Security Affairs

MARCH 26, 2024

The Finnish Police attributed the attack against the parliament that occurred in March 2021 to the China-linked group APT31. The Finnish Police attributed the March 2021 attack on the parliament to the China-linked group APT31. According to the police, the offences were committed between autumn 2020 and early 2021.

Hacking 94

Hacking Government Technology Information Security 94

CyberSecurity Insiders

FEBRUARY 28, 2021

Tinder, the most popular dating app among millennials has achieved for the first time a certification in Information Security Management System that endorses that the user data on the company servers remains well protected from all kinds of cyber threats.

Information Security 95

Information Security Data privacy Scams Cyber threats 95

Daniel Miessler

SEPTEMBER 12, 2021

This post will talk about my initial thoughts on The OWASP Top 10 release for 2021. Let me start by saying that I have respect for the people working on this project, and that as a project maintainer myself, I know how impossibly hard this is.

Software 364

Software Information Security 364

Security Boulevard

FEBRUARY 20, 2021

Additionally, the BSidesSF 2021 Conference will take place on March 6 - 9, 2021 - with no cost to participate. The post BSidesSF 2020 – Sourya Biswas’ ‘How The Coasts Approach Information Security Differently’ appeared first on Security Boulevard.

Information Security 74

Information Security Education 74

SecureList

DECEMBER 13, 2021

CVE-2021-44228 summary. Last week information security media reported the discovery of the critical vulnerability CVE-2021-44228 in the Apache Log4j library (CVSS severity level 10 out of 10). Kaspersky is aware of PoCs in the public domain and of the possible exploitation of CVE-2021-44228 by cybercriminals.

DNS 131

DNS Media Information Security Software 131

Heimadal Security

DECEMBER 22, 2021

Security experts, researchers, and cyber enthusiasts abound on Twitter, eager to share their ideas, news, and research on information security, industry best practices, and the most recent dangers. The post The Best Twitter Cybersecurity Accounts You Should Follow [Updated 2021] appeared first on Heimdal Security Blog.

Accountability 119

Accountability Cybersecurity Information Security 119

Security Affairs

APRIL 28, 2022

Cybersecurity and Infrastructure Security Agency (CISA) published a list of 2021’s top 15 most exploited software vulnerabilities. Cybersecurity and Infrastructure Security Agency (CISA) published the list of 2021’s top 15 most exploited software vulnerabilities. ” reads the advisory published by CISA.

Software 143

Software VPN Cybersecurity Internet 143

Security Boulevard

FEBRUARY 25, 2021

The good news is, business leadership is now paying more attention to information security. The bad news is, enterprise security teams have a lot of work ahead. The post Security Budgets to See 2021 Increases, Survey Finds appeared first on Security Boulevard.

Information Security 113

Information Security CISO Security Awareness Cybersecurity 113

Security Affairs

JANUARY 19, 2024

China-linked group UNC3886 has been exploiting vCenter Server zero-day vulnerability CVE-2023-34048 since at least late 2021. Mandiant researchers reported that China-linked APT group UNC3886 has been exploiting vCenter Server zero-day vulnerability CVE-2023-34048 since at least late 2021. ” concludes the report.

Firewall 104

Firewall Accountability Malware Authentication 104

Security Boulevard

JANUARY 8, 2022

Our thanks to BSides Berlin for publishing their tremendous videos from the BSides Berlin 2021 Conference on the organization’s’ YouTube channel. The post BSides Berlin 2021 – Keynote: Fabian Fäßler (LiveOverflow) ‘Controversial Security’ appeared first on Security Boulevard.

Education 130

Education InfoSec Information Security Cybersecurity 130

Security Affairs

JANUARY 3, 2022

Which are the cyber attacks of 2021 that had the major impact on organizations worldwide in terms of financial losses and disruption of the operations? The US Cybersecurity and Infrastructure Security Agency (CISA) also issued the Emergency Directive 21-02 in response to the disclosure of zero-day vulnerabilities in Microsoft Exchange.

Cyber Attacks 103

Cyber Attacks Ransomware Insurance Hacking 103

Security Affairs

JULY 30, 2021

Researcher published an exploit code for a high-severity privilege escalation flaw (CVE-2021-3490) in Linux kernel eBPF on Ubuntu machines. I do root cause analysis and exploit CVE-2021-3490 for LPE with PoC included. link] — chompie (@chompie1337) July 29, 2021. Here's the LPE PoC exploit for CVE-2021-3490.

Hacking 138

Hacking Technology Information Security Cybersecurity 138

Security Boulevard

JANUARY 14, 2022

Our thanks to Security BSides London for publishing their tremendous videos from the Security BSides London 2021 Conference on the organization’s YouTube channel. The post Security BSides London 2021 -James Gibbins’ ‘MITRE D3FEND’ appeared first on Security Boulevard.

Education 132

Education InfoSec Information Security Cybersecurity 132

CyberSecurity Insiders

MARCH 9, 2021

Cybersecurity Insiders and the Information Security Community on LinkedIn today announced the winners of the 2021 Cybersecurity Excellence Awards. The 2021 Cybersecurity Excellence Awards honor individuals and companies that demonstrate excellence, innovation and leadership in information security.

Cybersecurity 87

Cybersecurity Information Security 87

Security Affairs

NOVEMBER 29, 2021

Threat actors are exploiting the recently patched CVE-2021-40438 flaw in Apache HTTP servers, warns German Cybersecurity Agency and Cisco. Threat actors are exploiting a recently addressed server-side request forgery (SSRF) vulnerability, tracked as CVE-2021-40438, in Apache HTTP servers. SecurityAffairs – hacking, CVE-2021-40438).

Information Security 128

Information Security Hacking Cybersecurity 128

Security Affairs

OCTOBER 11, 2022

VMware has yet to address the CVE-2021-22048 privilege escalation vulnerability in vCenter Server disclosed in November 2021. VMware warns customers that it has yet to address a high-severity privilege escalation vulnerability, tracked as CVE-2021-22048 , in the vCenter Server. Please review KB89027 for more information.”

Authentication 121

Authentication Hacking Information Security 121

Security Affairs

NOVEMBER 28, 2021

0patch released free unofficial patches for Windows local privilege escalation zero-day ( CVE-2021-24084 ) in Windows 10, version 1809 and later. 0patch released free unofficial patches for Windows local privilege escalation zero-day (CVE-2021-24084) in Windows 10, version 1809 and later. Pierluigi Paganini.

Accountability 126

Accountability Mobile Hacking Information Security 126

Security Affairs

AUGUST 7, 2021

Threat actors are actively exploiting a critical authentication bypass issue (CVE-2021-20090 ) affecting home routers with Arcadyan firmware. Threat actors actively exploit a critical authentication bypass vulnerability, tracked as CVE-2021-20090 , impacting home routers with Arcadyan firmware to deploy a Mirai bot.

IoT 139

IoT Firmware Authentication Wireless 139

Security Affairs

FEBRUARY 18, 2022

Qualys experts found a new Linux privilege escalation vulnerability, tracked as CVE-2021-44731, in Canonical’s Snap Package Manager. Canonical’s Snap software packaging and deployment system are affected by multiple vulnerabilities, including a privilege escalation flaw tracked as CVE-2021-44731 (CVSS score 7.8).

Software 111

Software Hacking Cybercrime Information Security 111

Security Affairs

JULY 26, 2021

Apple released a security update that addresses CVE-2021-30807 flaw in macOS and iOS that may have been actively exploited to deliver malware. Apple addressed a security flaw, tracked as CVE-2021-30807, in macOS and iOS that may have been actively exploited to plant malware on vulnerable devices. iOS 14.7.1, iOS 14.7.1,

Malware 121

Malware Hacking Information Security Cybersecurity 121

SC Magazine

MAY 3, 2021

Yu has contributed to cybersecurity models in his own right, having developed the Cyber Defense Matrix that was described by one tech leader as the “must-have playbook in modern information security programs.” Click here to access all coverage of the 2021 SC Awards.

Information Security 91

Information Security CISO Financial Services Cybersecurity 91

Security Affairs

DECEMBER 29, 2021

version to address recently discovered arbitrary code execution flaw tracked as CVE-2021-44832. version to address a recently discovered arbitrary code execution flaw, tracked as CVE-2021-44832, affecting Log4j 2.17.0. CVE-2021-44832 is the fifth vulnerability discovered in the popular library in the last weeks. beta9 to 2.14.1

Software 116

Software Hacking Information Security 116

SC Magazine

MAY 1, 2021

For 2021, the judges took on a record number of submissions, identifying which products, people and companies stood out during a tumultuous year. Click here to see the full list of 2021 SC Award finalists. She also served as the deputy chief information officer of the White House.

Computers and Electronics 126

Computers and Electronics Technology Education Information Security 126

Google Security

JUNE 3, 2022

Posted by Harshvardhan Sharma, Information Security Engineer, Google 2021 was another record-breaking year for our Vulnerability Rewards Program (VRP). 2021 saw some amazing work from the security research community. We paid a total of $8.7 million in rewards, our highest amount yet.

Engineering 132

Engineering Authentication Internet Internet 132

Security Affairs

JUNE 4, 2021

Trend Micro disclosed technical details of a patched privilege escalation issue, tracked as CVE-2021-30724 , that impacts macOS, iOS and iPadOS. Trend Micro researchers disclosed technical details of a patched privilege escalation vulnerability, tracked as CVE-2021-30724 , that impacts macOS, iOS, and iPadOS. and iPadOS 14.6.

Hacking 137

Hacking Information Security Cybersecurity 137

Security Boulevard

JANUARY 15, 2022

Our thanks to Security BSides London for publishing their tremendous videos from the Security BSides London 2021 Conference on the organization’s YouTube channel. The post Security BSides London 2021 – Ben Caller’s ‘Big Data Lake, Big Data Leak appeared first on Security Boulevard.

Big data 143

Big data Education InfoSec Information Security 143

Security Affairs

MAY 5, 2021

Cyber Defense Magazine March 2021 Edition has arrived. Cyber Defense Magazine May 2021. OVER 90+ PAGESLOADED WITH EXCELLENT CONTENT Learn from the experts, cybersecurity best practices Find out about upcoming information security related conferences, expos and trade shows. appeared first on Security Affairs.

InfoSec 98

InfoSec Media Cybersecurity Government 98

Security Boulevard

JANUARY 29, 2022

Our sincere thanks to Security BSides Dublin for publishing their tremendous videos from the Security BSides Dublin 2021 Conference on the organization’s YouTube channel. The post Security BSides Dublin 2021 – Juan Aray’s ‘Introduction To Fileless Malware’ appeared first on Security Boulevard.

Malware 130

Malware Education InfoSec Information Security 130

Security Affairs

OCTOBER 31, 2022

VMware warned of the existence of a public exploit targeting a recently addressed critical remote code execution (RCE) vulnerability, tracked as CVE-2021-39144 (CVSS score of 9.8), in NSX Data Center for vSphere (NSX-V). “VMware has confirmed that exploit code leveraging CVE-2021-39144 against impacted products has been published.”

Hacking 104

Hacking Information Security 104

Security Boulevard

FEBRUARY 22, 2022

Many thanks to BSidesAugusta for publishing their outstanding videos from the BSidesAugusta 2021 Conference on the organization’s YouTube channel. The post BSidesAugusta 2021 – Tim Crothers’ ‘Analyzing Public Breaches’ appeared first on Security Boulevard.

Education 98

Education InfoSec Information Security Cybersecurity 98

Security Boulevard

FEBRUARY 17, 2022

Many thanks to BSidesAugusta for publishing their outstanding videos from the BSidesAugusta 2021 Conference on the organization’s YouTube channel. The post BSidesAugusta 2021 – Chris Truncer’s ‘Offensive WMI Workshop’ appeared first on Security Boulevard.

Education 98

Education InfoSec Information Security Cybersecurity 98

Security Boulevard

DECEMBER 11, 2021

Our thanks to BSidesKC for publishing their outstanding BSidesKC 2021 videos on the Conferences’ YouTube channel. The post BSidesKC 2021 – Jacob Torrey’s ‘Playing Games With Chimaras’ appeared first on Security Boulevard.

Education 109

Education InfoSec Information Security Cybersecurity 109

Security Affairs

FEBRUARY 2, 2021

Cyber Defense Magazine February 2021 Edition has arrived. 108 PAGESLOADED WITH EXCELLENT CONTENT Learn from the experts, cybersecurity best practices Find out about upcoming information security related conferences, expos and trade shows. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

InfoSec 100

InfoSec DNS Marketing Media 100

Security Boulevard

JANUARY 2, 2022

Our thanks to BSides Greenville / BSidesGVL for publishing their Track1 , Track 2 and Track 3 of their well-crafted videos from the BSides Greenville / BSidesGVL 2021 conference on the Organization’s’ YouTube channel.

Cybersecurity 120

Cybersecurity Education InfoSec Information Security 120

Security Affairs

JULY 24, 2021

Japanese researchers spotted an Olympics-themed wiper targeting Japanese users ahead of the 2021 Tokyo Olympics. Tokyo Olympics could be a great opportunity for cybercriminals and malware authors, the US FBI warned p rivate US companies of cyberattacks that might attempt to disrupt the 2021 Tokyo Olympics. Pierluigi Paganini.

Malware 137

Malware Antivirus Cyber Attacks Hacking 137

Security Boulevard

DECEMBER 7, 2021

According to Germany’s Federal Office for Information Security (BSI), the country faces a grave and growing threat as society becomes more digitally connected and criminals more sophisticated. Threat level increased BSI published their annual report “The State of IT Security in Germany in 2021.” It […]… Read More.

Cybersecurity 57

Cybersecurity Information Security 57

Cisco Security

AUGUST 12, 2021

Cisco Secure returned as a supporting partner of the Black Hat USA 2021 Network Operations Center (NOC) for the 5 th year ; joining conference producer Informa Tech and its other security partners. SECURITY CATEGORY (PHISHING). Date & Time: Aug 5, 2021 at 6:32 AM. app.nihaocloud[.]com. Event Details (1 of 2).

DNS 138

DNS Firewall Phishing Mobile 138