8890, (Tue, Mar 12th)
πŸ•΅οΈ
KrustyLoader Backdoor Attack Both Windows & Linux Systems
πŸ•΅οΈ
15 Best Ethical Hacking Learning Websites (2024) - TechApprise
πŸ•΅οΈ
Hackers Deliver MSIX Malware in The Lure of Freemium Productivity App
πŸ•΅οΈ
South Korean Citizen Detained in Russia on Cyber Espionage Charges
πŸ•΅οΈ
Italian DPA Asks OpenAI’s β€˜Sora’ to Reveal Algorithm Information
πŸ•΅οΈ
Security BSides Athens 2023 - 12 talks
πŸ•΅οΈ
French Government Hit with Severe DDoS Attack
πŸ•΅οΈ
Jailbreaking LLMs with ASCII Art
πŸ•΅οΈ
Typosquatting Wave Shows No Signs of Abating
πŸ•΅οΈ
CyberheistNews Vol 14 #11 Microsoft and OpenAI Team Up to Block Threat Actor Access to AI
πŸ•΅οΈ
Dodging Digital Deception: How to Spot Fake Recruiters and Shield Your Career Search from Phishing Scams
πŸ•΅οΈ
How Much Will AI Help Cybercriminals?
πŸ•΅οΈ
Generative AI Results In 1760% Increase in BEC Attacks
πŸ•΅οΈ
[Question] Is this a secure way to generate passwords
πŸ•΅οΈ
J.P. Morgan Growth Leads $39 Million Investment in Eye Security
πŸ•΅οΈ
Getting Down to the Roots of First-Party Fraud
πŸ•΅οΈ
Tor’s new WebTunnel bridges mimic HTTPS traffic to evade censorship
πŸ•΅οΈ
5 Unique Challenges for AI in Cybersecurity
πŸ•΅οΈ
TeamCity Authn Bypass, ArtPrompt Attacks, Low Quality Vuln Reports, Secure by Design - ASW #276
πŸ•΅οΈ
More API Calls, More Problems: The State of API Security in 2024 - Lebin Cheng - ASW #276
πŸ•΅οΈ
I am announcing AIDA: Artificial Intelligence Defense Agents!
πŸ•΅οΈ
SAP Patches Critical Command Injection Vulnerabilities
πŸ•΅οΈ
Google Paid Out $10 Million via Bug Bounty Programs in 2023
πŸ•΅οΈ
Acer confirms Philippines employee data leaked on hacking forum
πŸ•΅οΈ
Building Cyber Resilience: Key Trends and Strategies for a Secure Future - Cybersecurity Magazine
πŸ•΅οΈ
Advanced Tech Fuels Authoritarian Threats, US Intel Warns
πŸ•΅οΈ
GhostRace Detailed - Speculative Race Conditions Affecting All Major CPUs / ISAs
πŸ•΅οΈ
10 Security Metrics Categories CISOs Should Present to the Board
πŸ•΅οΈ
Spanish High Court Upholds Temporary Worldcoin Ban
πŸ•΅οΈ
DARPA Picks 7 Small Businesses for AI Cyber Challenge
🌐
Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets
🌐
Incognito Darknet Market Mass-Extorts Buyers, Sellers
🌐
Tax-Related Scams Escalate as Filing Deadline Approaches
πŸŽ™οΈ
Transatlantic Cable podcast episode 338 | Kaspersky official blog
πŸ“‘
Broadcom Axes Carbon Black Sale, to Merge Unit with Symantec
πŸ“‘
Tuta Mail Adds New Quantum-Resistant Encryption to Protect Email
πŸ“‘
Webinar | Navigating the SEC Rules for Enhanced Cybersecurity in IT and OT Environments
πŸ“‘
Malicious PyPI Packages Target Crypto Wallet Recovery Passwords in BIPClip Campaign
πŸ“‘
Over 12 million auth secrets and keys leaked on GitHub in 2023
πŸ“‘
White House Summons UnitedHealth CEO Over Hack
πŸ“‘
French Government Sites Disrupted By Tres Grande DDoS
πŸ“‘
Boeing Whistleblower Who Raised Safety Concerns Found Dead
πŸ“‘
Siemens RuggedCom Devices Impacted By 45 Fortinet Vulns
πŸ“‘
Report: Victims Lose $47 Million to Crypto Phishing Scams in February
πŸ“‘
Live Webinar | Navigating Identity Threats: Detection & Response Strategies for Modern Security Challenges
πŸ“‘
Steadybit's Chaos Engineering Platform Attracts $6M in Series A Funding
πŸ“‘
Google paid $10 million in bug bounty rewards last year
πŸ“‘
ODNI Appoints New Election Security Leader Ahead of Presidential Race
πŸ“‘
Live Webinar | Navigating Identity Threats: Detection & Response Strategies for Modern Security Challenges
πŸ“‘
Windows 10 KB5035845 update released with 9 new changes, fixes
πŸ“‘
Windows 11 KB5035853 update released, here's what's new
πŸ“‘
Brave: Sharp increase in installs after iOS DMA update in EU
πŸ“‘
Election cybersecurity: Protecting the ballot box and building trust in election integrity