⚠️ VULNERABILITY DISCLOSURE 5[−]
26 OctCERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian EntitiesThe Computer Emergency Response Team of Ukraine (CERT-UA) has detailed a new malicious email campaign targeting government agencies, enterprises, and military entities. "The messages exploit the appeal of integrating popular services like Amazon or Microsoft and implementing a ze…THEHACKERNEWS.COM
26 OctOver 70 zero-day flaws get hackers $1 million at Pwn2Own IrelandThe fourth day of Pwn2Own Ireland 2024 marked the end of the hacking competition with more than $1 million in prizes for over 70 unique zero-day vulnerabilities in fully patched devices. [...]BLEEPINGCOMPUTER.COM
26 OctNew Windows Driver Signature bypass allows kernel rootkit installsAttackers can downgrade Windows kernel components to bypass security features such as Driver Signature Enforcement and deploy rootkits on fully patched systems. [...]BLEEPINGCOMPUTER.COM
26 OctNew Cisco ASA and FTD features block VPN brute-force password attacksCisco has added new security features that significantly mitigate brute-force and password spray attacks on Cisco ASA and Firepower Threat Defense (FTD), helping protect the network from breaches and reducing resource utilization on devices. [...]BLEEPINGCOMPUTER.COM
26 OctWeekly Update 423Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device. Firstly, my apologies for the minute and a bit of echo at the start of this video, OBS had somehow magically decided to start recording both the primary mic and the o…TROYHUNT.COM
📢 SECURITY ADVISORIES 1[−]
26 OctCyber Security Research from CDW: Interview with Ivo Wiens, Field CTO Cybersecurity: Cyber Security Today Weekend for October 26, 2024Mastering Cybersecurity: From AI Threats to Quantum Encryption - Insights with CDW Join host Jim Love in a riveting discussion with Ivo Wiens, Field CTO for CDW Canada, as they review CDW's cyber security research and discussions with CISO's about the state of cyber security in C…CYBERSECURITYTODAY.LIBSYN.COM
🔥 INCIDENT REPORTING 4[−]
26 OctThe Club Penguin Experience - 6,342 breached accountsIn October 2024, The Club Penguin Experience (TCPE) suffered a data breach . The incident exposed over 6k subscribers' email addresses alongside usernames, age groups, passwords stored as bcrypt hashes and in some cases, plain text password hints. TCPE sent prompt disclosure noti…HAVEIBEENPWNED.COM
26 OctNotorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto MiningThe infamous cryptojacking group known as TeamTNT appears to be readying for a new large-scale campaign targeting cloud-native environments for mining cryptocurrencies and renting out breached servers to third-parties. "The group is currently targeting exposed Docker daemons to d…THEHACKERNEWS.COM
26 OctFour REvil Ransomware Members Sentenced in Rare Russian Cybercrime ConvictionsFour members of the now-defunct REvil ransomware operation have been sentenced to several years in prison in Russia, marking one of the rare instances where cybercriminals from the country have been convicted of hacking and money laundering charges. Russian news publication Komme…THEHACKERNEWS.COM
26 OctPassword Failures Are Still Happening in 2024?Still using weak passwords in 2024? 🤯 Hackers are waiting for you to slip up! With companies scrambling to patch security flaws only after attacks happen, it’s time to take control. From ransomware nightmares to missing out on MFA (multi-factor authentication), simple mistakes ar…YOUTUBE.COM
🕵️ THREAT INTELLIGENCE 1[−]
26 OctHacker attack causes log-in problems for Swiss mediasubmitted by vovo to cybersecurity 2 points | 0 comments https://www.bluewin.ch/en/news/hacker-attack-causes-log-in-problems-for-swiss-media-2420128.htmlSH.ITJUST.WORKS