MATLOCK.CA
105Articles
8Categories
2024-05-21Date
🚨
CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect FlawCISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog. The post CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw appeared first on SecurityWeek .
KEVSECURITYWEEK.COM — 21 May 2024
🐛
PoC Exploit Released for QNAP QTS zero-day RCE Flaw
GBHACKERS.COM — 21 May 2024
🐛
"Linguistic Lumberjack" Vulnerability Discovered in Popular Logging Utility Fluent Bit
THEHACKERNEWS.COM — 21 May 2024
🐛
NextGen Healthcare Mirth Connect Under Attack - CISA Issues Urgent Warning
KEVTHEHACKERNEWS.COM — 21 May 2024
🐛
Fortinet FortiSIEM Command Injection Flaw (CVE-2023-34992) Deep-Dive
HORIZON3.AI — 21 May 2024
🐛
Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox
THEHACKERNEWS.COM — 21 May 2024
🐛
PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026)
HELPNETSECURITY.COM — 21 May 2024
🐛
Exploiting CVE-2024-32002: RCE via git clone
AMALMURALI.ME — 21 May 2024
🐛
Critical Memory Corruption In Cloud Logging Infrastructure Enables Code Execution Attack
GBHACKERS.COM — 21 May 2024
🐛
GitHub warns of SAML auth bypass flaw in Enterprise Server
BLEEPINGCOMPUTER.COM — 21 May 2024
🐛
Critical GitHub Enterprise Server Flaw Allows Authentication Bypass
THEHACKERNEWS.COM — 21 May 2024
⚠️
Nikesh Arora on Why Palo Alto Networks Is Buying IBM QRadar
DATABREACHTODAY.CO.UK — 2024-05-21
⚠️
Employee discontent: Insider threat No. 1
CSOONLINE.COM — 21 May 2024
⚠️
RSAC Fireside Chat: IRONSCALES utilizes LLM, superior intel to stay a step ahead of Deep Fakes
LASTWATCHDOG.COM — 21 May 2024
⚠️
Grandoreiro Malware Hijacks Outlook Client to Send Phishing Emails
GBHACKERS.COM — 21 May 2024
⚠️
Critical Memory Corruption In Cloud Logging Infrastructure Enables Code Execution Attack
GBHACKERS.COM — 21 May 2024
⚠️
'Linguistic Lumberjack' Flaw in Logging Utility Fluent Bit Impacts Cloud Services
TENABLE.COM — 21 May 2024
⚠️
CISA Warns of Actively Exploited NextGen Mirth Connect Pre-Auth RCE Vulnerability
KEVHORIZON3.AI — 21 May 2024
⚠️
Detecting Malicious Trackers
SCHNEIER.COM — 2024-05-21
⚠️
EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems
SECURITYWEEK.COM — 21 May 2024
⚠️
Critical Bug Allows DoS, RCE, Data Leaks in All Major Cloud Platforms
DARKREADING.COM — 21 May 2024
⚠️
QNAP QTS Zero-Day in Share Feature Gets Public RCE Exploit
BLEEPINGCOMPUTER.COM — 21 May 2024
⚠️
New ‘Siren’ Mailing List Aims to Share Threat Intelligence for Open Source Projects
THERECORD.MEDIA — 21 May 2024
⚠️
North Korean Hackers Hijacked Military Officials Personal Email
GBHACKERS.COM — 21 May 2024
⚠️
SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure
THEHACKERNEWS.COM — 21 May 2024
⚠️
Unpacking XDR & Business Applications - Chris Thomas, Oliver Tavakoli - ASW #286
YOUTUBE.COM — 2024-05-21
⚠️
Node.js Secure Coding - Liran Tal - ASW #286
YOUTUBE.COM — 2024-05-21
⚠️
Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users
THEHACKERNEWS.COM — 21 May 2024
⚠️
CISA Releases One Industrial Control Systems Advisory
CISA.GOV — Tue, 21 May 24 1
⚠️
CISA Warns Of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw
PACKETSTORMSECURITY.COM — 21 May 2024
⚠️
Audit of Kuksa, the open-source shared building blocks for Software Defined Vehicles
QUARKSLAB.COM — 2024-05-21
⚠️
QNAP Rushes Patch for Code Execution Flaw in NAS Devices
SECURITYWEEK.COM — 21 May 2024
⚠️
Memcyco Report Reveals Only 6% Of Brands Can Protect Their Customers From Digital Impersonation Fraud
CSOONLINE.COM — 21 May 2024
⚠️
Kevin Mandia Exits Mandiant CEO Role After Google Purchase
KEVDATABREACHTODAY.CO.UK — 2024-05-21
⚠️
Newly Updated Grandoreiro Banking Trojan Distributed Via Phishing Campaigns
KNOWBE4.COM — 21 May 2024
⚠️
CISA: NextGen Healthcare Flaw Still Exploited After 7 Months
DATABREACHTODAY.CO.UK — 2024-05-21
⚠️
Veeam warns of critical Backup Enterprise Manager auth bypass bug
BLEEPINGCOMPUTER.COM — 21 May 2024
⚠️
Back to Cooking: Detection Engineer vs Detection Consumer, Again?
MEDIUM.COM — 21 May 2024
📢
Streamlining IT Security Compliance Using the Wazuh FIM Capability
THEHACKERNEWS.COM — 21 May 2024
📢
Ubuntu security advisory (AV24-279)
CYBER.GC.CA — 2024-05-21
📢
Rockwell Automation Encourages Customers to Assess and Secure Public-Internet-Exposed Assets
CISA.GOV — Tue, 21 May 24 1
📢
Dell security advisory (AV24-281)
CYBER.GC.CA — 2024-05-21
📢
IBM security advisory (AV24-280)
CYBER.GC.CA — 2024-05-21
📢
Red Hat security advisory (AV24-282)
CYBER.GC.CA — 2024-05-21
📢
GitHub security advisory (AV24-284)
CYBER.GC.CA — 2024-05-21
📢
[Control systems] CISA ICS security advisories (AV24-283)
CYBER.GC.CA — 2024-05-21
📢
Snapchat Revises AI Privacy Policy Following UK ICO Probe
DATABREACHTODAY.CO.UK — 2024-05-21
📢
Achieve security compliance with Wazuh File Integrity Monitoring
THEHACKERNEWS.COM — 21 May 2024
🔥
Cybercriminals Shift Tactics to Pressure More Victims Into Paying Ransoms
HELPNETSECURITY.COM — 21 May 2024
🔥
OmniVision Says Personal Information Stolen in Ransomware Attack
SECURITYWEEK.COM — 21 May 2024
🔥
Have I Been Pwned Employee 1.0: Stefán Jökull Sigurðarson
TROYHUNT.COM — 21 May 2024
🔥
CyberheistNews Vol 14 #21 How Come Unknown Attack Vectors Are Surging in Ransomware Infections?
KNOWBE4.COM — 21 May 2024
🔥
Conservative cell carrier Patriot Mobile hit by data breach
TECHCRUNCH.COM — 21 May 2024
🔥
Atlassian Bitbucket artifacts can leak plaintext auth secrets
BLEEPINGCOMPUTER.COM — 21 May 2024
🔥
Western Sydney University data breach exposed student data
BLEEPINGCOMPUTER.COM — 21 May 2024
🔥
Cyber Insurance Claims Rise Due To Phishing and Social Engineering Cyber Attacks
KNOWBE4.COM — 21 May 2024
🔥
Bitbucket artifact files can leak plaintext authentication secrets
BLEEPINGCOMPUTER.COM — 21 May 2024
🔥
Google Urges Feds to Ditch Microsoft Over Security Concerns
DATABREACHTODAY.CO.UK — 2024-05-21
🔥
LockBit says they stole data in London Drugs ransomware attack
BLEEPINGCOMPUTER.COM — 21 May 2024
🔥
100 Groups Urge Feds to Put UHG on Hook for Breach Notices
DATABREACHTODAY.CO.UK — 2024-05-21
🕵️
ISC Stormcast For Tuesday, May 21st, 2024 https://isc.sans.edu/podcastdetail/8990, (Tue, May 21st)
ISC.SANS.EDU — 21 May 2024
🕵️
North Korea-Linked Kimsuky APT Attack Targets Victims via Messenger
SECURITYAFFAIRS.COM — 21 May 2024
🕵️
Multiple Vulnerabilities in Honeywell VirtualUOC Let Attackers Execute Remote Code
GBHACKERS.COM — 21 May 2024
🕵️
Insider Q&A: CIA’s Chief Technologist’s Cautious Embrace of Generative AI
SECURITYWEEK.COM — 21 May 2024
🕵️
Hacktivist Groups Target Indian Elections, Leak Personal Data, Says Report
HACKREAD.COM — 21 May 2024
🕵️
Bad Karma, No Justice: Void Manticore Destructive Activities in Israel
RESEARCH.CHECKPOINT.COM — 21 May 2024
🕵️
Microsoft Unveild New Windows 11 Features To Strengthen Security
GBHACKERS.COM — 21 May 2024
🕵️
Working in the security clearance world: How security clearances impact jobs
SECURITYINTELLIGENCE.COM — 21 May 2024
🕵️
Scanning without Scanning with NMAP (APIs FTW), (Tue, May 21st)
ISC.SANS.EDU — 21 May 2024
🕵️
DoppelGänger Attack: Malware Routed Via News Websites And Social Media
GBHACKERS.COM — 21 May 2024
🕵️
News alert: Memcyco report reveals only 6% of brands can stop digital impersonation fraud
LASTWATCHDOG.COM — 21 May 2024
🕵️
Zoom Adding Post-Quantum End-to-End Encryption to Products
SECURITYWEEK.COM — 21 May 2024
🕵️
The Riddle of Data Governance - Steven Fox - CSP #175
YOUTUBE.COM — 2024-05-21
🕵️
Memcyco Report Reveals Only 6% Of Brands Can Protect Their Customers From Digital Impersonation Fraud
GBHACKERS.COM — 21 May 2024
🕵️
Prowling the Wilds — Upgrade Your SOC and Hunt Down Threats
PALOALTONETWORKS.COM — 21 May 2024
🕵️
Arrests made after North Koreans hired for remote tech jobs at US companies
BITDEFENDER.COM — 21 May 2024
🕵️
Iranian State Hackers Partner Up for Large-Scale Attacks, Report
HACKREAD.COM — 21 May 2024
🕵️
Big Tech, Fighting a Junta, Keylogger in Microsoft, APT Hackers, Free Laundry, Josh - SWN #388
YOUTUBE.COM — 2024-05-21
🕵️
The Shadow War: Cognitive Warfare and the Politics of Disinformation
KNOWBE4.COM — 21 May 2024
🕵️
AI Companies Make Fresh Safety Promise at Seoul Summit, Nations Agree to Align Work on Risks
SECURITYWEEK.COM — 21 May 2024
🌐
GitCaught Campaign Leverages GitHub Repositories and Fake Profiles for Malicious Infrastructure
RECORDEDFUTURE.COM — 21 May 2024
🌐
Navigating the Cyber Threat Landscape with a Human-Centric Approach
DATABREACHTODAY.CO.UK — 2024-05-21
🌐
Five Core Tenets Of Highly Effective DevSecOps Practices
THEHACKERNEWS.COM — 21 May 2024
🌐
Rockwell Automation warns admins to take ICS devices offline
BLEEPINGCOMPUTER.COM — 21 May 2024
📡
CyberArk Snaps up Venafi for $1.54B to Ramp up in Machine-to-Machine Security
TECHCRUNCH.COM — 21 May 2024
📡
The Mystery of the Targeted Ad and the Library Patron
THEREGISTER.COM — 21 May 2024
📡
Consumers Continue to Overestimate Their Ability to Spot Deepfakes
HELPNETSECURITY.COM — 21 May 2024
📡
Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses
THEHACKERNEWS.COM — 21 May 2024
📡
Training LLMs: Questions Rise Over AI Auto Opt-In by Vendors
DATABREACHTODAY.CO.UK — 2024-05-21
📡
Chinese Telco Gear May Get Banned in Germany
THEREGISTER.COM — 21 May 2024
📡
Void Manticore Launches Destructive Attacks on Albania and Israel
RESEARCH.CHECKPOINT.COM — 21 May 2024
📡
Zoom adds post-quantum end-to-end encryption to video meetings
BLEEPINGCOMPUTER.COM — 21 May 2024
📡
Live Webinar | Practical Strategies for Accelerating AI Adoption in Cybersecurity
DATABREACHTODAY.CO.UK — 2024-05-21
📡
Google rolls out Chrome fix for empty pages when switching tabs
BLEEPINGCOMPUTER.COM — 21 May 2024
📡
Zoom Adding Post-Quantum End-to-End Encryption To All Products
PACKETSTORMSECURITY.COM — 21 May 2024
📡
Why Your Wi-Fi Router Doubles as an Apple AirTag
KREBSONSECURITY.COM — 21 May 2024
📡
OpenSSF Sings A Siren Song To Steer Developers Away From Buggy FOSS
PACKETSTORMSECURITY.COM — 21 May 2024
📡
Julian Assange Can Appeal Extradition To The US, London Court Rules
PACKETSTORMSECURITY.COM — 21 May 2024
📡
You Can Now Buy A 4-Foot-Tall Humanoid Robot For $16k
PACKETSTORMSECURITY.COM — 21 May 2024
📡
Did OpenAI Illegally Mimic Scarlett Johansson's Voice?
DATABREACHTODAY.CO.UK — 2024-05-21
📡
Security tips for peripheral devices (ITSAP.70.015)
CYBER.GC.CA — 2024-05-21
📡
Updating our SIEM system to version 3.0.3 | Kaspersky official blog
KASPERSKY.COM — 21 May 2024
📡
How to Land Your Dream Job in Tech
DATABREACHTODAY.CO.UK — 2024-05-21
📡
GhostEngine mining attacks kill EDR security using vulnerable drivers
BLEEPINGCOMPUTER.COM — 21 May 2024
📡
Untangling the hiring dilemma: How security solutions free up HR processes
WELIVESECURITY.COM — 21 May 2024