🚨 CISA KEV 1[−]
11 Sep KEVCISA adds SonicWall SonicOS, ImageMagick, and Linux Kernel Bugs to its Known Exploited Vulnerabilities catalog. The ImageMagick vulnerability (CVE-2016-3714) could allow remote code execution through crafted images. Linux Kernel flaw (CVE-2017-1000253) enables privilege escalation for unpatched systems.SECURITYAFFAIRS.COM
🐛 COMMON VULNERABILITIES AND EXPOSURES 7[−]
11 SepIvanti Releases Urgent Security Updates for Endpoint Manager VulnerabilitiesIvanti has released software updates to address multiple security flaws impacting Endpoint Manager (EPM), including 10 critical vulnerabilities that could result in remote code execution. A brief description of the issues is as follows - CVE-2024-29847 (CVSS score: 10.0) - A dese…THEHACKERNEWS.COM
11 SepFreeBSD Issues Urgent Security Advisory for CVE-2024-43102 (CVSS 10)FreeBSD has issued an urgent security advisory for CVE-2024-43102, a critical vulnerability with a CVSS score of 10. This flaw in the _umtx_op system call can lead to a kernel panic or code execution, jeopardizing system security.SECURITYONLINE.INFO
11 SepMicrosoft warns of bug reversing updates on old Windows 10, patches critical flawsIn a busy Patch Tuesday update, Microsoft addressed over 70 security vulnerabilities across various products, including Windows, Office, and Azure. However, the company also acknowledged a critical bug in a Windows 10 version could silently undo previously applied security patche…CSOONLINE.COM
11 SepCritical Command Injection Flaw in Zyxel NAS Devices, Hotfixes Released for End-of-Support ProductsZyxel has released critical hotfixes for its end-of-support NAS devices, NAS326 and NAS542, to address a severe command injection vulnerability (CVE-2024-6342) with a CVSS score of 9. 8.SECURITYONLINE.INFO
11 SepSiemens Industrial Edge Management Vulnerable to Authorization Bypass AttacksSiemens ProductCERT has disclosed a critical vulnerability in its Industrial Edge Management systems. The vulnerability, identified as CVE-2024-45032, poses a significant risk by allowing unauthenticated remote attackers to impersonate other devices within the system. This flaw h…GBHACKERS.COM
11 SepSiemens Issues Critical Security Advisory for User Management Component (UMC)Siemens has issued a critical security advisory for its User Management Component (UMC), revealing a heap-based buffer overflow vulnerability (CVE-2024-33698) with a 9. 3 CVSS score.SECURITYONLINE.INFO
11 SepResearchers Hacked Car EV Chargers To Execute Arbitrary CodeResearchers discovered flaws in the Autel MaxiCharger EV charger that make it potential to execute arbitrary code on the device by just placing it within Bluetooth range. The vulnerabilities tracked as CVE-2024-23958, CVE-2024-23959, and CVE-2024-23967 were identified during Pwn2…GBHACKERS.COM
⚠️ VULNERABILITY DISCLOSURE 23[−]
11 SepBug Left Some Windows PCs Dangerously Unpatched – Krebs on Securitysubmitted by IllNess to securitynews 1 points | 0 comments https://krebsonsecurity.com/2024/09/bug-left-some-windows-pcs-dangerously-unpatched/INFOSEC.PUB
11 SepOpus Security Elevates Vulnerability Management With its AI-Powered Multi-Layered Prioritization EngineOpus’ innovative engine integrates AI-driven intelligence, contextual data and automated decision-making to drive precise, efficient vulnerability remediation. Opus Security, the leader in unified cloud-native remediation, today announced the launch of its Advanced Multi-La…GBHACKERS.COM
11 SepImmediate threats or long-term security? Deciding where to focus is the modern CISO’s dilemmaCybersecurity has become a high-stakes balancing act — the modern CISO is under constant pressure to protect their organization from the latest threats, including ransomware and phishing, while also developing long-term security strategies and reporting to the C-suite and board. …CSOONLINE.COM
11 Sep12 dark web monitoring toolsWhat is dark web monitoring? Dark web monitoring is a service often offered by cybersecurity vendors that scans the dark web for information pertaining to an organization. These software scan and search dark web websites and forums checking for your organization’s information aga…CSOONLINE.COM
11 Sep KEVMicrosoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows FlawsMicrosoft on Tuesday disclosed that three new security flaws impacting the Windows platform have come under active exploitation as part of its Patch Tuesday update for September 2024. The monthly security release addresses a total of 79 vulnerabilities, of which seven are rated C…THEHACKERNEWS.COM
11 SepData Breach at Golf Course Management Firm KemperSports Impacts 62,000Golf course management company KemperSports has disclosed a cyberattack and data breach impacting over 62,000 individuals. The post Data Breach at Golf Course Management Firm KemperSports Impacts 62,000 appeared first on SecurityWeek .SECURITYWEEK.COM
11 SepWindows Elevation of Privilege Flaw Exploited by QakBot Malware, PoC PublishedThe flaw, rated 7. 8 on the CVSS scale, involves a heap-based buffer overflow in the Desktop Window Manager core library, allowing attackers to execute arbitrary code with SYSTEM privileges.SECURITYONLINE.INFO
11 SepEvaluating the Effectiveness of Reward Modeling of Generative AI SystemsNew research evaluating the effectiveness of reward modeling during Reinforcement Learning from Human Feedback (RLHF): “ SEAL: Systematic Error Analysis for Value ALignment .” The paper introduces quantitative metrics for evaluating the effectiveness of modeling and a…SCHNEIER.COM
11 SepMicrosoft Discloses 4 Zero-Days in September Updatesubmitted by kid to cybersecurity 1 points | 0 comments https://www.darkreading.com/application-security/microsoft-discloses-4-zero-days-in-september-updateDARKREADING.COM
11 SepOpenZiti: Secure, Open-Source Networking for Your ApplicationsOpenZiti is an open-source networking project that embeds zero-trust principles directly into applications, offering features like strong identity, mTLS, E2EE, private DNS, and smart routing.HELPNETSECURITY.COM
11 SepSingapore Police Arrest Six Hackers Linked to Global Cybercrime SyndicateThe Singapore Police Force (SPF) has announced the arrest of five Chinese nationals and one Singaporean man for their alleged involvement in illicit cyber activities in the country. The development comes after a group of about 160 law enforcement officials conducted a series of r…THEHACKERNEWS.COM
11 SepForget the Talent Gap – It’s an Experience GapSouth Africa’s cybersecurity workforce shortage mirrors global trends, but also faces local factors like underinvestment in basic education, underserved communities, digital literacy gaps and challenges with data access.KNOWBE4.COM
11 SepCriminal IP and IPLocation.io Join Forces for Enhanced IP AnalysisAI SPERA announced today that its IP address intelligence engine, Criminal IP, has integrated with IPLocation.io. Learn more from Criminal IP about how this brings additional insights to Criminal IP's threat intelligence database. [...]BLEEPINGCOMPUTER.COM
11 SepThreat Actors Exploiting Legitimate Software For Stealthy Cyber AttacksCAMO, or Commercial Applications, Malicious Operations, highlights attackers’ increasing reliance on legitimate IT tools to bypass security defenses, which can be used for various malicious activities like ransomware distribution, network scanning, lateral movement, and C2 …GBHACKERS.COM
11 SepMicrosoft Says Windows Update Zero-Day Being Exploited To Undo Security FixesPACKETSTORMSECURITY.COM
11 SepAdobe fixes Acrobat Reader zero-day with public PoC exploitA cybersecurity researcher is urging users to upgrade Adobe Acrobat Reader after a fix was released yesterday for a remote code execution zero-day with a public in-the-wild proof-of-concept exploit. [...]BLEEPINGCOMPUTER.COM
11 SepBashing Windows Bugs, Take 2: Microsoft Restores Nixed FixesA Confused Update Process Reinstalled Old, Exploitable Windows 10 Components Microsoft has issued a slew of software updates to patch numerous flaws, including three zero-day vulnerabilities that are already being exploited via in-the-wild attacks. Another fix addresses a prior u…DATABREACHTODAY.CO.UK
11 SepTech Stack Uniformity has Become a Systemic VulnerabilityBy recognizing the importance of diversity in technology stacks and incorporating it into security protocols and incident response plans, companies can proactively protect their infrastructure and reduce the likelihood of catastrophic events.HELPNETSECURITY.COM
11 SepGeopolitical Tensions Fuel Growth in Cross-Border FraudACAMS' Shilpa Arora on Global Financial Vulnerabilities and Regulatory Challenges Geopolitical tensions have heightened cross-border fraud, with criminals exploiting technological advances and regulatory gaps between countries. Shilpa Arora, head of anti-financial crime products …DATABREACHTODAY.CO.UK
11 SepLegal Firms Increasingly Targeted by Phishing Attacks, RansomwareResearchers at Bitdefender warn that law firms are high-value targets for ransomware gangs and other criminal threat actors. Attackers frequently use phishing to gain initial access to an organization’s networks.KNOWBE4.COM
11 SepTLS security subverted due to CA use of outdated WHOIS serversWHOIS clients across the internet, including those used by email servers and Certificate Authorities (CAs), are relying on outdated records for WHOIS servers, potentially allowing attackers to hijack old WHOIS server domains and impersonate domain owners, security researchers hav…CSOONLINE.COM
11 SepNoName Apparently Allies With RansomHub OperationNoName Specializes in Long-Tail Exploits Up-and-coming online criminal extortion group RansomHub appears to have a new affiliate - NoName, a midtier actor whose main claim to fame so far has been impersonating the LockBit ransomware-as-a-service operation. NoName is known for exp…DATABREACHTODAY.CO.UK
11 SepElection Experts Still Demanding More Federal Cyber SupportState Officials, Security Experts Warn of Increased Cyberthreats Ahead of Vote Election security experts told Information Security Media Group the United States continues to lack adequate federal funding and resources to support state and local election information technology sec…DATABREACHTODAY.CO.UK
📋 SECURITY BULLETINS 3[−]
11 SepAdobe Security Update, Multiple Vulnerabilities PatchedAdobe has issued a crucial security update for its Acrobat and Reader software on Windows and macOS platforms. This update, identified as APSB24-70, addresses multiple vulnerabilities that could allow attackers to execute arbitrary code on affected systems. The update was publish…GBHACKERS.COM
11 SepChrome 128 Update Resolves High-Severity VulnerabilitiesGoogle has released a Chrome 128 security update to resolve high-severity memory safety vulnerabilities. The post Chrome 128 Update Resolves High-Severity Vulnerabilities appeared first on SecurityWeek .SECURITYWEEK.COM
11 SepICS Patch Tuesday: Advisories Published by Siemens, Schneider, ABB, CISATwo dozen ICS Patch Tuesday advisories have been published by Siemens, Schneider Electric, CISA and ABB. The post ICS Patch Tuesday: Advisories Published by Siemens, Schneider, ABB, CISA appeared first on SecurityWeek .SECURITYWEEK.COM
📢 SECURITY ADVISORIES 8[−]
11 SepNew RansomHub Attack Killing Kaspersky’s TDSSKiller To Disable EDRRansomHub has recently employed a novel attack method utilizing TDSSKiller and LaZagne, where TDSSKiller, traditionally used to disable EDR systems, was deployed to compromise network defenses. Subsequently, LaZagne was used to harvest credentials from compromised systems, which …GBHACKERS.COM
11 SepLive Webinar | From Compliance to Culture: Leveraging ISO 27001 and Global Standards for Security ExcellenceDATABREACHTODAY.CO.UK
11 SepCompliance and Risk Management Startup Datricks Raises $15 MillionThe Tel Aviv company attracts $15 million in a Series A investment to build an AI-powered compliance and risk management platform. The post Compliance and Risk Management Startup Datricks Raises $15 Million appeared first on SecurityWeek .SECURITYWEEK.COM
🔥 INCIDENT REPORTING 7[−]
11 Sep1.7 million credit card records leaked by payment gateway. Cyber Security Today for Wednesday, September 11, 2024Cybersecurity Today: Microsoft Office 2024, Data Breach, CrowdStrike Fallout, & Ford's Privacy Concerns In this episode of Cybersecurity Today with your host Jim Love, we discuss Microsoft's decision to disable ActiveX controls by default in Office 2024 to enhance security, the d…CYBERSECURITYTODAY.LIBSYN.COM
11 SepCosmicBeetle Upgrades Arsenal with New ScRansom Ransomware to Target SMBsCosmicBeetle has unleashed a new ransomware called ScRansom, targeting SMBs in Europe, Asia, Africa, and South America, possibly working with RansomHub. The threat actor swapped its Scarab ransomware for ScRansom, showing ongoing enhancements.WELIVESECURITY.COM
11 SepDHS Cyber Review Board Will Announce Next Investigation ‘Soon’The DHS Cyber Safety Review Board, led by Homeland Security officials, is preparing to announce its next investigation soon, as hinted by DHS undersecretary Rob Silvers. Silvers mentioned criteria for incident review but did not reveal details.THERECORD.MEDIA
11 SepPIXHELL Attack Allows Air-Gap Jumping via Noise From ScreensNoise generated by the pixels on a screen can be leveraged to exfiltrate data from air-gapped computers in what is called a PIXHELL attack. The post PIXHELL Attack Allows Air-Gap Jumping via Noise From Screens appeared first on SecurityWeek .SECURITYWEEK.COM
11 SepDDoS Attacks Double With Governments Most TargetedDDoS attacks have doubled, with governments being the most targeted sector, according to StormWall's report. The number of DDoS incidents globally increased by 102% in the first half of 2024 compared to the same period in 2023.INFOSECURITY-MAGAZINE.COM
11 SepGoogle Introduces ‘Air-Gapped’ Backup Vault to Thwart Ransomware“It’s critical to not only back up your critical workloads, but also to secure those backups against subsequent modification and deletion." The post Google Introduces ‘Air-Gapped’ Backup Vault to Thwart Ransomware appeared first on SecurityWeek .SECURITYWEEK.COM
🕵️ THREAT INTELLIGENCE 22[−]
11 SepISC Stormcast For Wednesday, September 11th, 2024 https://isc.sans.edu/podcastdetail/9134, (Wed, Sep 11th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
11 SepGerman Cyber Agency Investigating APT28 Phishing CampaignThe German cyber agency is investigating a phishing campaign linked to Russian state hackers APT28, who mimicked a well-known think tank's website. The hackers created a fake domain resembling the Kiel Institute for the World Economy.BANKINFOSECURITY.COM
11 SepPython Libraries Used for Malicious Purposes, (Wed, Sep 11th)Since I'm interested in malicious Python scripts, I found multiple samples that rely on existing libraries. The most-known repository is probably pypi.org[ 1 ] that reports, as of today, 567,478 projects! Malware developers are like regular developers: They don…ISC.SANS.EDU
11 SepNew Android Spyware As TV Streaming App Steals Sensitive Data From DevicesRecent research has revealed a new Android malware targeting mnemonic keys, a crucial component for cryptocurrency wallet recovery. Disguised as legitimate apps, this malware scans devices for images containing mnemonic phrases. Once installed, it covertly steals personal data li…GBHACKERS.COM
11 SepHacker pleads guilty after arriving on plane from Ukraine with a laptop crammed full of stolen credit card detailsA man from New York City has admitted to computer hacking and associated crimes after being caught with a laptop containing hundreds of thousands of stolen payment card details. Read more in my article on the Hot for Security blog.BITDEFENDER.COM
11 SepDevelopers Beware: Lazarus Group Uses Fake Coding Tests to Spread MalwareCybersecurity researchers have uncovered a new set of malicious Python packages that target software developers under the guise of coding assessments. "The new samples were tracked to GitHub projects that have been linked to previous, targeted attacks in which developers are lure…THEHACKERNEWS.COM
11 SepMicrosoft Adds Support for Post-Quantum Algorithms in SymCrypt LibraryMicrosoft has started introducing support for post-quantum algorithms in SymCrypt, its main cryptographic library. The post Microsoft Adds Support for Post-Quantum Algorithms in SymCrypt Library appeared first on SecurityWeek .SECURITYWEEK.COM
11 SepIvanti Patches Critical Vulnerabilities in Endpoint ManagerIvanti has released patches for multiple vulnerabilities in Endpoint Manager, Cloud Service Appliance, and Workspace Control. The post Ivanti Patches Critical Vulnerabilities in Endpoint Manager appeared first on SecurityWeek .SECURITYWEEK.COM
11 SepDockerSpy: Search for images on Docker Hub, extract sensitive information - Help Net Securitysubmitted by kid to cybersecurity 1 points | 0 comments https://www.helpnetsecurity.com/2024/09/11/dockerspy-extract-sensitive-information-docker-hub-images/HELPNETSECURITY.COM
11 SepRogue WHOIS server gives researcher superpowers no one should ever havesubmitted by kid to cybersecurity 1 points | 0 comments https://arstechnica.com/security/2024/09/rogue-whois-server-gives-researcher-superpowers-no-one-should-ever-have/ARSTECHNICA.COM
11 SepQuad7 botnet evolves to more stealthy tactics to evade detectionsubmitted by kid to cybersecurity 3 points | 0 comments https://securityaffairs.com/168250/malware/quad7-botnet-evolves.htmlSECURITYAFFAIRS.COM
11 SepColorTokens Strengthens Zero Trust With PureID AcquisitionPureID Passwordless Authentication Tool Will Boost ColorTokens Microsegmentation ColorTokens purchased PureID, expanding its zero trust framework with identity-based segmentation for cloud and hybrid environments. The acquisition focuses on securing cloud applications, microservi…DATABREACHTODAY.CO.UK
11 SepChinese ‘Crimson Palace’ Espionage Campaign Keeps Hacking Southeast Asian GovernmentsA sophisticated trio of Chinese cyberespionage groups known as Cluster Alpha, Cluster Bravo, and Cluster Charlie are behind the Crimson Palace espionage campaign targeting government organizations in Southeast Asia.THERECORD.MEDIA
11 SepLosses From Investment Scams have Increased Six-Fold Since 2021The Better Business Bureau (BBB) has observed a six-fold increase in losses from investment scams over the past three years. The BBB has received more than 4,000 reports of investment scams since 2020, with the median reported loss rising from $1,000 in 2021 to almost $6,000 in 2…KNOWBE4.COM
11 SepChinese hackers linked to cybercrime syndicate arrested in SingaporeSix Chinese nationals and a Singaporean have been arrested on Monday in Singapore for their alleged role in malicious cyber activities committed in connection with a "global syndicate." [...]BLEEPINGCOMPUTER.COM
11 SepIntel Informs Customers About Over a Dozen Processor VulnerabilitiesIntel on Tuesday published advisories covering more than 20 vulnerabilities affecting processors and other products. The post Intel Informs Customers About Over a Dozen Processor Vulnerabilities appeared first on SecurityWeek .SECURITYWEEK.COM
11 SepBeyond Immature Rhetoric: The Case Against Mockery and Ambulance Chasing in the Security IndustryFive reasons why “Ambulance Chasing” and mocking harm the security profession and are never a good idea. The post Beyond Immature Rhetoric: The Case Against Mockery and Ambulance Chasing in the Security Industry appeared first on SecurityWeek .SECURITYWEEK.COM
11 SepSplxAI Raises $2 Million to Protect AI Chatbot AppsSplxAI has raised $2 million in pre-seed funding to help organizations identify vulnerabilities in AI chat applications. The post SplxAI Raises $2 Million to Protect AI Chatbot Apps appeared first on SecurityWeek .SECURITYWEEK.COM
11 SepMental Health Records Database Found Exposed on WebCyber Researcher Reported Findings to Virtual Care Provider; Data Now Secured An AI-powered virtual care provider's unsecured database allegedly exposed thousands of sensitive mental health and substance abuse treatment records between patients and their counselors on the interne…DATABREACHTODAY.CO.UK
11 SepFrench Cyber Agency Warns of APT28 Hacks Against Think TanksReport: North Korean, Russian, Chinese, Iranian Actors Are Targeting Research Orgs Russian state hackers are targeting think tanks studying strategic interests and the defense sector, warned the French cyber agency. A hacking group that officially is Unit 26165 of the Russian Mai…DATABREACHTODAY.CO.UK
11 SepFake password manager coding test used to hack Python developersMembers of the North Korean hacker group Lazarus posing as recruiters are baiting Python developers with coding test project for password management products that include malware. [...]BLEEPINGCOMPUTER.COM
🌐 CYBER THREAT LANDSCAPE 4[−]
11 SepEarth Preta Upgrades Attack Strategy via Removable DrivesThe HIUPAN worm allows Earth Preta to propagate malware into networks via removable drives, maintaining persistence by modifying registry values and creating autorun entries.THECYBEREXPRESS.COM
11 SepQuad7 Botnet Targets More SOHO and VPN Routers, Media ServersQuad7 botnet is expanding its reach by targeting additional SOHO devices with custom malware for Zyxel VPN appliances, Ruckus wireless routers, and Axentra media servers, in addition to previously reported TP-Link and ASUS routers.BLEEPINGCOMPUTER.COM
11 SepQuad7 Botnet Expands to Target SOHO Routers and VPN AppliancesThe operators of the mysterious Quad7 botnet are actively evolving by compromising several brands of SOHO routers and VPN appliances by leveraging a combination of both known and unknown security flaws. Targets include devices from TP-LINK, Zyxel, Asus, Axentra, D-Link, and NETGE…THEHACKERNEWS.COM
11 Sep6 common Geek Squad scams and how to defend against themLearn about the main tactics used by scammers impersonating Best Buy’s tech support arm and how to avoid falling for their tricksWELIVESECURITY.COM
📡 INFOSEC NEWS 17[−]
11 SepExperts Demonstrate How to Bypass WhatsApp View Once FeatureThis flaw affects the browser-based web app, enabling recipients to save pictures and videos that should disappear after being viewed. While the app prohibits users from taking screenshots, this bug circumvents that protection.SECURITYAFFAIRS.COM
11 SepGallup Poll Bugs Open Door to XSS AttacksCheckmarx researchers discovered two XSS vulnerabilities on Gallup's polling site, which could allow attackers to access sensitive data, execute arbitrary code, or take over accounts.DARKREADING.COM
11 SepUK: National Crime Agency, Responsible for Fighting Cybercrime, ‘On Its Knees,’ Warns ReportThe agency is losing nearly a fifth of its cyber capacity annually due to a broken pay system, leading to increased costs with temporary labor and consultants making up over 10% of its budget.THERECORD.MEDIA
11 SepReputation Hijacking With JamPlus: A Maneuver To Bypass Smart App Control (SAC)The initial infection involves downloading a malicious package containing a legit CapCut app, JamPlus utility, and a malicious script. The script triggers the download and execution of the final payload from a remote server.CYBLE.COM
11 SepFBI Report Says Cryptocurrency Scams Surged in 2023According to an FBI report, cryptocurrency scams surged in 2023, leading to victims reporting $5. 6 billion in financial losses associated with crypto schemes, a 45% increase from the previous year.BANKINFOSECURITY.COM
11 SepWhy Is It So Challenging to Go Passwordless?Imagine a world where you never have to remember another password. Seems like a dream come true for both end users and IT teams, right? But as the old saying goes, "If it sounds too good to be true, it probably is." If your organization is like many, you may be contemplatin…THEHACKERNEWS.COM
11 SepAI Cybersecurity Needs to be as Multi-Layered as the System it’s ProtectingLLMs can be manipulated to generate harmful outputs through malicious prompts, posing risks to enterprises. To counter these attacks, companies must focus on the design, development, deployment, and operation of their AI systems.HELPNETSECURITY.COM
11 SepProposed Underwater Datacenter Surprises Regulators Who Hadn't Heard About ItPACKETSTORMSECURITY.COM
11 SepSecurity Budgets Continue Modest Growth, but Staff Hiring Slows Considerably, Research FindsSecurity budgets are seeing modest growth in 2024, with an 8% increase compared to a 6% growth in 2023. However, hiring of security staff has significantly slowed down, according to a report by IANS Research and Artico Search.CYBERSECURITYDIVE.COM
11 SepDragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and EuropeA "simplified Chinese-speaking actor" has been linked to a new campaign that has targeted multiple countries in Asia and Europe with the end goal of performing search engine optimization (SEO) rank manipulation. The black hat SEO cluster has been codenamed DragonRank by Cisco Tal…THEHACKERNEWS.COM
11 SepDoJ Distributes $18.5 Million to Western Union Fraud VictimsThe U.S. Department of Justice has distributed $18. 5m to about 3000 victims of fraud facilitated by Western Union. This is part of the second phase of the Western Union Remission program, which aims to fully compensate victims.INFOSECURITY-MAGAZINE.COM
11 SepWordPress.org to require 2FA for plugin developers by OctoberStarting October 1st, WordPress.org accounts that can push updates and changes to plugins and themes will be required to activate two-factor authentication (2FA) on their accounts. [...]BLEEPINGCOMPUTER.COM
11 SepAlert notification as phishing bait | Kaspersky official blogAttackers mimic Office 365 security alert notifications to lure victims to a phishing site.KASPERSKY.COM
11 SepUK’s ICO and NCA Sign Memorandum to Boost Reporting and ResilienceThe UK’s data protection watchdog and serious and organized crime agency have signed a memorandum of understanding (MoU) designed to enhance cooperation and reaffirm their commitment to helping victim organizations.INFOSECURITY-MAGAZINE.COM
11 SepWhy Hellman & Friedman Wants to Unload Checkmarx for $2.5BMore Competition, Ownership Turnover Among Peers Create an Appealing Time to Sell Hellman & Friedman has met with several investments banks in recent weeks and will choose one to run the sale process for Paramus, New Jersey-based Checkmarx, in which it hopes to get at least $2.5 …DATABREACHTODAY.CO.UK