MATLOCK.CA
96Articles
9Categories
2024-08-21Date
🚨
CISA Adds Four Known Exploited Vulnerabilities to CatalogCISA has added four new vulnerabilities to its  Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability CVE-2022-…
KEVCISA.GOV — Wed, 21 Aug 24 1
🐛
GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk
THEHACKERNEWS.COM — 21 Aug 2024
🐛
Over 10,000 WordPress Sites at Risk: Critical File Deletion Flaw Found in InPost Plugins
SECURITYONLINE.INFO — 21 Aug 2024
🐛
Spring Security Flaw Leaves Applications Open to Unauthorized Access
SECURITYONLINE.INFO — 21 Aug 2024
🐛
GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk
THEHACKERNEWS.COM — 21 Aug 2024
🐛
Critical Heap Overflow Vulnerability Discovered in FFmpeg, PoC Published
SECURITYONLINE.INFO — 21 Aug 2024
🐛
Researcher Details Microsoft Outlook Zero-Click Vulnerability (CVE-2024-38021)
SECURITYONLINE.INFO — 21 Aug 2024
🐛
Critical Remote Code Execution Vulnerability Addressed in GiveWP Plugin
THECYBEREXPRESS.COM — 21 Aug 2024
🐛
Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data
THEHACKERNEWS.COM — 21 Aug 2024
⚠️
Attackers increasingly using legitimate remote management tools to hack enterprises
CSOONLINE.COM — 21 Aug 2024
⚠️
Ransomware hits record high amounts: Cyber Security Today for Tuesday, August 21, 2024
CYBERSECURITYTODAY.LIBSYN.COM — 21 Aug 2024
⚠️
Custodians looking to beat offenders in the GenAI cybersecurity battle
CSOONLINE.COM — 21 Aug 2024
⚠️
Rising Abuse of URL Rewriting in Phishing
PERCEPTION-POINT.IO — 21 Aug 2024
⚠️
Cyberattack Disrupts Microchip Technology Manufacturing Facilities
SECURITYWEEK.COM — 21 Aug 2024
⚠️
8 cloud security gotchas most CISOs miss
CSOONLINE.COM — 21 Aug 2024
⚠️
RCE Vulnerability in Atlassian Bamboo Data Center and Server
SECURITYONLINE.INFO — 21 Aug 2024
⚠️
Microchip suffers cyberattack, impacting manufacturing operations
CSOONLINE.COM — 21 Aug 2024
⚠️
New Msupedge Backdoor Targeting Taiwan Employs Stealthy Communications
SYMANTEC-ENTERPRISE-BLOGS.SECURITY.COM — 21 Aug 2024
⚠️
Unlocking the Power of AI in Cybersecurity
SECURITYWEEK.COM — 21 Aug 2024
⚠️
Azure Kubernetes Services Vulnerability Exposed Sensitive Information
SECURITYWEEK.COM — 21 Aug 2024
⚠️
TLS Bootstrap Attack on Azure Kubernetes Services can Leak Sensitive Credentials
CLOUD.GOOGLE.COM — 21 Aug 2024
⚠️
CrowdStrike-Action1 deal collapses over user concerns
CSOONLINE.COM — 21 Aug 2024
⚠️
Microsoft Copilot Studio Vulnerability Led to Information Disclosure
SECURITYWEEK.COM — 21 Aug 2024
⚠️
Novel Phishing Method Used in Android and iOS Financial Fraud Campaigns
INFOSECURITY-MAGAZINE.COM — 21 Aug 2024
⚠️
GitHub Enterprise Server vulnerable to critical auth bypass flaw
BLEEPINGCOMPUTER.COM — 21 Aug 2024
⚠️
Why LinkedIn Developed Its Own AI-Powered Security Platform
SECURITYWEEK.COM — 21 Aug 2024
⚠️
Ransomware Again on Track to Achieve Record-Breaking Profits
DATABREACHTODAY.CO.UK — 2024-08-21
⚠️
Litespeed Cache bug exposes millions of WordPress sites to takeover attacks
BLEEPINGCOMPUTER.COM — 21 Aug 2024
⚠️
Australian data regulator backs off Clearview AI
CSOONLINE.COM — 21 Aug 2024
⚠️
Threat Actors Abuse URL Rewriting to Mask Phishing Links
KNOWBE4.COM — 21 Aug 2024
⚠️
Iranian cyberespionage group deploys new BlackSmith malware in sophisticated spear-phishing campaign
CSOONLINE.COM — 21 Aug 2024
⚠️
Why Your Business Needs Email Encryption Now
CSOONLINE.COM — 21 Aug 2024
⚠️
The Hidden Dangers of Email Attachments
CSOONLINE.COM — 21 Aug 2024
⚠️
Phishing Scammers Leverage Microsoft Dynamics 365 to Target US Government Contractors
KNOWBE4.COM — 21 Aug 2024
⚠️
Google fixes ninth Chrome zero-day exploited in attacks this year
BLEEPINGCOMPUTER.COM — 21 Aug 2024
⚠️
The Strategic Need for Employee Training and Education
DATABREACHTODAY.CO.UK — 2024-08-21
⚠️
The Great Cloud Security Debate: CSP vs. Third-Party Security Tools
MEDIUM.COM — 21 Aug 2024
⚠️
ASD’s ACSC, CISA, FBI, and NSA, with the support of International Partners Release Best Practices for Event Logging and Threat Detection
CISA.GOV — Wed, 21 Aug 24 1
⚠️
Google fixes ninth Chrome zero-day exploited in attacks this year
BLEEPINGCOMPUTER.COM — 21 Aug 2024
📢
Atlassian security advisory (AV24-469)
CYBER.GC.CA — 2024-08-21
📢
Arden Claims Service Reports Data Breach, 139,000 Affected
SECURITYWEEK.COM — 21 Aug 2024
📢
GitHub security advisory (AV24-470)
CYBER.GC.CA — 2024-08-21
📢
Mitel security advisory (AV24-471)
CYBER.GC.CA — 2024-08-21
📢
Are the New FAA Cyber Requirements for Future Planes Enough?
DATABREACHTODAY.CO.UK — 2024-08-21
🔥
Chipmaker Microchip reveals cyber attack
THEREGISTER.COM — 21 Aug 2024
🔥
Styx Stealer Creator's OPSEC Fail Leaks Client List and Profit Details
THEHACKERNEWS.COM — 21 Aug 2024
🔥
Cyberattack Disrupts Microchip Manufacturing Facilities
PACKETSTORMSECURITY.COM — 21 Aug 2024
🔥
Ransomware Gangs Are in Decline But Still Make Lots of Noise
DATABREACHTODAY.CO.UK — 2024-08-21
🔥
QNAP adds NAS ransomware protection to latest QTS version
BLEEPINGCOMPUTER.COM — 21 Aug 2024
🔥
$2.25M Settlement Reached in Atlantic General Hack Lawsuit
DATABREACHTODAY.CO.UK — 2024-08-21
🔥
How regulatory standards and cyber insurance inform each other
WELIVESECURITY.COM — 21 Aug 2024
🕵️
Mapping Threats with DNSTwist and the Internet Storm Center [Guest Diary], (Tue, Aug 20th)
ISC.SANS.EDU — 21 Aug 2024
🕵️
ISC Stormcast For Wednesday, August 21st, 2024 https://isc.sans.edu/podcastdetail/9106, (Wed, Aug 21st)
ISC.SANS.EDU — 21 Aug 2024
🕵️
Black Hat Fireside Chat: User feedback, AI-infused email security are both required to deter phishing
LASTWATCHDOG.COM — 21 Aug 2024
🕵️
New macOS Malware TodoSwift Linked to North Korean Hacking Groups
THEHACKERNEWS.COM — 21 Aug 2024
🕵️
Hackers target bank clients in Czechia, Hungary and Georgia in novel phishing campaign
THERECORD.MEDIA — 21 Aug 2024
🕵️
Pro-Russia group Vermin targets Ukraine with a new malware family
SECURITYAFFAIRS.COM — 21 Aug 2024
🕵️
Google Cloud Unveils New Security Services and Capabilities
SECURITYWEEK.COM — 21 Aug 2024
🕵️
Average DDoS attack costs $6,000 per minute (to the victim)
HELPNETSECURITY.COM — 21 Aug 2024
🕵️
Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue
SECURITYWEEK.COM — 21 Aug 2024
🕵️
Story of an Undercover CIA Agent who Penetrated Al Qaeda
SCHNEIER.COM — 2024-08-21
🕵️
Google Play Bug Bounty Program Shutting Down
SECURITYWEEK.COM — 21 Aug 2024
🕵️
Phrack hacker zine publishes new edition after three years
BLEEPINGCOMPUTER.COM — 21 Aug 2024
🕵️
AI in OT Security — Balancing Industrial Innovation and Cyber Risk
PALOALTONETWORKS.COM — 21 Aug 2024
🕵️
North Korean Hackers Deploy New MoonPeak Trojan in Cyber Campaign
THEHACKERNEWS.COM — 21 Aug 2024
🕵️
Critical Authentication Flaw Haunts GitHub Enterprise Server
SECURITYWEEK.COM — 21 Aug 2024
🕵️
New Phishing Technique Bypasses Security on iOS and Android to Steal Bank Credentials
SECURITYWEEK.COM — 21 Aug 2024
🕵️
Russia tells citizens to switch off home surveillance because the Ukrainians are coming
THEREGISTER.COM — 21 Aug 2024
🕵️
Cybersecurity in 2024: Reflecting on the Past, Preparing for the Future
KNOWBE4.COM — 21 Aug 2024
🕵️
How to Account for Disinformation Risks in Election Security
DATABREACHTODAY.CO.UK — 2024-08-21
🕵️
Slack AI can leak private data via prompt injection
THEREGISTER.COM — 21 Aug 2024
🕵️
US Political Campaigns Targeted by Iranian Spear Phishing Attacks
KNOWBE4.COM — 21 Aug 2024
🕵️
Hackers steal banking creds from iOS, Android users via PWA apps
BLEEPINGCOMPUTER.COM — 21 Aug 2024
🕵️
Novel technique allows malicious apps to escape iOS and Android guardrails
ARSTECHNICA.COM — 21 Aug 2024
🕵️
Researchers Thrust a Virtual Stick Into the Bike Spokes
DATABREACHTODAY.CO.UK — 2024-08-21
🕵️
How Cybercrime Fuels Human Trafficking and Gambling Scams
DATABREACHTODAY.CO.UK — 2024-08-21
🕵️
CrowdStrike denies merger talks with Action1
CSOONLINE.COM — 21 Aug 2024
🕵️
Microsoft again ranked number one in modern endpoint security market share
MICROSOFT.COM — 21 Aug 2024
🕵️
Auswirkungen auf IT-Fachkräfte: 10 Anzeichen für einen schlechten CSO
CSOONLINE.COM — 21 Aug 2024
🌐
CERT-UA Warns of New Vermin-Linked Phishing Attacks with PoW Bait
THEHACKERNEWS.COM — 21 Aug 2024
🌐
TA453 Targets Religious Figure with Fake Podcast Invite Delivering New BlackSmith Malware Toolset
PROOFPOINT.COM — 21 Aug 2024
🎙️
The AI Fix #12: AI made from human brain cells, and is there life after death?
GRAHAMCLULEY.COM — 21 Aug 2024
📡
Detecting AWS Account Compromise: Key Indicators in CloudTrail Logs for Stolen API Keys
THEHACKERNEWS.COM — 21 Aug 2024
📡
Czech Mobile Users Targeted in New Banking Credential Theft Scheme
THEHACKERNEWS.COM — 21 Aug 2024
📡
Unmasking Styx Stealer: How a Hacker's Slip Led to an Intelligence Treasure Trove
RESEARCH.CHECKPOINT.COM — 21 Aug 2024
📡
It's Time To Untangle the SaaS Ball of Yarn
THEHACKERNEWS.COM — 21 Aug 2024
📡
Deadbeat Dad Faked His Own Death By Hacking Government Databases
PACKETSTORMSECURITY.COM — 21 Aug 2024
📡
FlightAware Admits Passwords, SSNs Exposed For Years
PACKETSTORMSECURITY.COM — 21 Aug 2024
📡
Microsoft Copilot Studio Vuln Led To Information Disclosure
PACKETSTORMSECURITY.COM — 21 Aug 2024
📡
Sophos UK Volunteers Transform Outdoor Learning Space for Autistic Youth
SOPHOS.COM — 21 Aug 2024
📡
Perspectives and Trends on Transforming in the World of SASE
DATABREACHTODAY.CO.UK — 2024-08-21
📡
Ubuntu Addresses Multiple OpenJDK 8 Vulnerabilities
TUXCARE.COM — 21 Aug 2024
📡
Typing these four characters could crash your iPhone
TECHCRUNCH.COM — 21 Aug 2024
📡
Microsoft to rollout Windows Recall to Insiders in October
BLEEPINGCOMPUTER.COM — 21 Aug 2024
📡
Microsoft to roll out Windows Recall to Insiders in October
BLEEPINGCOMPUTER.COM — 21 Aug 2024
📡
Man sentenced for hacking state registry to fake his own death
BLEEPINGCOMPUTER.COM — 21 Aug 2024