MATLOCK.CA
108Articles
8Categories
2024-07-24Date
🚨
CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities ListThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below - CVE-2012-4792 (CVSS score: 9.3) - Microsoft Interne…
KEVTHEHACKERNEWS.COM — 24 Jul 2024
🐛
Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers
THEHACKERNEWS.COM — 24 Jul 2024
🐛
Infostealer Campaign Exploits Microsoft Windows SmartScreen Flaw to Spread Payloads
FORTINET.COM — 24 Jul 2024
🐛
Microsoft Defender SmartScreen bug actively used in stealer campaign
KEVCSOONLINE.COM — 24 Jul 2024
🐛
Two Vulnerabilities Discovered in LangChain GenAI Framework
UNIT42.PALOALTONETWORKS.COM — 24 Jul 2024
🐛
Organizations Warned of Exploited Twilio Authy Vulnerability
SECURITYWEEK.COM — 24 Jul 2024
🐛
ISC Releases Security Advisories for BIND 9
CISA.GOV — Wed, 24 Jul 24 1
🐛
Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018
SECURITYWEEK.COM — 24 Jul 2024
🐛
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
CISA.GOV — 24 Jul 2024
⚠️
Port shadow: Yet another VPN weakness ripe for exploit
CSOONLINE.COM — 24 Jul 2024
⚠️
Countdown to DORA: How CISOs can prepare for EU’s Digital Operational Resilience Act
CSOONLINE.COM — 24 Jul 2024
⚠️
The Power and Peril of RMM Tools
VARONIS.COM — 24 Jul 2024
⚠️
CrowdStrike meltdown highlights IT’s weakest link: Too much administration
CSOONLINE.COM — 24 Jul 2024
⚠️
How to Reduce SaaS Spend and Risk Without Impacting Productivity
THEHACKERNEWS.COM — 24 Jul 2024
⚠️
Hackers leak documents stolen from Pentagon contractor Leidos
CSOONLINE.COM — 24 Jul 2024
⚠️
Google's reCAPTCHAv2 is just labor exploitation, boffins say
THEREGISTER.COM — 24 Jul 2024
⚠️
CrowdStrike blames testing shortcomings for Windows meltdown
KEVCSOONLINE.COM — 24 Jul 2024
⚠️
Telegram App Flaw Exploited to Spread Malware Hidden in Videos
THEHACKERNEWS.COM — 24 Jul 2024
⚠️
BlueStacks Emulator For Windows Flaw Exposes Millions Of Gamers To Attack
GBHACKERS.COM — 24 Jul 2024
⚠️
Chinese Hackers Using Shared Framework To Create Multi-Platform Malware
GBHACKERS.COM — 24 Jul 2024
⚠️
Robot Dog Internet Jammer
SCHNEIER.COM — 2024-07-24
⚠️
CrowdStrike offers a $10 apology gift card to say sorry for outage
TECHCRUNCH.COM — 24 Jul 2024
⚠️
Docker fixes critical 5-year old authentication bypass flaw
BLEEPINGCOMPUTER.COM — 24 Jul 2024
⚠️
Zest Security Aims to Resolve, Not Just Mitigate Cloud Risks
SECURITYWEEK.COM — 24 Jul 2024
⚠️
Guide your SOC Leaders to More Engineering Wisdom for Detection(Part 9)
MEDIUM.COM — 24 Jul 2024
⚠️
A Tumblr User Talks Crowdstrike
SH.ITJUST.WORKS — 24 Jul 2024
⚠️
US CISA Urges BIND 9 Users to Address New DNS Exploits
DATABREACHTODAY.CO.UK — 2024-07-24
⚠️
Vulnerabilities in LangChain Gen AI Could Prompt Data Leak
DATABREACHTODAY.CO.UK — 2024-07-24
📋
Windows July security updates send PCs into BitLocker recovery
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🔥
BreachForums v1 database leak is an OPSEC test for hackers
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🔥
Verizon to Pay $16 Million in TracFone Data Breach Settlement
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🔥
Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed
GBHACKERS.COM — 24 Jul 2024
🔥
CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices
THEHACKERNEWS.COM — 24 Jul 2024
🔥
BreachForums v1 database leak is an OPSEC test for hackers
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🔥
Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool
THEHACKERNEWS.COM — 24 Jul 2024
🔥
Chinese Espionage Group Upgrades Malware Arsenal to Target All Major Operating Systems
INFOSECURITY-MAGAZINE.COM — 24 Jul 2024
🔥
CrowdStrike Explains Why Bad Update Was Not Properly Tested
SECURITYWEEK.COM — 24 Jul 2024
🔥
Dazz snaps up $50M for AI-based, automated cloud security remediation
TECHCRUNCH.COM — 24 Jul 2024
🔥
Unique malware identified in Panchan botnet with advanced persistence techniques
INDUSTRIALCYBER.CO — 24 Jul 2024
🔥
DeFi Crypto Exchange dYdX v3 Website Hacked in DNS Hijacking Attack
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🔥
Verizon Subsidiary Settles With FCC for $16M Over Three Data Breaches
SECURITYWEEK.COM — 24 Jul 2024
🔥
Crisis communication: What NOT to do
SECURITYINTELLIGENCE.COM — 24 Jul 2024
🔥
BreachForumsV1 Database Leaked: Private messages, Emails & IP Exposed
GBHACKERS.COM — 24 Jul 2024
🔥
Beware Of Malicious Python Packages That Steal Users Sensitive Data
GBHACKERS.COM — 24 Jul 2024
🔥
CrowdStrike: 'Content Validator' bug let faulty update pass checks
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🔥
ShadowRoot Ransomware Attacking Organizations With Weaponized PDF Documents
GBHACKERS.COM — 24 Jul 2024
🔥
57,000 Patients Impacted by Michigan Medicine Data Breach
SECURITYWEEK.COM — 24 Jul 2024
🔥
Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident
SECURITYWEEK.COM — 24 Jul 2024
🔥
How to Lead When a Crisis Occurs
DATABREACHTODAY.CO.UK — 2024-07-24
🔥
Daixin Gang Threatening to Leak 10 Million Ambulance Records
DATABREACHTODAY.CO.UK — 2024-07-24
🔥
A Hacker ‘Ghost’ Network Is Quietly Spreading Malware on GitHub
WIRED.COM — 24 Jul 2024
🕵️
Most Airlines Except One Are Recovering From the CrowdStrike Tech Outage. The Feds Have Noticed
SECURITYWEEK.COM — 24 Jul 2024
🕵️
KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware
SECURITYWEEK.COM — 24 Jul 2024
🕵️
ISC Stormcast For Wednesday, July 24th, 2024 https://isc.sans.edu/podcastdetail/9066, (Wed, Jul 24th)
ISC.SANS.EDU — 24 Jul 2024
🕵️
Spanish Police Arrest Three Suspects Linked to Pro-Moscow NoName057(16) Hackers
THERECORD.MEDIA — 24 Jul 2024
🕵️
Possible APT28-linked Hackers Target Ukraine’s Scientific Institutions
THERECORD.MEDIA — 24 Jul 2024
🕵️
Researchers Detail on How Defenders Eliminate Detection Gaps in AWS Environments
GBHACKERS.COM — 24 Jul 2024
🕵️
Attackers Can Bypass 'Windows Hello' Strong Authentication
DARKREADING.COM — 24 Jul 2024
🕵️
CrowdStrike Says Code-Testing Bugs Failed to Prevent Outage
DATABREACHTODAY.CO.UK — 2024-07-24
🕵️
Russia Shifts Cyber Focus to Battlefield Intelligence in Ukraine
INFOSECURITY-MAGAZINE.COM — 24 Jul 2024
🕵️
What are You Working on Wednesday
INFOSEC.PUB — 24 Jul 2024
🕵️
Vanta Raises $150 Million at $2.45 Billion Valuation
SECURITYWEEK.COM — 24 Jul 2024
🕵️
Chrome 127 Patches 24 Vulnerabilities
SECURITYWEEK.COM — 24 Jul 2024
🕵️
Chinese Daggerfly uses a new version of Macma macOS backdoor
SECURITYAFFAIRS.COM — 24 Jul 2024
🕵️
Malware Campaigns Target Hamster Kombat Players
WELIVESECURITY.COM — 24 Jul 2024
🕵️
Google Chrome 127 Released with a fix for 24 Security Vulnerabilities
GBHACKERS.COM — 24 Jul 2024
🕵️
250 Million Hamster Kombat Players Targeted Via Android And Windows Malware
GBHACKERS.COM — 24 Jul 2024
🕵️
Siemens Patches Power Grid Product Flaw Allowing Backdoor Deployment
SECURITYWEEK.COM — 24 Jul 2024
🕵️
Cyber firm KnowBe4 hired a fake IT worker from North Korea
CYBERSCOOP.COM — 24 Jul 2024
🕵️
Companies Are Playing Catch-Up to Secure Generative AI
DATABREACHTODAY.CO.UK — 2024-07-24
🕵️
KnowBe4 mistakenly hires North Korean hacker, faces infostealer attack
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🕵️
Dazz Scores Hefty $50M Investment for AI-Powered Risk Remediation Tech
SECURITYWEEK.COM — 24 Jul 2024
🕵️
Why Chatbots Aren't Always the Answer: Insights from Application Security Weekly
YOUTUBE.COM — 2024-07-24
🕵️
The Blob of Cybersecurity: Allie Mellen's Take on Industry Groupthink
YOUTUBE.COM — 2024-07-24
🕵️
US FTC Investigates Impact of AI-Powered Dynamic Pricing
DATABREACHTODAY.CO.UK — 2024-07-24
🕵️
Congratulations to the Top MSRC 2024 Q2 Security Researchers!
MSRC.MICROSOFT.COM — 24 Jul 2024
🕵️
FBI Encountered Encryption Hurdles in Trump Shooting Probe
DATABREACHTODAY.CO.UK — 2024-07-24
🕵️
Email Gateway Security Gaps Enable New Malware Tactics
DATABREACHTODAY.CO.UK — 2024-07-24
🕵️
Over 3,000 GitHub accounts used by malware distribution service
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🕵️
Senator: Top Banks Only Reimburse 38% of Unauthorized Scams
DATABREACHTODAY.CO.UK — 2024-07-24
🕵️
Check Point Snags Team8's Nadav Zafrir to Replace Gil Shwed
DATABREACHTODAY.CO.UK — 2024-07-24
🕵️
Smashing Security podcast #382: CrowdStrike, Dark Wire, and the Paris Olympics
GRAHAMCLULEY.COM — 24 Jul 2024
🕵️
Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture
MICROSOFT.COM — 24 Jul 2024
🕵️
Building security into the redesigned Chrome downloads experience
SECURITY.GOOGLEBLOG.COM — 2024-07-24
🌐
CrowdStrike CEO is summoned before the Homeland Security committee. Cyber Security Today for Wednesday, July 24, 2023
CYBERSECURITYTODAY.LIBSYN.COM — 24 Jul 2024
🌐
"Mouse Logger" Malicious Python Script, (Wed, Jul 24th)
ISC.SANS.EDU — 24 Jul 2024
🌐
Fake CrowdStrike Repair Manual Pushes New Infostealer Malware
BLEEPINGCOMPUTER.COM — 24 Jul 2024
🌐
Paris Wi-Fi Security Study | Kaspersky official blog
KASPERSKY.COM — 24 Jul 2024
🌐
How Russian Malware Cut Heat To 600 Heat To Ukrainian Buildings In Deep Winter
PACKETSTORMSECURITY.COM — 24 Jul 2024
🌐
Hot topics: Can’t-miss sessions at Mandiant’s 2024 mWISE event
BLEEPINGCOMPUTER.COM — 24 Jul 2024
📡
Chinese ‘Cybercrime Syndicate’ Behind Gambling Sites Advertised at European Sporting Events
THERECORD.MEDIA — 24 Jul 2024
📡
Google Abandons Plan to Drop Third-Party Cookies in Chrome
THEREGISTER.COM — 24 Jul 2024
📡
Unlocking cyber insurance savings to fund MDR
SOPHOS.COM — 24 Jul 2024
📡
Alphabet's Reported $23B Bet on Wiz Fizzles Out
THEREGISTER.COM — 24 Jul 2024
📡
Report: HHS Needs to Beef up Cloud Security and Skills
BANKINFOSECURITY.COM — 24 Jul 2024
📡
How a Trust Center Solves Your Security Questionnaire Problem
THEHACKERNEWS.COM — 24 Jul 2024
📡
Philippines to End Online Casinos, Maybe Scams Too
THEREGISTER.COM — 24 Jul 2024
📡
Physicists Just Created An Element Using A Particle Beam
PACKETSTORMSECURITY.COM — 24 Jul 2024
📡
Spain Arrested Three In Pro-Russian DDoS Crew Takedown
PACKETSTORMSECURITY.COM — 24 Jul 2024
📡
Chrome 127 Patches 24 Vulnerabilities
PACKETSTORMSECURITY.COM — 24 Jul 2024
📡
CrowdStrike Explains Why Bad Update Was Not Properly Tested
PACKETSTORMSECURITY.COM — 24 Jul 2024
📡
School Gets An F For Using Facial Recognition On Kids In Canteen
PACKETSTORMSECURITY.COM — 24 Jul 2024
📡
Cybersecurity Startup Protexxa Closes $10M Series A Round
PRIVATECAPITALJOURNAL.COM — 24 Jul 2024
📡
Google Chrome now warns about risky password-protected archives
BLEEPINGCOMPUTER.COM — 24 Jul 2024
📡
Microsoft fixes bug behind Windows 10 Connected Cache delivery issues
BLEEPINGCOMPUTER.COM — 24 Jul 2024
📡
SAFECOM and NCSWIC Publish Fall 2023 Joint SAFECOM-NCSWIC Bi-Annual Meeting Executive Summaries
CISA.GOV — Wed, 24 Jul 24 1
📡
NCSWIC’s Planning, Training, and Exercise Committee releases “Set Your PACE Plan” Flyer
CISA.GOV — Wed, 24 Jul 24 1
📡
Google Chrome now asks for passwords to scan protected archives
BLEEPINGCOMPUTER.COM — 24 Jul 2024