MATLOCK.CA
156Articles
7Categories
2024-04-18Date
🐛
A Vuln is a Vuln, unless the CVE for it is after Feb 12, 2024, (Wed, Apr 17th)
ISC.SANS.EDU — 18 Apr 2024
🐛
Cisco Warns of a Command Injection and Privilege Escalation Flaw in Its IMC
SECURITYAFFAIRS.COM — 18 Apr 2024
🐛
Cybersecurity Pros Urge US Congress to Help NIST Restore NVD Operation
INFOSECURITY-MAGAZINE.COM — 18 Apr 2024
🐛
Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters | Microsoft Security Blog
MICROSOFT.COM — 18 Apr 2024
🐛
Palo Alto ZeroDay Exploited in The Wild Following PoC Release
KEVGBHACKERS.COM — 18 Apr 2024
🐛
Cisco fixes vulnerabilities in Integrated Management Controller
CSOONLINE.COM — 18 Apr 2024
🐛
CVE-2024-21409 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28906 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28908 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28909 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28910 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28911 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28912 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28913 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28914 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28915 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28929 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28931 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28932 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28936 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28939 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28942 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28945 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29043 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29045 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29047 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3832 Object corruption in V8
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3914 Use after free in V8
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3833 Object corruption in WebAssembly
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3834 Use after free in Downloads
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3837 Use after free in QUIC
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3838 Inappropriate implementation in Autofill
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3839 Out of bounds read in Fonts
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3840 Insufficient policy enforcement in Site Isolation
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3844 Inappropriate implementation in Extensions
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3841 Insufficient data validation in Browser Switcher
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3845 Inappropriate implementation in Network
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3843 Insufficient data validation in Downloads
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3847 Insufficient policy enforcement in WebUI
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
Chromium: CVE-2024-3846 Inappropriate implementation in Prompts
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28926 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28927 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28930 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28933 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28934 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28935 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28937 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28938 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28940 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28941 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28943 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-28944 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29044 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29046 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29048 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29982 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29983 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29984 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29985 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29987 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
🐛
CVE-2024-29986 Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 18 Apr 2024
⚠️
The Fall of LabHost: Law Enforcement Shuts Down Phishing Service Provider
TRENDMICRO.COM — 18 Apr 2024
⚠️
Are you a toxic cybersecurity boss? How to be a better CISO
CSOONLINE.COM — 18 Apr 2024
⚠️
Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes
THEHACKERNEWS.COM — 18 Apr 2024
⚠️
Armis Acquires AI-based Vulnerability Detection Firm Silk Security
GBHACKERS.COM — 18 Apr 2024
⚠️
Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services
THEHACKERNEWS.COM — 18 Apr 2024
⚠️
Phishing-as-a-Service Platform LabHost Seized by Authorities
GBHACKERS.COM — 18 Apr 2024
⚠️
Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign
THEHACKERNEWS.COM — 18 Apr 2024
⚠️
Consolidation blamed for Change Healthcare ransomware attack
CSOONLINE.COM — 18 Apr 2024
⚠️
LabHost phishing service with 40,000 domains disrupted, 37 arrested
BLEEPINGCOMPUTER.COM — 18 Apr 2024
⚠️
Possible Chinese Hackers Use OpenMetadata for Cryptomining
BANKINFOSECURITY.COM — 18 Apr 2024
⚠️
Other Attempts to Take Over Open Source Projects
SCHNEIER.COM — 2024-04-18
⚠️
Phishing Platform LabHost Shut Down by Law Enforcement
SECURITYWEEK.COM — 18 Apr 2024
⚠️
How to Conduct Advanced Static Analysis in a Malware Sandbox
THEHACKERNEWS.COM — 18 Apr 2024
⚠️
Cisco announces AI-powered Hypershield for autonomous exploit patching in the cloud
CSOONLINE.COM — 18 Apr 2024
⚠️
Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability
SECURITYWEEK.COM — 18 Apr 2024
⚠️
UK law enforcement busts online phishing marketplace
CSOONLINE.COM — 18 Apr 2024
⚠️
Apex Legends hacker says game developers patched exploit used on streamers
TECHCRUNCH.COM — 18 Apr 2024
⚠️
SoumniBot Exploiting Android Manifest Flaws to Evade Detection
GBHACKERS.COM — 18 Apr 2024
⚠️
Oracle Releases Critical Patch Update Advisory for April 2024
CISA.GOV — Thu, 18 Apr 24 1
⚠️
US Government and OpenSSF Partner on New SBOM Management Tool
INFOSECURITY-MAGAZINE.COM — 18 Apr 2024
⚠️
CISA Releases Three Industrial Control Systems Advisories
CISA.GOV — Thu, 18 Apr 24 1
⚠️
Phishing Platform LabHost Shut Down By Law Enforcement
PACKETSTORMSECURITY.COM — 18 Apr 2024
⚠️
Ransomware Victims Who Pay a Ransom Drops to Record Low
DATABREACHTODAY.CO.UK — 2024-04-18
⚠️
CISA and Partners Release Advisory on Akira Ransomware
CISA.GOV — Thu, 18 Apr 24 1
⚠️
Wiz is in talks to buy Lacework for $150-200M; security firm was last valued at $8.3B
TECHCRUNCH.COM — 18 Apr 2024
⚠️
Novel Android Malware Targets Korean Banking Users
DATABREACHTODAY.CO.UK — 2024-04-18
⚠️
Crazy money and crazy outcomes - cybersecurity acquisitions in all shapes and sizes - ESW #358
YOUTUBE.COM — 2024-04-18
⚠️
Prevent Generative AI Data Leaks with Chrome Enterprise DLP
SECURITY.GOOGLEBLOG.COM — 2024-04-18
📢
Unpacking the NIST cybersecurity framework 2.0
SECURITYINTELLIGENCE.COM — 18 Apr 2024
📢
FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor
THEHACKERNEWS.COM — 18 Apr 2024
📢
NCSC Says Newer Threats Need Network Defense Strategy
TRENDMICRO.COM — 18 Apr 2024
🔥
Food and Agriculture Sector Hit with More Than 160 Ransomware Attacks Last Year
THERECORD.MEDIA — 18 Apr 2024
🔥
What is Encryption in Malware? – Understand From Basics to XOR
GBHACKERS.COM — 18 Apr 2024
🔥
Le Slip Français - 1,495,127 breached accounts
HAVEIBEENPWNED.COM — 18 Apr 2024
🔥
UnitedHealth Expects Up to $1.6B Hit From Change Healthcare Cyberattack This Year
CYBERSECURITYDIVE.COM — 18 Apr 2024
🔥
LockBit Knockoffs and Imposters Proliferate After LockBit 3.0 Builder Leak
BANKINFOSECURITY.COM — 18 Apr 2024
🔥
Moldovan Charged for Operating Botnet Used to Push Ransomware
BLEEPINGCOMPUTER.COM — 18 Apr 2024
🔥
LeSlipFrancais Data Breach: Customers’ Personal Information Exposed
GBHACKERS.COM — 18 Apr 2024
🔥
Russian Sandworm Hackers Pose as Hacktivists in Water Utility Breaches
BLEEPINGCOMPUTER.COM — 18 Apr 2024
🔥
180k Impacted by Data Breach at Michigan Healthcare Organization
SECURITYWEEK.COM — 18 Apr 2024
🔥
Recover from Ransomware in 5 Minutes—We will Teach You How!
THEHACKERNEWS.COM — 18 Apr 2024
🔥
Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate - Help Net Security
HELPNETSECURITY.COM — 18 Apr 2024
🔥
Company Says Change Healthcare Hackers Stole Sensitive Data
DATABREACHTODAY.CO.UK — 2024-04-18
🔥
United Nations Agency Investigating Ransomware Attack Involving Data Theft
SECURITYWEEK.COM — 18 Apr 2024
🔥
Change Healthcare data for sale on dark web as fallout from ransomware attack spirals out of control
BITDEFENDER.COM — 18 Apr 2024
🔥
3.5 million Omni Hotel guest details held to ransom by Daixin Team
EXPONENTIAL-E.COM — 18 Apr 2024
🔥
Cryptohack Roundup: First Conviction in Smart Contract Hack
DATABREACHTODAY.CO.UK — 2024-04-18
🔥
Cape dials up $61M from A16Z + more for mobile service that doesn’t use personal data
TECHCRUNCH.COM — 18 Apr 2024
🔥
FBI: Akira ransomware raked in $42 million from 250+ victims
BLEEPINGCOMPUTER.COM — 18 Apr 2024
🔥
840-bed hospital in France postpones procedures after cyberattack
BLEEPINGCOMPUTER.COM — 18 Apr 2024
🔥
Hacking the Floodgates: U.S. Dams Face Growing Cyber Threats
DATABREACHTODAY.CO.UK — 2024-04-18
🔥
Frontier Communications shuts down systems after cyberattack
BLEEPINGCOMPUTER.COM — 18 Apr 2024
🔥
Breach Roundup: LabHost Goes Down
DATABREACHTODAY.CO.UK — 2024-04-18
🕵️
ISC Stormcast For Thursday, April 18th, 2024 https://isc.sans.edu/podcastdetail/8944, (Thu, Apr 18th)
ISC.SANS.EDU — 18 Apr 2024
🕵️
Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor
THEHACKERNEWS.COM — 18 Apr 2024
🕵️
Cisco Unveils AI-Native Enterprise Security Solution Hypershield
SECURITYWEEK.COM — 18 Apr 2024
🕵️
Nigeria & Romania Ranked Among Top Cybercrime Havens
DARKREADING.COM — 18 Apr 2024
🕵️
Cisco Hypershield: AI-Powered Hyper-Distributed Security for Data Center
GBHACKERS.COM — 18 Apr 2024
🕵️
Unearthing APT44: Russia’s Notorious Cyber Sabotage Unit Sandworm | Google Cloud Blog
CLOUD.GOOGLE.COM — 18 Apr 2024
🕵️
LastPass Warns of Deepfake Phishing Attempt
KNOWBE4.COM — 18 Apr 2024
🕵️
AI Voice Cloning and Bank Voice Authentication: A Recipe for Disaster?
KNOWBE4.COM — 18 Apr 2024
🕵️
Russian APT44 – The Most Notorious Cyber Sabotage Group Globally
GBHACKERS.COM — 18 Apr 2024
🕵️
FIN7 Hackers Attacking IT Employees Of Automotive Industry
GBHACKERS.COM — 18 Apr 2024
🕵️
FIN7 Targets American Automaker’s IT Staff in Phishing Attacks
BLEEPINGCOMPUTER.COM — 18 Apr 2024
🕵️
Five Eyes Agencies Release New AI Security Guidance
SECURITYWEEK.COM — 18 Apr 2024
🕵️
Russia's Sandworm APT Linked To Attack On Texas Water Plant
PACKETSTORMSECURITY.COM — 18 Apr 2024
🕵️
Palo Alto Networks Recognized by Gartner as a Leader in SSE Report
PALOALTONETWORKS.COM — 18 Apr 2024
🕵️
SAP Applications Increasingly in Attacker Crosshairs, Report Shows
SECURITYWEEK.COM — 18 Apr 2024
🕵️
Multi-Data Platform SIEM Anvilogic Raises $45 Million
SECURITYWEEK.COM — 18 Apr 2024
🕵️
Jury Dishes Out Guilty Verdict in Mango Markets Fraud Case
DATABREACHTODAY.CO.UK — 2024-04-18
🕵️
Dark Web Sales Driving Major Rise in Credential Attacks
DATABREACHTODAY.CO.UK — 2024-04-18
🕵️
From Hackers to Streakers - How Counterintelligence Teams are Protecting the NFL - Joe... - ESW #358
YOUTUBE.COM — 2024-04-18
🌐
New Android Trojan 'SoumniBot' Evades Detection with Clever Tricks
THEHACKERNEWS.COM — 18 Apr 2024
🌐
Malvertising Campaign Targeting IT Teams with MadMxShell Backdoor
ZSCALER.COM — 18 Apr 2024
🌐
OfflRouter Malware Evades Detection in Ukraine for Almost a Decade
THEHACKERNEWS.COM — 18 Apr 2024
🌐
Police smash LabHost international fraud network, 37 arrested
TRIPWIRE.COM — 18 Apr 2024
🌐
Google ad impersonates Whales Market to push wallet drainer malware
BLEEPINGCOMPUTER.COM — 18 Apr 2024
🌐
Fake cheat lures gamers into spreading infostealer malware
BLEEPINGCOMPUTER.COM — 18 Apr 2024
📡
Armis Buys Cyber Remediation Startup Silk Security for $150M
BANKINFOSECURITY.COM — 18 Apr 2024
📡
Global Police Operation Disrupts 'LabHost' Phishing Service, Over 30 Arrested Worldwide
THEHACKERNEWS.COM — 18 Apr 2024
📡
Insider Threats Surge 14% Annually as Cost-of-Living Crisis Bites
INFOSECURITY-MAGAZINE.COM — 18 Apr 2024
📡
IT and Security Professionals Demand More Workplace Flexibility
HELPNETSECURITY.COM — 18 Apr 2024
📡
Cybercriminals pose as LastPass staff to hack password vaults
BLEEPINGCOMPUTER.COM — 18 Apr 2024
📡
Global Police Operation Disrupts 'LabHost' Phishing Service, Over 30 Arrested Worldwide
THEHACKERNEWS.COM — 18 Apr 2024
📡
EU Tells Meta It Can't Paywall Privacy
PACKETSTORMSECURITY.COM — 18 Apr 2024
📡
Kremlin-Backed Actors Spread Disinformation Ahead Of US Elections
PACKETSTORMSECURITY.COM — 18 Apr 2024
📡
Lawmakers Are Kicking Warrantless Wiretapping Into Overdrive
PACKETSTORMSECURITY.COM — 18 Apr 2024
📡
Five Eyes Agencies Release New AI Security Guidance
PACKETSTORMSECURITY.COM — 18 Apr 2024
📡
Hydradancer: Faster USB Emulation for Facedancer
QUARKSLAB.COM — 2024-04-18
📡
Microsoft Office LTSC 2024 preview available for Windows, Mac
BLEEPINGCOMPUTER.COM — 18 Apr 2024
📡
Hackers are threatening to publish a huge stolen sanctions and financial crimes watchlist
TECHCRUNCH.COM — 18 Apr 2024
📡
Live Webinar | CybeRx - How to Automatically Protect Rockwell OT Customers from Today’s Cyber-Attacks
DATABREACHTODAY.CO.UK — 2024-04-18
📡
Why Health Firms Struggle with Cybersecurity Frameworks
DATABREACHTODAY.CO.UK — 2024-04-18
📡
From $8.3B to $200M: Why Lacework Is Examining a Sale to Wiz
DATABREACHTODAY.CO.UK — 2024-04-18
📡
The many faces of impersonation fraud: Spot an imposter before it’s too late
WELIVESECURITY.COM — 18 Apr 2024