Anton on Security

JANUARY 3, 2023

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our fifth Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blogs for #2 , #3 and #4 ). Now, go and read the report!

Cybersecurity 185

Cybersecurity Backups DDOS Accountability 185

Security Affairs

APRIL 25, 2023

VMware released security updates to address two zero-day vulnerabilities ( CVE-2023-20869, CVE-2023-20870 ) that were chained by the STAR Labs team during the Pwn2Own Vancouver 2023 hacking contest against Workstation and Fusion software hypervisors. They earned $80,000 and 8 Master of Pwn points.

Hacking 97

Hacking Education Software Media 97

Heimadal Security

DECEMBER 20, 2022

GitHub recently announced that it will require all users who contribute with code on the platform to enable two-factor authentification over the course of 2023. Two-factor authentication (2FA) makes accounts safer by adding an extra step that requires entering a one-time code during the login process.

Accountability 130

Accountability Authentication Cybersecurity 130

Security Affairs

APRIL 12, 2023

SAP April 2023 security updates include a total of 24 notes, 19 of which are new vulnerabilities. CVE-2023-28765 : An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) – versions 420, 430, can exploit the issue to access to lcmbiar file and further decrypt the file.

Education 83

Education Media Authentication Passwords 83

Security Affairs

APRIL 19, 2023

Google rolled out emergency fixes to address another actively exploited high-severity zero-day flaw, tracked as CVE-2023-2136 , in its Chrome web browser. The vulnerability is an Integer overflow in the Skia graphics library, the issue was reported by Clément Lecigne of Google’s Threat Analysis Group on April 12, 2023.

Education 90

Education Media Engineering Hacking 90

Security Affairs

APRIL 14, 2023

Google released an emergency security update to address the first Chrome zero-day vulnerability (CVE-2023-2033) in 2023, the company is aware of attacks in the wild exploiting the issue. The vulnerability was reported by Clément Lecigne of Google’s Threat Analysis Group on 2023-04-11. “Type Confusion in V8.

Education 83

Education Media Engineering Hacking 83

Security Boulevard

JANUARY 9, 2024

The exploitation of an undocumented Google OAuth endpoint, MultiLogin, by various information-stealing malware strains has raised significant concerns within the cybersecurity landscape. 20, 2023, poses a substantial risk to user sessions and account security. Tell me more about the.

Accountability 59

Accountability Account Security Malware Risk 59

Security Affairs

APRIL 16, 2023

Microsoft warns of a new Remcos RAT campaign targeting US accounting and tax return preparation firms ahead of Tax Day. Tax Day, Microsoft has observed a new Remcos RAT campaign targeting US accounting and tax return preparation firms. The phishing attacks began in February 2023, the IT giant reported. Ahead of the U.S.

Accountability 89

Accountability Phishing Financial Services Surveillance 89

eSecurity Planet

SEPTEMBER 5, 2023

Major cybersecurity events in the last week make clear that hackers just keep getting savvier — and security teams need to be vigilant to keep up. Collectively, these episodes highlight the need for comprehensive cybersecurity defenses and timely patch management for risk mitigation. out of 10 on the CVSS vulnerability scale.

VPN 95

VPN Authentication Ransomware Antivirus 95

eSecurity Planet

JUNE 13, 2023

Microsoft’s Patch Tuesday for June 2023 addresses 78 vulnerabilities, a significant increase from last month’s total of 37. The six critical vulnerabilities are as follows: CVE-2023-24897 , a remote code execution vulnerability in.NET,NET Framework, and Visual Studio, with a CVSS score of 7.8

Accountability 90

Accountability VPN Software Engineering 90

BH Consulting

SEPTEMBER 14, 2023

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. That’s one of the many fascinating insights from Hive Systems’ 2023 Password Table. Security company Trustwave tracked a noticeable increase in this kind of activity in early 2023. billion last year.

Scams 59

Scams Passwords Social Engineering Cybersecurity 59

CyberSecurity Insiders

APRIL 10, 2023

We spoke with our blog volunteers to get their insights into what best practices their companies are following, along with how you can get on a path to better identity management. Why is identity management and security important in 2023? “In The dangers of improper management of digital identities are at an all-time high.

Identity Theft 105

Identity Theft Education Authentication Data breaches 105

Security Boulevard

FEBRUARY 7, 2024

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our seventh Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blogs for #2 , #3 , #4 , #5 , #6 , #7 and #8 ).

Cybersecurity 69

Cybersecurity Ransomware Passwords Cryptocurrency 69

CyberSecurity Insiders

MARCH 28, 2023

writes a cybersecurity prescription for the NHS and for social care, data protection hardware is becoming a big security gap, security specialist MITRE partners up to tackle supply chain security threats, while the E.U. Once installed it allowed them to snatch session cookies and compromise users’ Facebook accounts. By Joe Fay The U.K.

Cybersecurity 52

Cybersecurity Small Business Backups Artificial Intelligence 52

Security Affairs

MAY 15, 2023

DRM Dashboard Ransomware Monitor released the first quarterly report for the year 2023 about the activities of ransomware groups globally. DRM Dashboard Ransomware Monitor, an independent platform of cybersecurity monitoring, is pleased to release the quarterly the DRM-Report for the first quarter of 2023.

Ransomware 78

Ransomware Cybercrime Cybersecurity Hacking 78

Security Affairs

APRIL 3, 2023

.” The experts discovered that other apps were impacted by the misconfiguration issue, including Mag News, Central Notification Service (CNS), Contact Center, PoliCheck, Power Automate Blog, and COSMOS. 31, 2023 – Wiz Research reported the Bing issue to MSRC Jan. 31, 2023 – MSRC issues initial fix to Bing app Feb.

Accountability 79

Accountability Education Media Authentication 79

eSecurity Planet

NOVEMBER 6, 2023

The past week has been a busy one for cybersecurity vulnerabilities, with 34 vulnerable Windows drivers and four Microsoft Exchange flaws heading a long list of security concerns. CVE-2023-5043 (Annotation Injection, CVSS score 7.6): Ingress-nginx annotation injection allows the execution of arbitrary commands. The problem: The 9.1

Software 89

Software Education Ransomware Firmware 89

The Last Watchdog

DECEMBER 14, 2022

Based on insights from our team of elite security researchers here at Bugcrowd, these are three trends gaining steam as 2022 comes to a close – trends that I expect to command much attention in 2023. Continuous pentesting. However, a longtime challenge with pentesting has been the “point-in-time” nature of the tests. Narrowing the talent gap.

Penetration Testing 229

Penetration Testing Risk Marketing Cybersecurity 229

SecureList

JANUARY 18, 2023

Last year, the cybersecurity of corporations and government agencies was more significant than ever before, and will become even more so in 2023. The trend for personal data leaks grew rapidly in 2022 and will continue into 2023. The number of posts in those blogs grew in 2022, both in open sources and on the dark web.

Media 99

Media Social Engineering Ransomware Hacking 99

Security Boulevard

JANUARY 3, 2023

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our fifth Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blogs for #2 , #3 and #4 ). Cybersecurity Action Team Threat Horizons report.

Cybersecurity 98

Cybersecurity Backups DDOS Accountability 98

Heimadal Security

NOVEMBER 8, 2023

Both flaws, CVE-2023-22518 and CVE-2023-22515, are ranked 10 which is the maximum risk level. CVE-2023-22515 enables hackers to create unauthorized Confluence administrator accounts.

Ransomware 105

Ransomware Accountability Risk Cybersecurity 105

BH Consulting

DECEMBER 11, 2023

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. These practices can lead to account compromise, or enabling unauthorised users to access sensitive data and escalate privileges. Cloud security was also a theme in Microsoft’s ‘Cybersecurity Trends in Ireland 2023’ report.

Surveillance 52

Surveillance Cybersecurity DDOS Data breaches 52

Webroot

JANUARY 4, 2023

While there are countless overused resolutions like starting a workout regimen, the new year does provide an opportunity for additional self-improvement that most people never consider – bolstering cybersecurity protections. Start 2023 off right with comprehensive device and identity protection. based identity restoration.

Identity Theft 86

Identity Theft Insurance Password Management Phishing 86

Security Affairs

APRIL 15, 2023

US Cybersecurity and Infrastructure Security Agency (CISA) added Android and Novi Survey flaws to its Known Exploited Vulnerabilities catalog. The bulletin confirmed that “there are indications that CVE-2023-20963 may be under limited, targeted exploitation.” CISA orders federal agencies to fix this flaw by May 4, 2023.

Education 79

Education Accountability Media Cybersecurity 79

Security Boulevard

NOVEMBER 3, 2023

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our eighth Threat Horizons Report ( full version ) that we just released ( the official blog for #1 report , my unofficial blogs for #2 , #3 , #4 , #5 , #6 and #7 ).

Backups 64

Backups Cybersecurity Healthcare Account Security 64

Security Affairs

MAY 12, 2023

For over a decade, email has been a common source of cybersecurity threats. Recently, VIPRE Security Group published their Email Security in 2023 report , where they shared insights on the development of email-based threats and how they can impact organizations. What Can We Expect in 2023? It’s not likely to stop there.

Phishing 89

Phishing Social Engineering Small Business B2B 89

Security Affairs

APRIL 20, 2023

VMware fixed two severe flaws, tracked as CVE-2023-20864 and CVE-2023-20865, impacting the VMware Aria Operations for Logs product. The vulnerability CVE-2023-20864 (CVSSv3 base score of 9.8)

Education 91

Education Media Hacking Accountability 91

Security Affairs

APRIL 22, 2023

US Cybersecurity and Infrastructure Security Agency (CISA) added MinIO, PaperCut, and Chrome vulnerabilities to its Known Exploited Vulnerabilities catalog. CVE-2023-27350 (CVSS score – 9.8) – PaperCut MF/NG Improper Access Control Vulnerability. CVE-2023-2136 – Google Chrome Skia Integer Overflow Vulnerability.

Education 90

Education Media Authentication Cybersecurity 90

Security Affairs

APRIL 5, 2023

.” The researchers reported the issues to the United States Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA), which assigned the following five CVEs: Use of Hard-coded Credentials CWE-798 ( CVE-2023–1748 , CVSS3.0: Improper Input Validation CWE-20 ( CVE-2023–1751 , CVSS3.0:

Manufacturing 91

Manufacturing Media Firewall Education 91

BH Consulting

NOVEMBER 14, 2023

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Gardaí established that over €40 million was stolen and laundered through Irish bank accounts, and that a trade-based money laundering and underground banking system is operating from Ireland.

Scams 59

Scams Insurance Banking Data breaches 59

CyberSecurity Insiders

MARCH 30, 2023

Here is how you can register for the CISSP exam: Log in to your account at www.isc2.org org and visit the Register for Your Certification Exam If you don’t have an (ISC)² account, you’ll need to create one before you register for your CISSP exam. You’ll then visit [link] to fill out your Exam Account Information form.

Accountability 52

Accountability Cybersecurity Education 52

BH Consulting

JUNE 13, 2023

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Target the human, swipe the cash: Verizon DBIR 2023 highlights crime trends Manage the human risk and mind your money: those are two key takeaways from Verizon’s 2023 Data Breach Investigations Report.

Social Engineering 52

Social Engineering Data breaches Scams DDOS 52

Security Affairs

APRIL 18, 2023

US Cybersecurity and Infrastructure Security Agency (CISA) added Chrome and macOS vulnerabilities to its Known Exploited Vulnerabilities catalog. CVE-2023-2033 – Google Chromium V8 Engine Type Confusion Vulnerability. The CVE-2023-2033 flaw is the first Chrome zero-day vulnerability addressed by Google in 2023.

Education 81

Education Media Engineering Cybersecurity 81

Security Affairs

APRIL 10, 2023

Cybersecurity vendor Sophos addressed three vulnerabilities in Sophos Web Appliance, including a critical flaw, tracked as CVE-2023-1671 (CVSS score of 9.8), that can lead to code execution. Sophos Web Appliance will reach end-of-life (EoL) status on July 20, 2023.

Firewall 91

Firewall Education Media Hacking 91

Centraleyes

JANUARY 21, 2024

The emergence of NIS2 alongside GDPR stems from the acknowledgment that while data protection is vital, it represents just one aspect of cybersecurity. As a global trailblazer in information security and data protection regulation, the EU continues to lead the way in comprehensive cybersecurity standards.

Cybersecurity 110

Cybersecurity Energy and Utilities Cyber threats Risk 110

SecureWorld News

SEPTEMBER 12, 2023

On June 14, 2019, Taylor Swift posted a seemingly random string of text to her social media accounts: gxgjxkhdkdkydkhdkhfjvjfj!!! taylor swift is truly a mastermind pic.twitter.com/MH40rzxvgH — Ron (@midnightstrack2) June 14, 2023 It's a typical, long-time-coming Easter Egg, a tradition that seasoned Swifties know All Too Well.

Cybersecurity 90

Cybersecurity InfoSec Threat Detection Accountability 90

Security Affairs

APRIL 21, 2023

The security breach was detected on March 17, 2003 and according to the company the intrusion begun on or about March 6, 2023. “On March 17, 2023, the ABA observed unusual activity on its network. The organization on Thursday began notifying members. million members impacted appeared first on Security Affairs.

Data breaches 89

Data breaches Passwords Education Accountability 89