97Articles
8Categories
2024-05-13Date
🚨
CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its  Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2024-4671 Google Chromium in Visuals Use-After-Free Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyb…
KEV
🐛
Ridding your network of NTLM
🐛
Microsoft Edge Zero-Day Vulnerability Exploited in the Wild
KEV
🐛
Critical Cacti Vulnerability Let Attackers Execute Remote Code
🐛
Experts Warn the NVD Backlog Is Reaching a Breaking Point
⚠️
Hackers Exploiting Vulnerabilities 50% Faster, Within 4.76 Days
KEV
⚠️
MY TAKE: RSAC 2024’s big takeaway: rules-based security is out; contextual security is taking over
⚠️
Human body pose recognition using Wi-Fi signal | Kaspersky official blog
⚠️
Feds, Military Personnel Compete in President’s Cyber Cup Challenge
⚠️
Apache OFBiz RCE Flaw Let Attackers Execute Malicious Code Remotely
⚠️
Cyber Security Today, May 13, 2024 - Europol police portal hacked, report on Black Basta ransomware gang is released, and more
⚠️
Passwordless Authentication Standard FIDO2 Flaw Let Attackers Launch MITM Attacks
⚠️
Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries
⚠️
$2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest
⚠️
LLMs’ Data-Control Path Insecurity
⚠️
IntelBroker steals classified data from the Europol website
⚠️
‘Got that boomer!’: How cyber-criminals steal one-time passcodes for SIM swap attacks and raiding bank accounts
⚠️
GoTo Meeting Software Abused to Deploy Remcos RAT via Rust Shellcode Loader
⚠️
Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors
⚠️
Helsinki suffers data breach after hackers exploit unpatched flaw
⚠️
Google and Apple deliver support for unwanted tracking alerts in Android and iOS
⚠️
Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS
⚠️
INC ransomware source code selling on hacking forums for $300,000
⚠️
FCC reveals Royal Tiger, its first tagged robocall threat actor
⚠️
Apple backports fix for RTKit iOS zero-day to older iPhones
⚠️
Identity Resilience: The Next Frontier in Security - Ray Zadjmool - BSW #350
⚠️
Apple backports fix for zero-day exploited in attacks to older iPhones
⚠️
CISA Updates Toolkit with Nine New Resources to Promote Public Safety Communications and Cyber Resiliency
📢
Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia
📢
State Attorneys General Implore Congress Not to Preempt Their Privacy Laws
📢
US and China to Hold Discussions on AI Risks and Security
📢
Ubuntu security advisory (AV24-251)
📢
IBM security advisory (AV24-250)
📢
[Control systems] CISA ICS security advisories (AV24-253)
📢
Dell security advisory (AV24-252)
📢
Microsoft Edge security advisory (AV24-254)
📢
Red Hat security advisory (AV24-256)
📢
Juniper security advisory (AV24-255)
📢
Apple security advisory (AV24-257)
🔥
Ohio Lottery Hacked: 500,000+ Customers Data Exposed
🔥
Extracting data from encrypted virtual disks: six methods
🔥
FBCS Collection Agency Data Breach Impacts 2.7 Million
🔥
Black Basta Ransomware Hit Over 500 Organizations
🔥
How Did Authorities Identify the Alleged Lockbit Boss?
🔥
'The Mask' Espionage Group Resurfaces After 10-Year Hiatus
🔥
Cinterion IoT Cellular Modules Vulnerable to SMS Compromise
🔥
The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield
🔥
Black Basta Ransomware Group's Worldwide Victim Count Tops 500
🔥
Tycoon 2FA Attacking Microsoft 365 AND Google Users To Bypass MFA
🔥
Scattered Spider Attacking Finance & Insurance Industries WorldWide
🔥
Easy Passwords, BIG-IP, Ascension, Lockbit, Google, Poland, ZScaler, Aaran Leyland... - SWN #385
🔥
Europol Investigating Breach After Hacker Offers to Sell Classified Data
🔥
Ascension Making Progress After Ransomware Attack
🔥
Europol Confirms Incident Following Alleged Auction Of Staff Data
🔥
Botnet sent millions of emails with LockBit Black ransomware payloads
🔥
Botnet sent millions of emails in LockBit Black ransomware campaign
🔥
Feds, Groups Warn Health Sector of Black Basta Threats
🔥
Human Risk Crisis: 8% of Employees Cause 80% of Incidents
🕵️
ISC Stormcast For Monday, May 13th, 2024 https://isc.sans.edu/podcastdetail/8978, (Mon, May 13th)
🕵️
US and China to Hold Discussions on AI Risks and Security
🕵️
Nmap 7.95 released – What’s New!
🕵️
Debate rages over DMCA Section 1201 exemption for generative AI
🕵️
Pro-Russia hackers targeted Kosovo government websites
🕵️
Russian Hackers Hijack Ukrainian TV to Broadcast Victory Day Parade
🕵️
Reality Hijacked: Deepfakes, GenAI, and the Emergent Threat of Synthetic Media
🕵️
Untangling IT-OT Security Knots with a Zero Trust Platform Approach
🕵️
Mentorship Monday - Discussions for career and learning!
🕵️
‘Russian’ Hackers Deface Potentially Hundreds of Local British News Sites
🕵️
Cyberthreat Landscape Permanently Altered by Chinese Operations, US Officials Say
🕵️
NATO Draws a Cyber Red Line in Tensions With Russia
🕵️
News alert: Criminal IP and Quad9 collaborate to exchange domain and IP threat intelligence
🕵️
New alert: Logicalis enhances global security services with the launch of Intelligent Security
🕵️
Criminal IP and Quad9 Collaborate to Exchange Domain and IP Threat Intelligence
🕵️
Logicalis Enhances Global Security Services with The Launch of Intelligent Security
🕵️
Hackers use DNS tunneling for network scanning, tracking victims
🕵️
China and US Envoys Will Hold First Top-Level Dialogue on Artificial Intelligence
🕵️
Defenders' Dilemma: Can AI Bolster Cyber Resilience?
🕵️
How 'Radical Transparency' Can Bolster Cybersecurity
🕵️
Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​
🌐
Selfie Spoofing Becomes Popular Identity Document Fraud Technique
🌐
RSAC: Experts Highlight Novel Cyber Threats and Tactics
🌐
MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices
🌐
PyPi package backdoors Macs using the Sliver pen-testing suite
📡
Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo
📡
FIN7 Uses Trusted Brands and Sponsored Google Ads to Distribute MSIX Payloads
📡
Malicious Go Binary Delivered via Steganography in PyPI
📡
AI-Powered Russian Network Pushes Fake Political News
📡
GenAI Enables Cybersecurity Leaders to Hire More Entry-Level Talent
📡
SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike
📡
Researchers Use MITM Attack to Bypass FIDO2 Phishing-Resistant Protection
📡
Nmap 7.95 Released With New OS and Service Detection Signatures
📡
UK's AI Safety Institute Unveils Platform to Accelerate Safe AI Develo
📡
How Secure is the “Password Protection” on Your Files and Drives?
📡
Download the SASE and SSE enterprise buyer’s guide
📡
NATO Draws A Cyber Red Line In Tensions With Russia
📡
Dell Says Info Leaked After Hacker Claims Access To 49M Records
📡
Prison for cybersecurity expert selling private videos from inside 400,000 homes