103Articles
7Categories
2024-04-16Date
🐛
Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack
🐛
Connect:fun Attacking Organizations Running Fortinet’s FortiClient EMS
🐛
New SteganoAmor Attacks Use Steganography to Target 320 Organizations Globally
🐛
PuTTY SSH client flaw allows recovery of cryptographic private keys
🐛
Critical PuTTY Vulnerability Allows Secret Key Recovery
🐛
Palo Alto Networks GlobalProtect exploit public and widely exploited CVE-2024-3400, (Tue, Apr 16th)
🐛
CVE-2024-26257 Microsoft Excel Remote Code Execution Vulnerability
⚠️
PuTTY vulnerability vuln-p521-bias
⚠️
CISA Warns of Critical Vulnerability in Chirp Smart Locks
⚠️
US supreme court ruling suggests change in cybersecurity disclosure process
⚠️
Cisco Duo Data Breach: Hackers Stolen VoIP & SMS for MFA
⚠️
New LockBit Variant Exploits Self-Spreading Features
⚠️
10 tips to keep IP safe
⚠️
Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt
⚠️
Identity in the Shadows: Shedding Light on Cybersecurity's Unseen Threats
⚠️
Sensitive US government data exposed after Space-Eyes data breach
⚠️
Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack
⚠️
TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks
⚠️
AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs
⚠️
Ex-Security Engineer Jailed For Hacking Decentralized Cryptocurrency Exchanges
⚠️
Demystifying Security Engineering Career Tracks - Karan Dwivedi - ASW #281
⚠️
OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt
⚠️
CISA Releases Four Industrial Control Systems Advisories
⚠️
Cisco warns of large-scale brute-force attacks against VPN services
⚠️
Microsoft will Limit Exchange Online Bulk Emails to Fight Spam
⚠️
EM Eye: data theft from surveillance cameras | Kaspersky official blog
⚠️
Exploit released for Palo Alto PAN-OS bug used in attacks, patch now
KEV
⚠️
After XZ Utils, More Open-Source Maintainers Under Attack
⚠️
A crypto wallet maker’s warning about an iMessage bug sounds like a false alarm
⚠️
Top Officials Again Push Back on Ransom Payment Ban
⚠️
College Students Help Boost Cybersecurity With Free Clinics
⚠️
Ivanti warns of critical flaws in its Avalanche MDM solution
⚠️
More open-source project takeover attempts found after XZ Utils attack
⚠️
Weathering the phishing front.
📢
NSA, CISA & FBI Released Best Practices For AI Security Deployment 2024
📢
Joint advisory on deploying AI systems securely
📢
Arg Parsing in Rust, End of Life Hardware, CSRB & MS, Chrome’s V8 Sandbox - ASW #281
📢
Juniper security advisory (AV24-207)
📢
Mozilla security advisory (AV24-209)
📢
PuTTY security advisory (AV24-208)
📢
New Tool Aims to Simplify and Streamline SBOM Adoption
📢
Navigating the Cyber Typhoon: Safeguarding Data Amidst US-China Geo-Political Tensions.
🔥
Researchers Stop ‘Credible Takeover Attempt’ Similar to XZ Utils Backdoor Incident
🔥
Ransomware Group Starts Leaking Data Allegedly Stolen From Change Healthcare
🔥
Omni Hotels Says Personal Information Stolen in Ransomware Attack
🔥
TA558 Hackers Compromised 320+ Organizations’ FTP & SMTP Servers
🔥
IntelBroker Claims Space-Eyes Breach, Targeting US National Security Data
🔥
Iran-Backed Hackers Blast Out Threatening Texts to Israelis
🔥
Omni Hotels & Resorts Hack: Attackers have Stolen Customer Information
🔥
Infamous BreachForums down, group R00TK1T claiming responsibility
🔥
The Importance of OT Security: The Evolving Threat Landscape - Ken Townsend - CSP #170
🔥
UnitedHealth: Change Healthcare cyberattack caused $872 million loss
🔥
Omni Hotels says customers’ personal data stolen in ransomware attack
🔥
Law Firm to Pay $8M to Settle Health Data Hack Lawsuit
🔥
Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group
🔥
Virtual Event Tomorrow: Ransomware Resilience & Recovery Summit
🔥
Cisco Calls Out Organizations As Being “Overconfident and Unprepared” for Cyber Attacks
🔥
Congress Asks What Went Wrong in Change Healthcare Attack
🕵️
ISC Stormcast For Tuesday, April 16th, 2024 https://isc.sans.edu/podcastdetail/8940, (Tue, Apr 16th)
🕵️
The US Government Has a Microsoft Problem
🕵️
BSides Sofia 2024 - 9 talks - BULGARIAN and ENGLISH
🕵️
Rolling Back Packages on Ubuntu/Debian, (Tue, Apr 16th)
🕵️
Blackjack Hackers Destroyed 87,000 Sensors Using Lethal ICS Malware
🕵️
X.com Automatically Changing Link Text but Not URLs
🕵️
You Against the World: The Offenders Dilemma
🕵️
KnowBe4 Named a Leader in the Spring 2024 G2 Grid Report for Security Awareness Training
KEV
🕵️
Hacker Conversations: Kevin O’Connor, From Childhood Hacker to NSA Operative
KEV
🕵️
Obtaining security clearance: Hurdles and requirements
🕵️
Generative AI Legal Challenges as SEC Charges Disrupt Journey to CISO Role - BSW #346
🕵️
Cryptojacker Arrested, Charged for Defrauding Cloud Providers of $3.5 Million
🕵️
Cloud Users Warned of Data Exposure Risk From Command-Line Tools
🕵️
Blackjack Group Used ICS Malware Fuxnet Against Russian Targets
🕵️
Phishing Frenzy: Microsoft and Google Most Mimicked Brands in Cyber Scams
🕵️
CyberheistNews Vol 14 #16 Critical Improvements to the 7 Most Common Pieces of Cybersecurity Advice
🕵️
Trustifi’s Email Security Awareness Training – Empowering MSPs to Train & Protect Clients
🕵️
LeakyCLI Flaw Exposes AWS and Google Cloud Credentials
🕵️
Duo, Steganography, Roku, Palo Alto, Putty, Cerebral, IPOs, SanDisk, & Josh Marpet - SWN #378
🕵️
Can Ghidra do inline strings?
🕵️
Steganography Campaign Targets Global Enterprises
🕵️
New Microsoft guidance for the DoD Zero Trust Strategy
🕵️
Windows 11 Adoption Is Slow Despite Windows 10 Security Risk
🌐
Hive RAT Creators and $3.5M Cryptojacking Mastermind Arrested in Global Crackdown
🌐
Google Location Tracking Deal Could Be Derailed By Politics
🌐
Hive RAT Creators and $3.5M Cryptojacking Mastermind Arrested in Global Crackdown
📡
Iran-Backed Hackers Blast Out Threatening Texts to Israelis
📡
FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations
📡
Who Stole 3.6M Tax Records from South Carolina?
📡
Why the US government’s overreliance on Microsoft is a big problem
📡
Resilient Together, Highlighting the Importance of Emergency Communications
📡
Cryptojacker Arrested For Defrauding Cloud Providers Of $3.5 Million
📡
Delinea Scrambles To Patch Critical Flaw After Ignoring Researcher
📡
AI Watchdog Defends Against New LLM Jailbreak Method
📡
How to make your web apps resistant to social engineering
📡
Report: Microsoft Most Impersonated Brand in Phishing Scams
📡
AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs
📡
Evolution Equity Partners raises $1.1B for new cybersecurity and AI fund
📡
FTC Bans Online Mental Health Firm From Sharing Certain Data
📡
Report: Bad Bots Drive 10% Annual Surge in Account Takeover Attacks
📡
Google to crack down on third-party YouTube apps that block ads
📡
Cerebral to pay $7 million settlement in Facebook pixel data leak case
📡
T-Mobile, Verizon workers get texts offering $300 for SIM swaps
📡
The ABCs of how online ads can impact children’s well-being
📡
Why the US government’s overreliance on Microsoft is a big problem