110Articles
8Categories
2024-03-28Date
🚨
CISA Adds One Known Exploited Vulnerability in Microsoft Sharepoint Server to CatalogThe vulnerability, tracked as CVE-2023-24955 (CVSS score: 7.2), is a critical remote code execution flaw that allows an authenticated attacker with Site Owner privileges to execute arbitrary code.
KEV
🐛
Thousands of servers hacked due to insecurely deployed Ray AI framework
⚠️
Hardware Vulnerability in Apple’s M-Series Chips
⚠️
Hackers Developing Malicious LLMs After WormGPT Falls Flat
⚠️
The AI Revolution and White-Collar Workers
⚠️
Google Fixes Chrome Zero-Days Exploited at Pwn2Own 2024
⚠️
2 Chrome Zero-Days Exploited at Pwn2Own 2024: Patch Now
⚠️
Meta sued for snooping on Snapchat users
⚠️
Are you okay? Understanding the world of a CISO
⚠️
iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage
⚠️
Your employees are using sensitive corporate devices for personal browsing
⚠️
A Zero Trust approach for remote access in utilities is essential
⚠️
Report suggests cybersecurity investment, board involvement linked to better shareholder returns
⚠️
Cisco Releases Security Updates for Multiple Products
⚠️
How Pentesting-as-a-Service can Reduce Overall Security Costs
⚠️
Are we winning? - Jason Healey - PSW #822
KEV
⚠️
Malware Upload Attack Hits PyPI Repository
⚠️
Retail chain Hot Topic hit by new credential stuffing attacks
⚠️
Iran’s evolving influence operations and cyberattacks support Hamas
⚠️
Decade-old Linux ‘wall’ bug helps make fake SUDO prompts, steal passwords
⚠️
Cisco: Security teams are ‘overconfident’ about handling next-gen threats
⚠️
Feds Seek Secure-by-Design Armageddon for SQL Injection Bugs
⚠️
Why cyber hygiene requires curious talent - Clea Ostendorf - ESW #355
⚠️
Microsoft: 87% of UK Businesses Are Unprepared for Cyberattacks - Source: www.techrepublic.com
⚠️
Google Public DNS’s approach to fight against cache poisoning attacks
📢
JetBrains security advisory (AV24-167)
📢
GitLab security advisory (AV24-166)
📢
Cisco security advisory (AV24-165)
📢
Microsoft Edge security advisory (AV24-164)
📢
[Control systems] Siemens security advisory (AV24-163)
📢
Google Chrome security advisory (AV24-162)
📢
Red Hat security advisory (AV24-161)
📢
[Control systems] CISA ICS security advisories (AV24-160)
📢
Apple security advisory (AV24-159)
📢
Dell security advisory (AV24-158)
📢
IBM security advisory (AV24-157)
📢
UK: NCSC Warns of Hackers Hitting High-Risk Individuals' Personal Accounts
📢
CISA Moving Forward With Cyber Incident Reporting Rules Impacting 316,000 Entities
📢
Sellafield nuclear waste dump faces prosecution over cybersecurity failures
📢
C2A Security’s EVSec Risk Management and Automation Platform Gains Automotive Industry Favor as Companies Pursue Regulatory Compliance
📢
OnDemand Webinar | Compliance + Security in the Connected Device Era
📢
Microsoft Edge security advisory (AV24-168)
🔥
Municipalities in Texas, Georgia See Services Disrupted Following Ransomware Attacks
🔥
US Offering $10 Million Reward for Information on Change Healthcare Hackers
🔥
Details and Lessons Learned From the Ransomware Attack on the British Library
🔥
The Moon Malware Hacked 6,000 ASUS Routers in 72hours to Use for Proxy
🔥
Coro, building cybersecurity for SMBs, locks down $100M at a $750M valuation
🔥
Exvagos - 2,121,789 breached accounts
🔥
Vietnam Securities Broker Suffers Cyberattack That Resulted in Trading Suspension
🔥
How will the Merck settlement affect the insurance industry?
🔥
'Darcula' Phishing-as-a-Service Operation Bleeds Victims Across 100 More Than Countries
🔥
Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack
🔥
US offers $10M to help catch Change Healthcare hackers
🔥
Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries
🔥
Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries
🔥
OnDemand | 1 in 3 Breaches Go Undetected: Strengthen Your Defense Against Identity Attacks
🔥
UnitedHealth Admits Patient Data Was 'Taken' in Mega Attack
🔥
Breach Roundup: Russian Organizations Losing Microsoft Cloud
🔥
From Despair to Disruption: Zafran Takes on Cyber Mitigation
🔥
Thread Hijacking: Phishes That Prey on Your Curiosity
🔥
Cybercriminals play dirty: A look back at 10 cyber hits on the sporting world
🕵️
OMB Issues First Governmentwide AI Risk Mitigation Rules
🕵️
Securing SMBs Globally: Coro Raises $100M to Go Into Europe
🕵️
Tycoon 2FA - The Criminals' Favorite Platform for MFA Theft
🕵️
Chinese Cyberspies Targeting ASEAN Entities
🕵️
Threat Indicators Show 2024 Is Already Promising to be Worse Than 2023
🕵️
ISC Stormcast For Thursday, March 28th, 2024 https://isc.sans.edu/podcastdetail/8914, (Thu, Mar 28th)
🕵️
Cisco Patches DoS Vulnerabilities in Networking Products
🕵️
Zafran Emerges From Stealth With Risk and Mitigation Platform, $30M in Funding
🕵️
[New Feature] Start Coaching Your Users in Real Time With the New Google Chat Integration for KnowBe4's SecurityCoach
🕵️
Wireshark 4.2.4 Released: What’s New!
🕵️
Zoom Unveils AI-Powered All-In-One AI Work Workplace
🕵️
Coro Raises $100 Million for All-in-One Security Platform
🕵️
Cybersecurity Mesh: Overcoming Data Security Overload
🕵️
Cyberespionage Campaign Targets Government, Energy Entities in India
🕵️
Splunk Patches Vulnerabilities in Enterprise Product
🕵️
Crypto, Bluetooth Vulns, Unsafe Locks - PSW #822
🕵️
GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats
🕵️
Cryptohack Roundup: Sam Bankman-Fried Gets 25-Year Sentence
🕵️
Federal Elections Commission Considers Regulating AI
🌐
StealthMole raises $7M Series A for its AI-powered dark web intelligence platform
🌐
Smashing Security podcast #365: Hacking hotels, Google’s AI goof, and cyberflashing
🌐
PyPI suspends new user registration to block malware campaign
🌐
Activision says it’s investigating password-stealing malware targeting game players
📡
Protecting information while using remote technologies: Tips for academic institutions - ITSAP.00.140
📡
Turning to a Career in Cybersecurity
📡
On Point: The New Impersonation-Social Engineering Attacks
📡
Apps Secretly Turning Devices Into Proxy Network Nodes Removed From Google Play
📡
Trezor’s Twitter Account Hijacked by Cryptocurrency Scammers via Bogus Calendly Invite
📡
Behind the Scenes: The Art of Safeguarding Non-Human Identities
📡
New ZenHammer Attack Bypasses Rowhammer Defenses on AMD CPUs
📡
Telegram Offers Premium Subscription in Exchange for Using Your Number to Send OTPs
📡
From JavaScript to AsyncRAT, (Thu, Mar 28th)
📡
How to tell that what appears to be a message from your boss is actually the beginning of a scam attack | Kaspersky official blog
📡
Update: INC Ransom Claims Responsibility for Attack on NHS Scotland
📡
New Webinar: Avoiding Application Security Blind Spots with OPSWAT and F5
📡
Hackers Developing Malicious LLMs After WormGPT Falls Flat
📡
Sam Bankman-Fried's Sentencing Hearing Over FTX Fraud Begins Today
📡
Sellafield To Be Prosecuted For IT Security Offenses
📡
These 17,000 Microsoft Exchange Servers Are A Ticking Time Bomb
📡
Chinese Cyberspies Targeting ASEAN Entities
📡
Cisco Patches DoS Vulns In Networking Products
📡
Threat Indicators Show 2024 Is Already Promising To Be Worse Than 2023
📡
Apple ID Push Bombing Scam Campaign Hits Cyber Startup Founders
📡
How AI Is Shaping an Inclusive and Diverse Future
📡
Darcula Phishing Network Leveraging RCS and iMessage to Evade Detection
📡
Cisco warns of password-spraying attacks targeting VPN services
📡
Sam Bankman-Fried Sentenced To 25 Years In Prison
📡
Sensor Intel Series: Top CVEs in February 2024
📡
Sensor Intel Series: Top CVEs in February 2024