MATLOCK.CA
102Articles
8Categories
2024-04-30Date
🚨
CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its  Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2024-29988 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability These types of vulnerabilities are frequent attack vectors for m…
KEVCISA.GOV — Tue, 30 Apr 24 1
🐛
Most attacks affecting SMBs target five older vulnerabilities
CSOONLINE.COM — 30 Apr 2024
🐛
Vulnerability in R Programming Language Could Fuel Supply Chain Attacks
SECURITYWEEK.COM — 30 Apr 2024
🐛
Delta Electronics CNCSoft-G2 DOPSoft DPAX
CISA.GOV — 30 Apr 2024
🐛
Another Day, Another NAS: Attacks against Zyxel NAS326 devices CVE-2023-4473, CVE-2023-4474, (Tue, Apr 30th)
ISC.SANS.EDU — 30 Apr 2024
⚠️
MovieBoxPro - 6,009,014 breached accounts
HAVEIBEENPWNED.COM — 30 Apr 2024
⚠️
Close the barn door now! Avoid the risk of not monitoring retained access before it’s a problem
CSOONLINE.COM — 30 Apr 2024
⚠️
Cyber breach misinformation creates a haze of uncertainty
CSOONLINE.COM — 30 Apr 2024
⚠️
Major privacy question (linux distro)
SH.ITJUST.WORKS — 30 Apr 2024
⚠️
Zloader Learns Old Tricks
ZSCALER.COM — 30 Apr 2024
⚠️
RSAC Fireside Chat: Secure, flexible web browsers finally available, thanks to open-source code
LASTWATCHDOG.COM — 30 Apr 2024
⚠️
Safari Vulnerability Exposes EU iOS Users to Malicious Marketplaces
GBHACKERS.COM — 30 Apr 2024
⚠️
UnitedHealth hackers exploited Citrix vulnerabilities, CEO to testify
CSOONLINE.COM — 30 Apr 2024
⚠️
WhatsApp in India
SCHNEIER.COM — 2024-04-30
⚠️
UK Enacts IoT Cybersecurity Law
HELPNETSECURITY.COM — 30 Apr 2024
⚠️
Researchers Unveil Novel Attack Methods Targeting Intel’s Conditional Branch Predictor
HELPNETSECURITY.COM — 30 Apr 2024
⚠️
Prompt Fuzzer: Open-Source Tool for Strengthening GenAI Apps
HELPNETSECURITY.COM — 30 Apr 2024
⚠️
Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years
THEHACKERNEWS.COM — 30 Apr 2024
⚠️
Microsoft Releases New-Open Source Tool for OT Security
BANKINFOSECURITY.COM — 30 Apr 2024
⚠️
Securiti adds distributed LLM firewalls to secure genAI applications
CSOONLINE.COM — 30 Apr 2024
⚠️
CISA Releases Three Industrial Control Systems Advisories
CISA.GOV — Tue, 30 Apr 24 1
⚠️
Vulnerability In R Programming Language Could Fuel Supply Chain Attacks
PACKETSTORMSECURITY.COM — 30 Apr 2024
⚠️
Chinese threat actor engaged in multi-year DNS resolver probing effort
CSOONLINE.COM — 30 Apr 2024
⚠️
GUEST ESSAY: Recalibrating critical infrastructure security in the wake of evolving threats
LASTWATCHDOG.COM — 30 Apr 2024
⚠️
Critical Vulnerabilities in Judge0 Lead to Sandbox Escape, Host Takeover
SECURITYWEEK.COM — 30 Apr 2024
⚠️
Google now pays up to $450,000 for RCE bugs in some Android apps
BLEEPINGCOMPUTER.COM — 30 Apr 2024
⚠️
R language flaw allows code execution via RDS/RDX files
BLEEPINGCOMPUTER.COM — 30 Apr 2024
⚠️
Patched Deserialization Flaw in Siemens Product Allows RCE
DATABREACHTODAY.CO.UK — 2024-04-30
⚠️
How Personal Branding Can Elevate Your Tech Career
DATABREACHTODAY.CO.UK — 2024-04-30
📢
New U.K. Law Bans Default Passwords on Smart Devices Starting April 2024
THEHACKERNEWS.COM — 30 Apr 2024
📢
Finnish Hacker Kivimaki Found Guilty in Vastaamo Hack
DATABREACHTODAY.CO.UK — 2024-04-30
📢
Defending Infrastructure, Securing Systems Key To CISA's New AI Guidelines
PACKETSTORMSECURITY.COM — 30 Apr 2024
📢
Apptega Raises $15 Million for Cybersecurity Compliance Platform
SECURITYWEEK.COM — 30 Apr 2024
📢
FBI Warns of Verification Scams Targeting Dating Site Users
KNOWBE4.COM — 30 Apr 2024
📢
AI, Okta, Chrome, Quantum, Kaiser Permanente, FTC, FCC, NCSC, Josh Marpet, and more. - SWN #382
YOUTUBE.COM — 2024-04-30
📢
SonicWall security advisory (AV24-233)
CYBER.GC.CA — 2024-04-30
📢
HPE security advisory (AV24-232)
CYBER.GC.CA — 2024-04-30
📢
DHS: AI-Enhanced Nuclear and Chemical Threats Are Risk to US
DATABREACHTODAY.CO.UK — 2024-04-30
📢
Opening Statement by CISA Director Jen Easterly
CISA.GOV — Tue, 30 Apr 24 1
📢
Detecting browser data theft using Windows Event Logs
SECURITY.GOOGLEBLOG.COM — 2024-04-30
🔥
An Empty S3 Bucket Can Make Your AWS Bills Explode
GBHACKERS.COM — 30 Apr 2024
🔥
Security Flaws in IRS Systems Pose Risk to Financial Statements, GAO Says
FEDSCOOP.COM — 30 Apr 2024
🔥
Kaiser Permanente Cyber Attack Exposes 13.4 Million Users Data
GBHACKERS.COM — 30 Apr 2024
🔥
The State of Ransomware 2024
SOPHOS.COM — 30 Apr 2024
🔥
Threat Actor Claims Selling of Dell Database with 49M User Records
GBHACKERS.COM — 30 Apr 2024
🔥
AI cybersecurity solutions detect ransomware in under 60 seconds
SECURITYINTELLIGENCE.COM — 30 Apr 2024
🔥
Change Healthcare hacked using stolen Citrix account with no MFA
BLEEPINGCOMPUTER.COM — 30 Apr 2024
🔥
New Wpeeper Android malware hides behind hacked WordPress sites
BLEEPINGCOMPUTER.COM — 30 Apr 2024
🔥
Philadelphia Inquirer: Data of over 25,000 people stolen in 2023 breach
BLEEPINGCOMPUTER.COM — 30 Apr 2024
🕵️
Tech CEOs Altman, Nadella, Pichai and Others Join Government AI Safety Board Led by DHS’ Mayorkas
SECURITYWEEK.COM — 30 Apr 2024
🕵️
ISC Stormcast For Tuesday, April 30th, 2024 https://isc.sans.edu/podcastdetail/8960, (Tue, Apr 30th)
ISC.SANS.EDU — 30 Apr 2024
🕵️
Meet the New Exclusive AI Malware Analyst: Gemini 1.5 Pro
GBHACKERS.COM — 30 Apr 2024
🕵️
Darkgate Malware Leveraging Autohotkey Following Teams
GBHACKERS.COM — 30 Apr 2024
🕵️
New Android Malware Mimic As Social Media Apps Steals Sensitive Data
GBHACKERS.COM — 30 Apr 2024
🕵️
LightSpy Malware Actively Targeting MacOS Devices
GBHACKERS.COM — 30 Apr 2024
🕵️
Google Blocks 2.28M Malicious Apps Entering The Play Store
GBHACKERS.COM — 30 Apr 2024
🕵️
UserSec, NoName057(16), and Cyber Army of Russia Target UK's Economic Sector
DAILYDARKWEB.NET — 30 Apr 2024
🕵️
FCC Fines US Cell Carriers $200M for Selling Location Data
BANKINFOSECURITY.COM — 30 Apr 2024
🕵️
Agent Tesla and Taskun Malware Targeting US Education and Govt Entities
HACKREAD.COM — 30 Apr 2024
🕵️
Why Using Microsoft Copilot Could Amplify Existing Data Quality and Privacy Issues
SECURITYWEEK.COM — 30 Apr 2024
🕵️
CyberheistNews Vol 14 #18 [Wake Up Call] A Fresh Nespresso Domain Hijack Brews an MFA Phishing Scheme
KNOWBE4.COM — 30 Apr 2024
🕵️
Air Gapped! The Myth of Securing OT - Thomas Johnson - CSP #172
YOUTUBE.COM — 2024-04-30
🕵️
SafeBase Scores $33M Series B Investment
SECURITYWEEK.COM — 30 Apr 2024
🕵️
KnowBe4 to Acquire Egress
FINSMES.COM — 30 Apr 2024
🕵️
Redline Malware Using Lua Bytecode to Challenge the SOC/TI Team to Detect
GBHACKERS.COM — 30 Apr 2024
🕵️
FCC Fines Wireless Carriers for Sharing User Locations Without Consent
SECURITYWEEK.COM — 30 Apr 2024
🕵️
New Payment Rails to Rely on RFP for More Security
DATABREACHTODAY.CO.UK — 2024-04-30
🕵️
Random Problems, Protecting Packages, and Vulns in Designs, Defaults & Data Leaks - ASW #283
YOUTUBE.COM — 2024-04-30
🕵️
Why Companies Continue to Struggle with Supply Chain Security - Melinda Marks - ASW #283
YOUTUBE.COM — 2024-04-30
🕵️
Finnish Hacker Gets Prison for Accessing Thousands of Psychotherapy Records and Demanding Ransoms
SECURITYWEEK.COM — 30 Apr 2024
🕵️
Docker Hub Users Targeted With Imageless, Malicious Repositories
SECURITYWEEK.COM — 30 Apr 2024
🕵️
Island Secures $175M Investment as Enterprise Browser Startups Defy Tech Giants
SECURITYWEEK.COM — 30 Apr 2024
🕵️
Chinese Hackers Have Been Probing DNS Networks Globally for Years: Report
SECURITYWEEK.COM — 30 Apr 2024
🕵️
Phishing Failures: How Not to Phish Your Users
KNOWBE4.COM — 30 Apr 2024
🕵️
How New College Graduates Can Avoid Increasingly Personalized Job Scams
KNOWBE4.COM — 30 Apr 2024
🕵️
News alert: Cybersixgill unveils ‘Third-Party Intelligence’ to deliver vendor-specific threat intel
LASTWATCHDOG.COM — 30 Apr 2024
🕵️
UnitedHealth CEO: Paying Ransom Was 'Hardest Decision' Ever
DATABREACHTODAY.CO.UK — 2024-04-30
🕵️
Island Gets $175M Series D Funding, Doubles Valuation to $3B
DATABREACHTODAY.CO.UK — 2024-04-30
🕵️
The Hidden Benefits of Digital Minimalism
THENEWOIL.ORG — 30 Apr 2024
🌐
The Darkgate Menace: Leveraging Autohotkey & Attempt to Evade SmartScreen
MCAFEE.COM — 30 Apr 2024
🌐
Google Rejected 2.28 Million Risky Android Apps From Play Store in 2023
BLEEPINGCOMPUTER.COM — 30 Apr 2024
🌐
U.S. Government Releases New AI Security Guidelines for Critical Infrastructure
THEHACKERNEWS.COM — 30 Apr 2024
🌐
Millions of Docker repos found pushing malware, phishing sites
BLEEPINGCOMPUTER.COM — 30 Apr 2024
🌐
New Latrodectus malware attacks use Microsoft, Cloudflare themes
BLEEPINGCOMPUTER.COM — 30 Apr 2024
📡
Thoma Bravo to take UK cybersecurity company Darktrace private in $5B deal
TECHCRUNCH.COM — 30 Apr 2024
📡
FCC Imposes $200 Million in Fines on Four US Carriers
SECURITYAFFAIRS.COM — 30 Apr 2024
📡
Muddling Meerkat Hackers Manipulate DNS Using China’s Great Firewall
BLEEPINGCOMPUTER.COM — 30 Apr 2024
📡
Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO
TECHCRUNCH.COM — 30 Apr 2024
📡
SafeBase taps AI to automate software security reviews
TECHCRUNCH.COM — 30 Apr 2024
📡
Man Who Mass-Extorted Psychotherapy Patients Gets Six Years
KREBSONSECURITY.COM — 30 Apr 2024
📡
Researchers Discover Coordinated Attacks on Docker Hub to Plant Millions of Malicious Repositories
JFROG.COM — 30 Apr 2024
📡
Emulating RH850 architecture with Unicorn Engine
QUARKSLAB.COM — 2024-04-30
📡
US fines telcos $200M for sharing customer location data without consent
TECHCRUNCH.COM — 30 Apr 2024
📡
Apple's Incredibly Private Safari Is Not So Private In Europe
PACKETSTORMSECURITY.COM — 30 Apr 2024
📡
Hacker Jailed For Blackmailing Therapy Patients
PACKETSTORMSECURITY.COM — 30 Apr 2024
📡
UK Outlaws Awful Default Passwords On Connected Devices
PACKETSTORMSECURITY.COM — 30 Apr 2024
📡
FCC Fines Wireless Carriers For Sharing User Locations Without Consent
PACKETSTORMSECURITY.COM — 30 Apr 2024
📡
Application allow list (ITSAP.10.095)
CYBER.GC.CA — 2024-04-30
📡
Sophos named a Leader in the 2024 IDC MarketScape for Worldwide Managed Detection and Response (MDR)
SOPHOS.COM — 30 Apr 2024
📡
MDR: Unlocking the power of enterprise-grade security for businesses of all sizes
WELIVESECURITY.COM — 30 Apr 2024
📡
Sensor Intel Series: Top CVEs in March 2024
F5.COM — 30 Apr 2024
📡
Sensor Intel Series: Top CVEs in March 2024
F5.COM — 30 Apr 2024