🚨 CISA KEV 1[−]
26 Jun KEVCISA Adds Three Known Exploited Vulnerabilities to CatalogCISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2022-24816 GeoSolutionsGroup JAI-EXT Code Injection Vulnerability CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability CVE-2020-13965 R…CISA.GOV
🐛 COMMON VULNERABILITIES AND EXPOSURES 6[−]
26 JunCritical Vulnerability in MOVEit Transfer Let Hackers Gain Files AccessA critical security vulnerability, CVE-2024-5806, has been identified in MOVEit Transfer, a widely used managed file transfer software. The vulnerability poses significant risks to organizations relying on the software for secure data transfers. The vulnerability is rooted in imp…GBHACKERS.COM
26 JunAuthentication Bypasses in MOVEit Transfer and MOVEit GatewayA critical security vulnerability, CVE-2024-5806, has been found in MOVEit Transfer, a popular file transfer software. The vulnerability allows attackers to bypass authentication checks and gain administrative access by sending manipulated requests.RAPID7.COM
26 JunExploitation Attempts Target New MOVEit Transfer VulnerabilityExploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started. The post Exploitation Attempts Target New MOVEit Transfer Vulnerability appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunApple Patches AirPods Bluetooth Vulnerability That Could Allow EavesdroppingApple has released a firmware update for AirPods that could allow a malicious actor to gain access to the headphones in an unauthorized manner. Tracked as CVE-2024-27867, the authentication issue affects AirPods (2nd generation and later), AirPods Pro (all models), AirPods Max, P…THEHACKERNEWS.COM
26 JunApple Patches AirPods Bluetooth Vulnerability That Could Allow EavesdroppingThe vulnerability, tracked as CVE-2024-27867, affects various AirPods models, Powerbeats Pro, and Beats Fit Pro. An attacker in Bluetooth range could spoof the source device and gain access to the headphones, potentially allowing eavesdropping.THEHACKERNEWS.COM
26 JunNew MOVEit Transfer Vulnerability Under Active Exploitation - Patch ASAP!A newly disclosed critical security flaw impacting Progress Software MOVEit Transfer is already seeing exploitation attempts in the wild shortly after details of the bug were publicly disclosed. The vulnerability, tracked as CVE-2024-5806 (CVSS score: 9.1), concerns an authentica…THEHACKERNEWS.COM
⚠️ VULNERABILITY DISCLOSURE 34[−]
26 JunOver 110,000 Websites Affected by Hijacked Polyfill Supply Chain AttackGoogle has taken steps to block ads for e-commerce sites that use the Polyfill.io service after a Chinese company acquired the domain and modified the JavaScript library ("polyfill.js") to redirect users to malicious and scam sites. More than 110,000 sites that embed the library …THEHACKERNEWS.COM
26 JunThe US Is Banning KasperskyThis move has been coming for a long time. The Biden administration on Thursday said it’s banning the company from selling its products to new US-based customers starting on July 20, with the company only allowed to provide software updates to existing customers through September…SCHNEIER.COM
26 JunCyber Security Today, June 26, 2024 - New vulnerability in MOVEit and a warning to WordPress administrators on poisoned pluginsThis episode reports on an updated explanation of the hack of Los Angeles County's health department, an API coding error that led to a huge data breach in Australia, and moreCYBERSECURITYTODAY.LIBSYN.COM
26 JunUK and US Law Enforcement Put Qilin Ransomware Criminals in the CrosshairsUK and US law enforcement agencies have collaborated to combat the Qilin ransomware gang, which has targeted the global healthcare industry through several recent attacks.THEREGISTER.COM
26 JunZeek: Open-Source Network Traffic Analysis, Security MonitoringZeek is an open-source network analysis framework. Unlike an active security device such as a firewall, Zeek operates on a versatile ‘sensor’ that can be a hardware, software, virtual, or cloud platform.HELPNETSECURITY.COM
26 JunSiemens Sicam Vulnerabilities Could Facilitate Attacks on Energy SectorSeveral vulnerabilities patched recently in Siemens Sicam products could be exploited in attacks aimed at the energy sector. The post Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunPractical Guidance For Securing Your Software Supply ChainThe heightened regulatory and legal pressure on software-producing organizations to secure their supply chains and ensure the integrity of their software should come as no surprise. In the last several years, the software supply chain has become an increasingly attractive target …THEHACKERNEWS.COM
26 JunNew Credit Card Skimmer Targets WordPress, Magento, and OpenCart SitesMultiple content management system (CMS) platforms like WordPress, Magento, and OpenCart have been targeted by a new credit card web skimmer called Caesar Cipher Skimmer. A web skimmer refers to malware that is injected into e-commerce sites with the goal of stealing financial an…THEHACKERNEWS.COM
26 JunOllama AI Platform Flaw Let Attackers Execute Remote CodeHackers attack AI infrastructure platforms since these systems contain a multitude of valuable data, algorithms that are sophisticated in nature, and significant computational resources. So, compromising such platforms provides hackers with access to proprietary models and se…GBHACKERS.COM
26 JunNew North Korean Actor Distributing Malicious npm Packages To Compromise OrganizationsEarly in 2024, North Korean threat actors persisted in using the public npm registry to disseminate malicious packages that were similar to those that Jade Sleet had previously used. Initially thought to be an extension of Sleet’s activity, further investigation revea…GBHACKERS.COM
26 JunThreat Actor Claims 0Day Sandbox Escape RCE in Chrome BrowserA threat actor has claimed to have discovered a zero-day vulnerability in the widely-used Google Chrome browser. The claim was made public via a tweet from the account MonThreat, which has previously been associated with credible cybersecurity disclosures. Details of the Vulnerab…GBHACKERS.COM
26 JunOrca bolsters cloud security offering with source code supportCybersecurity provider Orca has added new source code posture management capabilities to its cloud security offering by adding support for popular source code management (SCM) platforms. The new capabilities are designed to round out Orca’s cloud security offering by adding prote…CSOONLINE.COM
26 JunCloud security faces pressure from AI growth, multicloud useThere is a growing sense of urgency surrounding cloud security as IT professionals deal with complex new threats and increasing cyberattacks targeted towards cloud resources, Thales Inc’s 2024 Cloud Security Study said. With the demands of AI integration across products, data vol…CSOONLINE.COM
26 JunContinuous red-teaming is your only AI risk defenseAI models present CISOs with evolutionary threats that that we may never fully understand. Their very dynamic nature — continually ingesting new data to develop new capabilities — suggests that the unique threats they are subject to will require red-team testing on an ongoing bas…CSOONLINE.COM
26 JunWhat is digital executive protection and how does it work?Zealots, nation-states, terrorists, and disgruntled individuals are increasingly targeting corporate executives, government leaders, and other public figures and their families through their online activities and personal devices to get a toehold into their organizations. In a 20…CSOONLINE.COM
26 JunMicrosoft-owned vendor blamed for massive healthcare breachUS-based Geisinger is warning patients of a security breach at one of its vendors that has likely compromised the data of more than a million of the healthcare giant’s patients. In a November incident, the company said, one of the former employees of Microsoft-owned Nuance Commun…CSOONLINE.COM
26 JunMultiple Vulnerabilities in Siemens Power Automation ProductsSiemens recently patched several vulnerabilities in its Sicam products that could be exploited to target the energy sector. The updates addressed two high-severity and one medium-severity flaws.SEC-CONSULT.COM
26 JunCISA and Partners Release Guidance for Exploring Memory Safety in Critical Open Source ProjectsToday, CISA, in partnership with the Federal Bureau of Investigation, Australian Signals Directorate’s Australian Cyber Security Centre, and Canadian Cyber Security Center, released Exploring Memory Safety in Critical Open Source Projects . This guidance was crafted to provide or…CISA.GOV
26 JunHackers target new MOVEit Transfer critical auth bypass bugThreat actors are attempting to exploit a critical authentication bypass flaw impacting Progress MOVEit Transfer, which the vendor disclosed yesterday. [...]BLEEPINGCOMPUTER.COM
26 JunHacker claims data breach of India’s eMigrate labor portalA hacker claims to be selling an extensive database associated with an Indian government portal meant for blue-collar workforce emigrating from the country. © 2024 TechCrunch. All rights reserved. For personal use only.TECHCRUNCH.COM
26 JunBogus: LockBit's Claimed Federal Reserve Ransomware HitActual Victim: Evolve Bank, Now Dealing With Open Banking Enforcement Action by Fed More reasons to beware breathless reporting about a ransomware group's latest supposed victim: LockBit's claim to have breached the U.S. Federal Reserve Bank. Instead, the actual victim is Evolve …DATABREACHTODAY.CO.UK
26 JunFormerly legitimate Polyfill.io domain abused to serve malicious codeA site formerly used to host a service geared towards adding JavaScript polyfills to web pages to ensure compatibility with older browsers is being abused to serve malicious scripts as part of a web-based supply chain attack. Developers are urged to check their code and remove an…CSOONLINE.COM
26 JunExploit for critical Fortra FileCatalyst Workflow SQLi flaw releasedThe Fortra FileCatalyst Workflow is vulnerable to an SQL injection vulnerability that could allow remote unauthenticated attackers to create rogue admin users and manipulate data on the application database. [...]BLEEPINGCOMPUTER.COM
26 JunCISA: Most critical open source projects not using memory safe codeThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published research looking into 172 key open-source projects and whether they are susceptible to memory flaws. [...]BLEEPINGCOMPUTER.COM
26 JunSimulated Phishing Tests MatterIf you had to choose between regular cybersecurity training and simulated phishing testing, the data shows you should choose simulated phishing tests.KNOWBE4.COM
26 JunThe Double-Edged Sword of AI: Empowering Cybercriminals and the Need for Heightened Cybersecurity AwarenessThe BBC recently reported that Booking.com is warning that AI is driving an explosion in travel scams. Up to 900% in their estimation - making it abundantly clear that while AI can be a force for good, it can also be a formidable weapon in the arsenal of cybercriminals.KNOWBE4.COM
26 JunUnlocking the potential of Generative AI starts with a secure foundationGenerative AI’s impact cannot be understated, as more than 55% of organizations are already piloting or actively using the technology. For all its potential benefits, generative AI raises valid security concerns. Any system that touches proprietary data and personally identifiabl…CSOONLINE.COM
26 JunNews Alert: FireTail unveils free access to its enterprise-level API security platform — to allMcLean, Va., June 26, 2024, CyberNewsWire — FireTail today announced a free version of its enterprise-level API security tools, making them accessible to developers and organizations of all sizes. •FireTail’s unique combination of open-source code libraries, inline AP…LASTWATCHDOG.COM
26 JunBuilding the foundation for secure Generative AIGenerative Artificial Intelligence is a transformative technology that has captured the interest of companies worldwide and is quickly being integrated into enterprise IT roadmaps. Despite the promise and pace of change, business and cybersecurity leaders indicate they are cautio…CSOONLINE.COM
26 JunHackers Quick to Exploit MOVEit Authentication FlawProgress Software: 'Newly Disclosed Third-Party Vulnerability Introduces New Risk' Hackers jumped on a new flaw in Progress Software's MOVEit managed file transfer application just hours after maker Progress Software publicly disclosed the critical flaw, which allowsattackers to …DATABREACHTODAY.CO.UK
26 JunU.S. Federal Agencies Still Struggle to Recruit Cyber TalentFederal Officials Say There is ‘No Silver Bullet’ to Fixing the Cyber Workforce Gap U.S. federal agencies struggle to recruit and retain the next generation of cybersecurity talent, officials testified Wednesday, despite a range of initiatives meant to attract a diverse array of …DATABREACHTODAY.CO.UK
26 JunWhy Activist Investor Jana Is Pressing Rapid7 to Sell ItselfActivist Investors Are Rare in Cybersecurity, But Rapid7's Struggles Drew a Firm In Jana Partners announced a "significant" stake in Boston-based Rapid7 Wednesday and plans to push the vulnerability management firm to sell itself. The activist investor is working with investment …DATABREACHTODAY.CO.UK
📢 SECURITY ADVISORIES 5[−]
26 JunUpdate: CISA Warns Chemical Facilities of Potential Data TheftAlthough there was no evidence of data theft or lateral movement, the agency's investigation revealed that unauthorized access to various sensitive information, including security plans and user accounts, may have occurred.CYBERSECURITYDIVE.COM
26 JunMultiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Executionsubmitted by kid to cybersecurity 19 points | 0 comments https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-google-chrome-could-allow-for-arbitrary-code-execution_2024-074CISECURITY.ORG
26 JunSophos Provides Progress on its Pledge to CISA’s Secure by Design InitiativeWe are pleased to openly share our pledges and the progress we are making in each of the seven core pillars of product security in the Secure by Design framework.SOPHOS.COM
26 JunEU NIS 2 Directive: what it is and how to prepare for it | Kaspersky official blogWhat is the NIS 2 Directive, which companies are affected, what are the consequences of non-compliance, and how to prepare for it.KASPERSKY.COM
🔥 INCIDENT REPORTING 15[−]
26 JunAlejandro Cáceres, the hacker who took down North Korea’s internet from his home: ‘My attack was a response to their attempt to spy on me’submitted by andrade to cybersecurity 7 points | 1 comments https://english.elpais.com/technology/2024-06-24/alejandro-caceres-the-hacker-who-took-down-north-koreas-internet-from-his-home-my-attack-was-a-response-to-their-attempt-to-spy-on-me.html (…) the internet went down acros…ENGLISH.ELPAIS.COM
26 JunNew Medusa Malware Variants Target Android Users in Seven CountriesThe Medusa banking trojan (aka TangleBot) operates as a malware-as-a-service, providing keylogging, screen controls, and SMS manipulation. Note that this operation is different from the ransomware gang and the Mirai-based botnet with the same name.BLEEPINGCOMPUTER.COM
26 JunMalicious JavaScript Snippets Served Due to Supply Chain Attack on Polyfills SiteThe polyfill.io domain, which offers JavaScript code to add functionality to older browsers, has been compromised and is infecting over 100,000 websites with malware. The domain was purchased by a Chinese organization earlier this year.THEREGISTER.COM
26 JunP2Pinfect Worm Now Dropping Ransomware on Redis ServersThe P2Pinfect worm targeting Redis servers has been updated with ransomware and cryptocurrency mining payloads. The post P2Pinfect Worm Now Dropping Ransomware on Redis Servers appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunChinese and N. Korean Hackers Target Global Infrastructure with RansomwareThreat actors with suspected ties to China and North Korea have been linked to ransomware and data encryption attacks targeting government and critical infrastructure sectors across the world between 2021 and 2023. While one cluster of activity has been associated with the Chamel…THEHACKERNEWS.COM
26 JunOilRig Hackers Attacking Individuals And Organizations In The Middle EastOilRig is an Iranian-linked cyber espionage group that has been active since 2015, and this group is known for its sophisticated spear-phishing campaigns and advanced infiltration techniques. This group conducts a multitude of cyber attacks against various sectors, and amon…GBHACKERS.COM
26 JunP2Pinfect Redis Server with New Ransomware PayloadCybersecurity researchers have identified a new ransomware payload associated with the P2Pinfect malware, primarily targeting Redis servers. This sophisticated malware, previously known for its peer-to-peer (P2P) botnet capabilities, has now evolved to include ransomware and cryp…GBHACKERS.COM
26 JunThe EU Targets Russia’s LNG Ghost Fleet With Sanctions as Concern Mounts About Hybrid AttacksSome expressed concern about a rise in hybrid attacks by Russia – including allegations of election interference, cyberattacks and sabotage. The post The EU Targets Russia’s LNG Ghost Fleet With Sanctions as Concern Mounts About Hybrid Attacks appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunTransatlantic Cable podcast episode 353 | Kaspersky official blogEpisode 353 of the Kaspersky podcast has ransomware, Apple in the docks and music copyright mayhem!KASPERSKY.COM
26 JunAttackers in Profile: menuPass and ALPHV/BlackCatTo test the effectiveness of managed services like our Trend Micro managed detection and response offering, MITRE Engenuity™ combined the tools, techniques, and practices of two globally notorious bad actors: menuPass and ALPHV/BlackCat. This blog tells the story of why they were…TRENDMICRO.COM
26 JunLockBit lied: Stolen data is from a bank, not US Federal ReserveRecently-disrupted LockBit ransomware group, in what appears to be a desperate attempt to make a comeback, claimed this week that it had hit US Federal Reserve, the central bank of the United States. Except, the rumor has been quashed. [...]BLEEPINGCOMPUTER.COM
26 JunUS charges Russian for allegedly helping GRU spies target Ukrainian government systems with data-destroying malwareU.S. prosecutors say the WhisperGate cyberattack was designed to "sow concern" among Ukrainian civil society ahead of Russia's invasion. © 2024 TechCrunch. All rights reserved. For personal use only.TECHCRUNCH.COM
26 JunNuance Ex-Employee Indicted for Breach Affecting 1 MillionDOJ Says Vendor's Terminated Worker Unlawfully Accessed Geisinger Patient Info An ex-employee of Microsoft's Nuance Communications unit is at the center of a 2023 data breach that affected more than 1 million patients of Pennsylvania-based healthcare system Geisinger. The Departm…DATABREACHTODAY.CO.UK
26 JunSmashing Security podcast #378: Julian Assange, inside a DDoS attack, and deepfake traumasWikileaks's Julian Assange is a free man, deepfakes cause trouble in the playground, and we hear hot takes about ransomware and tales from inside a devastating denial-of-service attack. All this and much much more is discussed in the latest edition of the "Smashing Security" podc…GRAHAMCLULEY.COM
🕵️ THREAT INTELLIGENCE 19[−]
26 JunISC Stormcast For Wednesday, June 26th, 2024 https://isc.sans.edu/podcastdetail/9036, (Wed, Jun 26th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
26 JunRussian Hackers Target Ukraine with XWorm RAT Malware PayloadCyble Research and Intelligence Labs (CRIL) researchers have discovered that a Russia-linked threat group known as UAC-0184 is targeting Ukraine using the XWorm remote access trojan (RAT).THECYBEREXPRESS.COM
26 JunPolyfill Supply Chain Attack Hits Over 100k WebsitesMore than 100,000 websites are affected by a supply chain attack injecting malware via a Polyfill domain. The post Polyfill Supply Chain Attack Hits Over 100k Websites appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunFireTail Unveils Free Access for All to Cutting-Edge API Security PlatformFireTail, a disruptor in API security, unveils free access for all to its cutting-edge API security platform. This initiative opens the door for developers and organizations of any size to access enterprise-level API security tools. Today, over 80% of all internet traffic i…GBHACKERS.COM
26 JunMicrosoft Announced AI Tool Copilot for Security TI in Defender XDRMicrosoft has announced the general availability of Copilot for Security threat intelligence embedded experience in the Defender XDR portal. This AI-powered tool aims to revolutionize the way organizations access, operate on, and integrate Microsoft’s threat intelligence da…GBHACKERS.COM
26 JunGaining and Retaining Security Talent: A Cheat Sheet for CISOsFreed from the shackles of always demanding a technical background, the CISO can concentrate on building a diverse team comprising multiple skills. The post Gaining and Retaining Security Talent: A Cheat Sheet for CISOs appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunThe dangers of anthropomorphizing AI: An infosec perspectiveThe generative AI revolution is showing no signs of slowing down. Chatbots and AI assistants have become an integral part of the business world, whether for training employees, answering customer queries or something else entirely. We’ve even given them names and genders an…SECURITYINTELLIGENCE.COM
26 JunWhat are You Working on Wednesdaysubmitted by shellsharks to cybersecurity 1 points | 0 comments Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.INFOSEC.PUB
26 JunSANS New2Cyber Summit 2024 - 17 videos - SPANISH & ENGLISHsubmitted by ashar to security_cpe 1 points | 0 comments https://images.contentstack.io/v3/assets/blt36c2e63521272fdc/blt42b9758175f56eb7/64ad1d88ec1d952d87146012/70x70-curriculum-icons-n2c-rev.jpg SANS New2Cyber Summit 2024 playlist Visual SummaryIMAGES.CONTENTSTACK.IO
26 JunGoogle Disrupts More China-Linked Dragonbridge Influence OperationsGoogle has disrupted over 175,000 YouTube and Blogger instances related to the Chinese influence operation Dragonbridge. The post Google Disrupts More China-Linked Dragonbridge Influence Operations appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunWebsites that support USB Dongle Authentication (hardware security keys)submitted by boredsquirrel to cybersecurity 1 points | 0 comments https://dongleauth.com/DONGLEAUTH.COM
26 JunGoogle Unveils New Chrome Enterprise Core Features for IT, Security TeamsGoogle has announced new Chrome Enterprise Core features that should be very useful to IT and security teams. The post Google Unveils New Chrome Enterprise Core Features for IT, Security Teams appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunWikiLeaks Founder Julian Assange Returns to Australia a Free Man After US Legal Battle EndsWikiLeaks founder Julian Assange returned to Australia, hours after pleading guilty to obtaining and publishing U.S. military secrets. The post WikiLeaks Founder Julian Assange Returns to Australia a Free Man After US Legal Battle Ends appeared first on SecurityWeek .SECURITYWEEK.COM
26 JunAtos Takeover Bid Hits New RoadblockShareholder Onepoint Withdraws From Confirmed Restructuring Plan A takeover bid of debt-ridden French IT consultancy Atos hit a roadblock after a key company shareholder withdrew from a financial restructuring plan designed to help the firm recover from its 3.9-billion-euro liabi…DATABREACHTODAY.CO.UK
26 JunOpenAI Drops ChatGPT Access for Users in China, Russia, IranUsers of All OpenAI Services in Unsupported Countries Will Lose Access by July 9 OpenAI appears to be removing access to its services for users in China, Russia and Iran in the next two weeks. The company did not explain its decision, but it has disrupted influence campaigns and …DATABREACHTODAY.CO.UK
26 JunLeverage Platformization – Strengthen, Unify and Simplify Cybersecurity ToolsThis platformization series expands on the complexities of different cybersecurity tools and how unifying into one simplifies operations. The post Leverage Platformization – Strengthen, Unify and Simplify Cybersecurity Tools appeared first on Palo Alto Networks Blog .PALOALTONETWORKS.COM
26 JunWhat Setting Live Traps for Cybercriminals Taught Me About Security [Guest Diary], (Wed, Jun 26th)[This is a Guest Diary by Kelly Fiocchi-Tapani, an ISC intern as part of the SANS.edu BACS program]
ISC.SANS.EDU
26 JunMitigating Skeleton Key, a new type of generative AI jailbreak techniqueMicrosoft recently discovered a new type of generative AI jailbreak method called Skeleton Key that could impact the implementations of some large and small language models. This new method has the potential to subvert either the built-in model safety or platform safety systems a…MICROSOFT.COM
26 JunWorking with a cybersecurity committee of the boardLearn about the rise of cybersecurity committees and how the CISO and IT security team can work with them to produce the best result for the organization’s IT security and enable digital transformation. The post Working with a cybersecurity committee of the board appeared first o…MICROSOFT.COM
🌐 CYBER THREAT LANDSCAPE 5[−]
26 JunThe Growing Threat of Malware Concealed Behind Cloud ServicesCybersecurity threats are utilizing cloud services, such as AWS and DriveHQ, to store, distribute, and control malicious activities. This poses challenges for detection and prevention, as cloud services offer scalability and anonymity.FORTINET.COM
26 JunNew Medusa Android Trojan Targets Banking Users Across 7 CountriesCybersecurity researchers have discovered an updated version of an Android banking trojan called Medusa that has been used to target users in Canada, France, Italy, Spain, Turkey, the U.K., and the U.S. The new fraud campaigns, observed in May 2024 and active since July 2023, man…THEHACKERNEWS.COM
26 JunSnowblind malware abuses Android security feature to bypass securityA novel Android attack vector from a piece of malware tracked as Snowblind is abusing a security feature to bypass existing anti-tampering protections in apps that handle sensitive user data. [...]BLEEPINGCOMPUTER.COM
26 JunCyber insurance as part of the cyber threat mitigation strategyWhy organizations of every size and industry should explore their cyber insurance options as a crucial component of their risk mitigation strategiesWELIVESECURITY.COM
🎙️ PODCASTS 1[−]
26 JunIntroducing… The AI Fix podcastCheck out the brand new podcast, diving headfirst into the bizarre, and downright mind-boggling world of artificial intelligence, with experts Graham Cluley and Mark Stockley.GRAHAMCLULEY.COM
📡 INFOSEC NEWS 10[−]
26 JunCyber Insurance and Cyber Defenses 2024: Lessons from IT and Cybersecurity LeadersInvesting in cyber defenses to optimize your insurance position is a win-win: organizations report easier, cheaper access to cyber coverage as well as improved protection and a reduction in IT workload.SOPHOS.COM
26 JunMicrosoft Blamed For Million-Plus Patient Record Theft At US Hospital GiantPACKETSTORMSECURITY.COM
26 JunWindows 10 KB5039299 update released with 10 changes or fixesThe June 2024 optional update for Windows 10 is now available. Today's update brings KB5039299 for Windows 10 version 22H2 and older, with up to nine bug fixes or changes. [...]BLEEPINGCOMPUTER.COM
26 JunWindows 11 KB5039302 update released with 9 changes or fixesThe June 2024 optional update for Windows 11 is now available. The latest update, KB5039302, is for Windows 11 version 22H2 and newer and brings several new features and fixes. [...]BLEEPINGCOMPUTER.COM
26 JunHow the Kaspersky ban will hit resellers in the US"It's just a lot of time lost for nothing," a U.S.-based Kaspersky reseller told TechCrunch. © 2024 TechCrunch. All rights reserved. For personal use only.TECHCRUNCH.COM
26 JunKeeping Track of the Cybersecurity Job MarketHow Understanding Hiring Trends Can Boost Your Career in Cyber The journey to securing a career in cybersecurity can often feel daunting, and the job hunt can be frustrating. But learning to understand the current cybersecurity job market and industry trends can help you achieve …DATABREACHTODAY.CO.UK
26 JunCyber security guidance for democratic institutions: artificial intelligence (ITSAP.00.135)CYBER.GC.CA
26 JunAI Coding Companions 2024: AWS, GitHub, Tabnine + MoreAI coding companions are keeping pace with the high-speed evolution of generative AI overall, continually refining and augmenting their capabilities to make software development faster and easier than ever before. This blog looks at how the landscape is changing and key features …TRENDMICRO.COM