91Articles
7Categories
2024-04-25Date
🐛
CISA Warns of Cisco and CrushFTP Vulnerabilities Being Actively Exploited
KEV
🐛
Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359) - Help Net Security
🐛
Palo Alto Networks Shares Remediation Advice for Hacked Firewalls
🐛
Looking outside: How to protect against non-Windows network vulnerabilities
⚠️
Hackers Exploit Cisco Firewall Zero-Days to Hack Government Networks
⚠️
Authorities Warned that Hackers Are Exploiting Flaws in CISCO ASA VPNs
⚠️
Maximum Severity Flowmon Bug has a Public Exploit, Patch Now
⚠️
State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage
⚠️
Alert! Cisco Releases Critical Security Updates to Fix 2 ASA Firewall 0-Days
⚠️
ArcaneDoor Hackers Exploit Cisco Zero-Days to Breach Government Networks
⚠️
Cyber Attack Defenders Up For Battle: Huge Uptick In Timely Attack Detections
⚠️
Vulnerabilities in Microsoft's PlayReady DRM Could Enable Illegal Movie Downloads From Streaming Services
⚠️
Cisco urges immediate software upgrade after state-sponsored attack
⚠️
JudgeO Online Code Editor Flaw Let Attackers Execute Code as Root User
⚠️
Network Threats: A Step-by-Step Attack Demonstration
⚠️
Salt Security adds defense against OAuth attacks
⚠️
NETGEAR routers vulnerable to buffer overflow
⚠️
New Report Finds That 27% of Small Businesses Would Be Put Out of Business By A Cyber Attack
⚠️
New DragonForce Ransomware Emerged From The Leaked LOCKBIT Builder
⚠️
NIST’s role in the global tech race against AI
⚠️
Beware! Zero-click RCE Exploit for iMessage Circulating on Hacker Forums
⚠️
Advising The President On Cyber-Physical Resilience - Philip Venables - PSW #826
⚠️
WP Automatic WordPress plugin hit by millions of SQL injection attacks
⚠️
Nation-State Hackers Exploit Cisco Firewall Zero Days To Backdoor Government Networks
⚠️
CISA Releases Eight Industrial Control Systems Advisories
⚠️
​​Investigating industrial control systems using Microsoft’s ICSpector open-source framework
⚠️
Over 1,400 CrushFTP servers vulnerable to actively exploited bug
KEV
⚠️
Analyze Malicious Powershell Scripts by Running Malware in ANY.RUN Sandbox
⚠️
Breach Roundup: Cloud Error Reveals DPRK Sanctions Busting
⚠️
Cloud security teams: What to know as M&A activity rebounds in 2024
⚠️
Governance, Compliance, and The Digital Supply Chain - Josh Marpet - BTS #27
⚠️
LA County Health Services: Patients' data exposed in phishing attack
⚠️
Nagomi Exits Stealth With $30M to Help Manage Security Risks
⚠️
FBI warns against using unlicensed crypto transfer services
⚠️
Microsoft Questioned by German Lawmakers About Russian Hack
⚠️
Threat Modeling and Understanding Inherent Threats - Adam Shostack - ESW #359
⚠️
Autonomous - I don't think that word means what you think it means - ESW #359
⚠️
LA County Health Services: Patients' data exposed in phishing attack
📢
Drupal security advisory (AV24-224)
📢
Non-Compliant, So What?
📢
The P25 Steering Committee, the Compliance Assessment Process and Procedures Task Group (CAPPTG), and the Joint SAFECOM-NCSWIC P25 User Needs Working Group (UNWG) release Project 25 Link Layer Encryption Informational Session
📢
Mitel security advisory (AV24-226)
📢
HPE security advisory (AV24-225)
🔥
Pakistani APT Hackers Attacking Indian Govt Entities With Weaponized Shortcut Files
🔥
Ring Customers Get $5.6 Million in Privacy Breach Settlement
🔥
North Korea APT Triumvirate Spied on South Korean Defense Industry For Years
🔥
AI-Assisted Phishing Attacks Are on the Rise
🔥
Ransomware: How to prevent and recover (ITSAP.00.099)
🔥
Autodesk Drive Abused in Phishing Attacks
🔥
Cyber Hygiene Helps Organizations Mitigate Ransomware-Related Vulnerabilities
🔥
“Junk gun” ransomware: the cheap new threat to small businesses
🔥
Health insurance giant Kaiser notifies millions of a data breach
🔥
Judge Advises Dismissal of CommonSpirit Breach Lawsuit
🔥
Cryptohack Roundup: Samourai Mixer Takedown
🔥
Kaiser Permanente Notifying 13.4 Million of Tracker Breach
🕵️
Does it matter if iptables isn't running on my honeypot?, (Thu, Apr 25th)
🕵️
5G Hackathons - Casey Ellis - BTS #28
🕵️
Cisco Systems Joins Microsoft, IBM in Vatican Pledge to Ensure Ethical Use and Development of AI
🕵️
ISC Stormcast For Thursday, April 25th, 2024 https://isc.sans.edu/podcastdetail/8954, (Thu, Apr 25th)
🕵️
73% of SME security pros missed or ignored critical alerts - Help Net Security
🕵️
Chinese, Russian Espionage Campaigns Increasingly Targeting Edge Devices
🕵️
Attackers Leverage Black Hat SEO Techniques to Distribute Info-Stealer Malware
🕵️
IBM Acquiring HashiCorp for $6.4 Billion
🕵️
FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures
🕵️
Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking
🕵️
Endpoint Security Firm ThreatLocker Raises $115 Million in Series D Funding
🕵️
New Brokewell malware takes over Android devices, steals data
🕵️
Researcher Strips ROM For Binary Code
🕵️
Predictive Security Startup BforeAI Raises $15 Million
🕵️
North Korea's Lazarus Group Deploys New Kaolin RAT via Fake Job Lures
🕵️
How GenAI Can Improve SecOps - Ely Kahn - ESW #359
🕵️
AeroNet Wireless Launches 10Gbps Internet Plan: A Landmark Moment in Puerto Rico’s Telecommunications Industry
🌐
Researchers sinkhole PlugX malware server with 2.5 million unique IPs
📡
Google Meet opens client-side encrypted calls to non Google users
📡
Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny
📡
Feds Accuse Founders of Cryptocurrency Mixer of ‘Large-Scale Money Laundering’
📡
Report: Security Leaders Braced for Daily AI-Driven Attacks by Year-End
📡
DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions
📡
The Rise of Large-Language-Model Optimization
📡
Using Bluetooth technology (ITSAP.00.011)
📡
India’s ICICI Bank exposed thousands of credit cards to ‘wrong’ users
📡
Ex-NSA hacker and ex-Apple researcher launch startup to protect Apple devices
📡
Hacker posts fake news story about Ukrainians trying to kill Slovak President
📡
FTC Sending $5.6 Million To Ring Customers Over Security Failures
📡
Palo Alto Networks Shares Remediation Advice
📡
Russia, Iran Pose Most Aggressive Threat To 2024 Election
📡
Kaspersky Thin Client 2.0 update | Kaspersky official blog
📡
Rubrik’s shares climb 20% in its public debut
📡
Reddit down in major outage blocking access to web, mobile apps
📡
What IBM Purchasing HashiCorp Means for Secrets Management
📡
Gripped by Python: 5 reasons why Python is popular among cybersecurity professionals