SecureWorld News

DECEMBER 16, 2022

With 2022 closing out, you may be wondering what the job market looks like for cybersecurity professionals in the new year. Bureau of Labor Statistics (BLS) , jobs in the Information Security field are expected to increase by 35 percent by 2030, which researchers are saying is faster than any other industry growth on average.

Information Security 69

Information Security InfoSec Marketing Cybersecurity 69

Security Affairs

DECEMBER 11, 2022

The Pwn2Own Toronto 2022 is ended, and the participants earned a total of $989,750 for 63 unique zero-day exploits. The Zero Day Initiative’s Pwn2Own Toronto 2022 hacking competition has ended and these are the final numbers for the event: $989,750 awarded. — Zero Day Initiative (@thezdi) December 9, 2022. 66 entries.

Hacking 102

Hacking Information Security 102

Security Affairs

DECEMBER 29, 2022

NCC Group’s Fox-IT research team warns of thousands of Citrix ADC and Gateway endpoints remain vulnerable to two critical vulnerabilities, tracked as CVE-2022-27510 and CVE-2022-27518 (CVSS scores: 9.8), that the company addressed in recent months. Citrix addressed the flaw on November 8, 2022. Pierluigi Paganini.

VPN 98

VPN Internet Internet Authentication 98

Security Boulevard

MAY 21, 2022

Our sincere thanks to BSides Prishtina for publishing their Presenter’s BSides Prishtina 2022 Information Security Conference videos on the organization’s’ YouTube channel.

Information Security 91

Information Security Education InfoSec Cybersecurity 91

Security Affairs

DECEMBER 14, 2022

Microsoft released December 2022 Patch Tuesday security updates that fix 52 vulnerabilities across its products. Microsoft December 2022 Patch Tuesday security updates fixed two zero-day vulnerabilities; one of the new issues addressed this month is listed as publicly known at the time of release, and one is actively exploited.

Hacking 111

Hacking Information Security 111

eSecurity Planet

JUNE 21, 2022

” Also read: Cybersecurity Employment in 2022: Solving the Skills Gap. How to Choose a Security Certification. Thycotic chief security scientist Joseph Carson told eSecurity Planet that choosing a certification should ultimately be about deciding which skillset or professional direction you want to focus on.

Cybersecurity 120

Cybersecurity Penetration Testing System Administration Cyber Attacks 120

Security Boulevard

MAY 22, 2022

Our sincere thanks to BSides Prishtina for publishing their Presenter’s BSides Prishtina 2022 Information Security Conference videos on the organization’s’ YouTube channel.

Information Security 98

Information Security Education InfoSec Cybersecurity 98

Security Boulevard

MARCH 14, 2021

I am offering a fully online cybersecurity elective to MSSE second-year students for 2022: SENG 5271. It uses my Cybersecurity in the Cloud specialization offered on Coursera, plus readings and labs from my textbook Elementary Information Security. The post Cybersecurity for MSSE 2022 appeared first on Security Boulevard.

Cybersecurity 94

Cybersecurity Information Security 94

Security Affairs

DECEMBER 9, 2022

On the third day of the Zero Day Initiative’s Pwn2Own Toronto 2022 hacking competition, participants earned more than $250,000. Another successful exploit in the SOHO SMASHUP category @ #P2OToronto #Pwn2Own pic.twitter.com/8Qty12wmU1 — Zero Day Initiative (@thezdi) December 9, 2022. The results of Day Three are available here.

Hacking 122

Hacking Mobile Information Security 122

Security Boulevard

MARCH 20, 2022

This embedded compilation provides over 4 and 1/2 hours of cybersecurity & information security content from the Munich Cybersecurity Conference held earlier this year, and not previously published here. The post Munich Cyber Security Conference (MCSC) 2022 Digital Edition appeared first on Security Boulevard.

Information Security 104

Information Security Cybersecurity 104

Security Affairs

MAY 22, 2022

The Pwn2Own Vancouver 2022 hacking contest ended, Trend Micro and ZDI awarded a total of $1,155,000 for successful attempts! During the third day of the Pwn2Own Vancouver 2022 hacking competition, white hat hackers demonstrated a working exploit against Microsoft Windows 11 OS. SecurityAffairs – hacking, Pwn2Own Vancouver 2022 ).

Hacking 131

Hacking Cybersecurity Information Security 131

Security Affairs

OCTOBER 28, 2022

Apple released updates to backport the recently released security patches for CVE-2022-42827 zero-day to older iPhones and iPads. Apple has released new security updates to backport security patches released this week to address actively exploited CVE-2022-42827 in older iPhones and iPads, addressing an actively exploited zero-day bug.

Hacking 121

Hacking Information Security 121

Security Boulevard

NOVEMBER 19, 2022

Our sincere thanks to BSidesKC 2022 for publishing their outstanding conference videos on the organization's YouTube channel. The post BSidesKC 2022 – Dale Hollis’ ‘Frustrating The PenTester With Active Directory’ appeared first on Security Boulevard.

Education 120

Education Information Security Cybersecurity Network Security 120

Security Affairs

MAY 20, 2022

During the second day of the Pwn2Own Vancouver 2022 hacking competition, contestants demonstrated a working exploit for Microsoft Windows 11. During the second day of the Pwn2Own Vancouver 2022 hacking competition, white hat hackers demonstrated a working exploit against Microsoft Windows 11 OS. To nominate, please visit:?

Hacking 95

Hacking Cybersecurity Information Security 95

Security Boulevard

JANUARY 27, 2022

The COVID pandemic changed and shaped the way in which people work and, by extension, the information security landscape in which businesses operate. The post BYOD and WFH: Securing Your Business in 2022 appeared first on Nuspire. The post BYOD and WFH: Securing Your Business in 2022 appeared first on Nuspire.

Information Security 97

Information Security 97

Security Affairs

MAY 26, 2022

Security researchers released PoC exploit code for the critical authentication bypass vulnerability CVE-2022-22972 affecting multiple VMware products. The virtualization giant recently warned that a threat actor can exploit the CVE-2022-22972 flaw (CVSSv3 base score of 9.8) using CVE-2022-22972. states VMware.

Authentication 137

Authentication Healthcare Education Cybersecurity 137

Security Boulevard

NOVEMBER 10, 2022

Our sincere thanks to BSidesKC 2022 for publishing their outstanding conference videos on the organization's YouTube channel. The post BSidesKC 2022 – Igor Mezic’s ‘AI And Machine Learning In Network Security’ appeared first on Security Boulevard.

Network Security 120

Network Security Education Information Security Cybersecurity 120

Security Affairs

OCTOBER 14, 2022

Researchers disclosed details of a now-patched flaw, tracked as CVE-2022-37969, in Windows Common Log File System (CLFS). The CVE-2022-37969 (CVSS score: 7.8) Microsoft fixed it with the release of September 2022 Patch Tuesday security updates, the company also states it has been actively exploited in the wild. “An

Hacking 145

Hacking Information Security 145

Security Affairs

MAY 19, 2022

White hat hackers earned a total of $800,000 on the first day of the Pwn2Own Vancouver 2022, $450,000 for exploits targeting Microsoft Teams. Pwn2Own Vancouver 2022 hacking contest has begun, it is the 15th edition of this important event organized by Trend Micro’s Zero Day Initiative (ZDI). The remaining exploits received a $40,000.

Hacking 126

Hacking Cybersecurity Information Security 126

Security Affairs

DECEMBER 8, 2022

Pwn2Own Toronto 2022 Day Two – Participants demonstrated exploits for smart speaker, smartphone, printer, router, and NAS. On the first day of the Zero Day Initiative’s Pwn2Own Toronto 2022 hacking competition participants earned $400,000 for 26 unique zero-day exploits. SecurityAffairs – hacking, Pwn2Own Toronto 2022 ).

Hacking 98

Hacking Mobile Information Security 98

Security Affairs

AUGUST 9, 2022

Microsoft Patch Tuesday security updates for August 2022 addressed a zero-day attack remote code execution vulnerability in Windows. Most of the flaws, 64, are escalation of privilege issues, followed by remote code execution, 31, and 12 information disclosure. No No RCE CVE-2022-34716.NET No No RCE CVE-2022-34716.NET

Media 123

Media Social Engineering Engineering Internet 123

Security Affairs

OCTOBER 18, 2022

Fortinet confirmed that many systems are still vulnerable to attacks exploiting the CVE-2022-40684 zero-day vulnerability. Fortinet is urging customers to address the recently discovered CVE-2022-40684 zero-day vulnerability. A proof-of-concept (PoC) exploit code for the CVE-2022-40684 flaw has been released online.

Authentication 135

Authentication Firewall Hacking Risk 135

Security Affairs

JUNE 5, 2022

Proof-of-concept exploits for the critical CVE-2022-26134 vulnerability in Atlassian Confluence and Data Center servers are available online. Proof-of-concept exploits for the critical CVE-2022-26134 flaw, affecting Atlassian Confluence and Data Center servers, have been released. 23 unique IPs so far.

VPN 124

VPN IoT Cybersecurity Engineering 124

Security Affairs

MARCH 8, 2022

Microsoft March 2022 Patch Tuesday security updates address 89 vulnerabilities in multiple products, including 3 zero-days. Three flaws addressed by the Microsoft March 2022 Patch Tuesday security updates are zero-day issues, and for two of them, CVE-2022-21990 and CVE-2022-24459, public exploits are available.

IoT 104

IoT Media DNS Hacking 104

Security Affairs

JUNE 12, 2022

Ransomware gangs are actively exploiting CVE-2022-26134 remote code execution (RCE) flaw in Atlassian Confluence Server and Data Center. Multiple ransomware groups are actively exploiting the recently disclosed remote code execution (RCE) vulnerability, tracked as CVE-2022-26134 , affecting Atlassian Confluence Server and Data Center.

Ransomware 135

Ransomware Encryption Malware Hacking 135

Security Affairs

MAY 26, 2022

Italy announced its National Cybersecurity Strategy for 2022/26, a crucial document to address cyber threats and increase the resilience of the country. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Cybersecurity 141

Cybersecurity Cyber threats Technology Government 141

Security Affairs

OCTOBER 16, 2022

Threat actors have compromised hundreds of servers exploiting critical flaw CVE-2022-41352 in Zimbra Collaboration Suite (ZCS). Last week, researchers from Rapid7 warned of the exploitation of unpatched zero-day remote code execution vulnerability, tracked as CVE-2022-41352 , in the Zimbra Collaboration Suite. reported Rapid7. “We

Hacking 124

Hacking Antivirus Telecommunications Engineering 124

Security Affairs

MAY 1, 2023

In 2022, Google prevented 1.43 million policy-violating applications from being published on Google Play in 2022. ” The company explained that in 2022, the App Security Improvements program helped developers to address approximately 500K security weaknesses affecting approximately 300K apps.

Accountability 95

Accountability Education Media Hacking 95

Security Affairs

DECEMBER 7, 2022

The Pwn2Own Toronto 2022 hacking competition has begun, this is the 10th anniversary of the consumer-focused version of the contest. The news of the Samsung Galaxy S22 hack on the first day of Pwn2Own Toronto 2022 made the headlines. Pwn2Own #P2OToronto pic.twitter.com/ZNHtF7wmUc — Zero Day Initiative (@thezdi) December 6, 2022.

Hacking 96

Hacking Wireless Mobile Data breaches 96

Security Affairs

DECEMBER 13, 2023

Sophos backports the patch for CVE-2022-3236 for end-of-life (EOL) firewall firmware versions due to ongoing attacks exploiting the issue. The security firm reported that this vulnerability is being used in attacks against a small set of specific organizations, primarily in South Asia. reads the advisory. GA, MR1, and MR1-1 v18.5

Firmware 98

Firmware Firewall Internet Internet 98

Security Affairs

MAY 18, 2022

CISA orders federal agencies to fix VMware CVE-2022-22972 and CVE-2022-22973 vulnerabilities by May 23, 2022. The virtualization giant warns that a threat actor can exploit the flaw, tracked as CVE-2022-22972 (CVSSv3 base score of 9.8), to obtain admin privileges and urges customers to install patches immediately.

Cybersecurity 94

Cybersecurity Hacking Software Information Security 94

Security Affairs

APRIL 7, 2022

Experts discovered a vulnerability, tracked as CVE-2022-22292, which can be exploited to compromise Android 9, 10, 11, and 12 devices. Researchers from mobile cybersecurity firm Kryptowire discovered a vulnerability, tracked as CVE-2022-22292 , in Android 9, 10, 11, and 12 devices. To nominate, please visit:? Pierluigi Paganini.

Hacking 131

Hacking Mobile Cybersecurity Information Security 131

Security Affairs

DECEMBER 15, 2022

Microsoft revised the severity rate for the CVE-2022-37958 flaw which was addressed with Patch Tuesday security updates for September 2022. The CVE-2022-37958 was originally classified as an information disclosure vulnerability that impacts the SPNEGO Extended Negotiation ( NEGOEX ) security mechanism.

Authentication 99

Authentication Internet Internet Hacking 99

CyberSecurity Insiders

DECEMBER 24, 2021

2022 Predictions for the Cybersecurity Industry and Advice for Newcomers or Those Working for Small to Medium-Sized Businesses. Like us, you may be wondering, what will 2022 look like for information security professionals? 2022 Cybersecurity Fundamentals. 2022 Cybersecurity Fundamentals.

Cybersecurity 98

Cybersecurity Ransomware VPN Architecture 98

Security Affairs

MARCH 21, 2023

Experts warn that 55 zero-day vulnerabilities were exploited in attacks carried out by ransomware and cyberespionage groups in 2022. “Products from Microsoft, Google, and Apple made up the majority of zero-day vulnerabilities in 2022, consistent with previous years. ” reads the report published by Mandiant.

Ransomware 88

Ransomware Mobile Hacking Software 88

Security Affairs

JANUARY 31, 2023

Horizon3 security researchers released proof-of-concept (PoC) code for VMware vRealize Log Insight RCE vulnerability CVE-2022-31706. Last week, researchers from Horizon3’s Attack Team announced the release of PoC exploit code for remote code execution in VMware vRealize Log tracked as CVE-2022-31706 (CVSS base 9.8/10).

Engineering 95

Engineering Authentication Hacking Information Security 95

Security Affairs

OCTOBER 18, 2022

Video messaging company Zoom fixed a high-severity vulnerability, tracked as CVE-2022-28762, in Zoom Client for Meetings for macOS. The issue, tracked as CVE-2022-28762, received a CVSS severity score of 7.3. ” The vulnerability was discovered by the company’s internal security team as part of a routine assessment.

Hacking 107

Hacking Information Security 107