77Articles
8Categories
2024-05-17Date
🚨
CISA Warns of Exploited Vulnerabilities in EOL D-Link ProductsCISA has added two vulnerabilities in discontinued D-Link products to its KEV catalog, including a decade-old flaw. The post CISA Warns of Exploited Vulnerabilities in EOL D-Link Products appeared first on SecurityWeek .
KEV
🚨
UK Lags Europe on Exploited Vulnerability RemediationA report from Bitsight revealed that UK organizations are taking significantly longer than their European counterparts to remediate software vulnerabilities listed in the US CISA's Known Exploited Vulnerability (KEV) catalog.
KEV
🐛
CISA Warns of Actively Exploited D-Link Router Vulnerabilities - Patch Now
KEV
🐛
Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002)
🐛
Critical Flaw in AI Python Package Can Lead to System and Data Compromise
⚠️
FCC proposes BGP security measures
⚠️
Flaw in Wi-Fi-Standard can Enable SSID Confusion Attacks
⚠️
Threat Actors Misusing Quick Assist in Social Engineering Attacks Leading to Ransomware
⚠️
Cybersecurity Analysis Exposes High-Risk Assets in Power and Healthcare Sectors
⚠️
Critical Git Vulnerability Allows RCE When Cloning Repositories With Submodules
⚠️
ViperSoftX Malware Uses Deep Learning Model To Execute Commands
⚠️
DDoS attacks: Definition, examples, and techniques
⚠️
New Linux Backdoor Attacking Linux Users Via Installation Packages
⚠️
FBI Seizes BreachForums Website
⚠️
FCC Might Require Telecoms to Report on Securing Internet’s BGP Technology
⚠️
How a new wave of deepfake-driven cybercrime targets businesses
⚠️
SEC rule for finance firms boosts disclosure requirements
⚠️
OWASP Dep-Scan: Open-Source Security and Risk Audit Tool
⚠️
WebTPA data breach impacts 2.4 million insurance policyholders
⚠️
Healthcare company WebTPA discloses breach affecting 2.5 million people
⚠️
Google Patches 3rd Chrome Browser Zero Day Inside Of A Week
⚠️
Is an Open-Source AI Vulnerability Next?
⚠️
Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking
⚠️
Microsoft to start enforcing Azure multi-factor authentication in July
📢
Unsafe Software Development Practices Persist, Despite CISA's Push
📢
Norway Recommends Replacing SSLVPN/WebVPN to Stop Cyber Attacks
📢
New UK System Will See ISPs Benefit From Same Protections as Government Networks
📢
Microsoft Edge security advisory (AV24-276)
📢
HPE security advisory (AV24-277)
📢
F5 security advisory (AV24-278)
📢
SEC: Financial orgs have 30 days to send data breach notifications
📢
Nissan reveals ransomware attack exposed 53,000 workers’ social security numbers
📢
Microsoft, North Korea, Santander, CISA, Deepfakes, Aaran Leyland & More - SWN #387
📢
Health Plan Services Firm Notifying 2.4 Million of PHI Theft
📢
Top US Cyber Defense Official Eric Goldstein to Step Down
📢
US SEC Approves Wall Street Data Breach Reporting Regs
🔥
Ongoing Malvertising Campaign leads to Ransomware
🔥
Santander Data Breach: Hackers Accessed Company Database
🔥
GhostSec Announces Shift in Operations from Ransomware to Hacktivism
🔥
Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks
🔥
Remote-Access Tools the Intrusion Point to Blame for Most Ransomware Attacks
🔥
Microsoft Quick Assist Tool Abused for Ransomware Delivery
🔥
Cloud Security Incidents Make Organizations Turn to AI-Powered Prevention
🔥
In Other News: MediSecure Hack, Scattered Spider Targeted by FBI, New Wi-Fi Attack
🔥
Microsoft Quick Assist Tool Abused For Ransomware Delivery
🔥
SEC to Require Financial Firms to Have Data Breach Incident Plans
🔥
8 out of 10 Organizations Experience a Cyber Attack and Attribute Users as the Problem
🔥
Verizon: The Human Element is Behind Two-Thirds of Data Breaches
🔥
Cyber Security Today, Week in Review for Friday, May 17, 2024
🔥
The Week in Ransomware - May 17th 2024 - Mailbombing is back
🕵️
ISC Stormcast For Friday, May 17th, 2024 https://isc.sans.edu/podcastdetail/8986, (Fri, May 17th)
🕵️
Russian APT Hackers Attacking Critical Infrastructure
🕵️
U.S. Govt Announces Rewards up to $5 Million for North Korean IT Workers
🕵️
Us Offers $5 Million for Info on North Korean IT Workers Involved in Job Fraud
🕵️
Cyber Security Today, May 17, 2024 - Malware hiding in Apache Tomcat servers, new backdoors found, and more
🕵️
Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms
🕵️
C/side Emerges From Stealth Mode With $1.7 Million Investment
🕵️
New ‘Antidot’ Android Trojan Allows Cybercriminals to Hack Devices, Steal Data
🕵️
Employee Personal GitHub Repos Expose Internal Azure and Red Hat Secrets
🕵️
China-Linked Hackers Adopt Two-Stage Infection Tactic to Deploy Deuterbear RAT
🕵️
Off-Topic Friday
🕵️
Another PDF Streams Example: Extracting JPEGs, (Fri, May 17th)
🕵️
BSides Kansas City 2024
🕵️
User Outcry as Slack Scrapes Customer Data for AI Model Training
🕵️
A Former OpenAI Leader Says Safety Has ‘Taken a Backseat to Shiny Products’ at the AI Company
🕵️
Hackers Target US AI Experts With Customized RAT
🕵️
Friday Squid Blogging: Emotional Support Squid
🕵️
The who, where, and how of APT attacks – Week in security with Tony Anscombe
🌐
Cybersecurity Leaders Expect Their SOC Budgets to Grow, KPMG Finds
📡
Two-stage Dropbox spear phishing | Kaspersky official blog
📡
New XM Cyber Research: 80% of Exposures from Misconfigurations, Less Than 1% from CVEs
📡
GeekWeek 9
📡
Critical Flaw In AI Python Package Can Lead To System And Data Compromise
📡
EU Probes Meta Over Its Provisions For Protecting Children
📡
US arrests suspects behind $73M ‘pig butchering’ laundering scheme
📡
Two students uncover security bug that could let millions do their laundry for free
📡
OnDemand | Level Up Your Security Stack: EDR vs Endpoint Privilege Management