SecureWorld News

DECEMBER 29, 2022

We love good "trends in cybersecurity" articles and posts. Here's a compilation of a dozen solid trend pieces looking back at the year that was 2022 and the year ahead in 2023. It will be crucial for everyone to stay informed and prepared.". Here is a look at the year ahead.".

Cybersecurity 77

Cybersecurity CISO Artificial Intelligence Digital transformation 77

CyberSecurity Insiders

MAY 4, 2023

The data breach took place on January 30th, 2023, impacting about 783,600 people. The post Information Security News headlines trending on Google appeared first on Cybersecurity Insiders.

Information Security 99

Information Security Healthcare Social Engineering Ransomware 99

Joseph Steinberg

DECEMBER 11, 2023

Veteran cybersecurity expert witness executive will help strengthen law enforcement capabilities to prevent, investigate, and prosecute information-age crimes. Analysts have calculated that he is among the top three cybersecurity influencers worldwide. patent filings.

Cybersecurity 250

Cybersecurity Artificial Intelligence CISO Technology 250

The Hacker News

JUNE 3, 2023

A survey of global cybersecurity leaders through the 2023 Certified CISO Hall of Fame Report commissioned by the EC-Council identified 4 primary areas of grave concern: cloud security, data security, security governance, and lack of cybersecurity talent.

CISO 84

CISO Cybersecurity Education Government 84

Security Affairs

NOVEMBER 28, 2023

Threat actors started exploiting a critical ownCloud vulnerability (CVE-2023-49103) that can lead to sensitive information disclosure. The vulnerability, tracked as CVE-2023-49103 , resides in the Graphapi app, which relies on a third-party GetPhpInfo.php library that provides a URL. x before 0.2.1 x before 0.3.1.

Cybersecurity 111

Cybersecurity Passwords Internet Internet 111

Security Affairs

NOVEMBER 1, 2023

Experts warn that threat actors started exploiting the critical flaw CVE-2023-46747 in F5 BIG-IP installs less than five days after PoC exploit disclosure. F5 this week warned customers about a critical security vulnerability, tracked as CVE-2023-46747 (CVSS 9.8), that impacts BIG-IP and could result in unauthenticated remote code execution.

Authentication 111

Authentication Hacking Cybersecurity Information Security 111

CyberSecurity Insiders

MARCH 9, 2023

We are excited to announce the winners of the 2023 Cybersecurity Excellence Awards ! The 2023 Cybersecurity Excellence Awards honor individuals and organizations that demonstrate excellence, innovation and leadership in information security.

Cybersecurity 52

Cybersecurity Information Security 52

CyberSecurity Insiders

APRIL 11, 2023

As the world continues to face unprecedented cyber threats, Chief Information Security Officers (CISOs) are facing a growing number of challenges in their roles. In 2023, these challenges are likely to increase, and CISOs will have to be well-equipped to overcome them.

CISO 104

CISO Data privacy Cyber threats Cybersecurity 104

Security Affairs

FEBRUARY 13, 2024

Maintainers behind the Ransomfeed platform have released Q3 Report 2023 including activities of 185 criminal groups operating worldwide. The months of May, June, July, and August each presented unique challenges in the realm of cybersecurity. Let us now delve into the detailed breakdown of the days.

Ransomware 104

Ransomware Data collection Hacking Cybersecurity 104

Security Affairs

OCTOBER 4, 2023

The DRM Report Q2 2023 report provides a detailed insight into the ransomware threat landscape during the period between May and August 2023. Ransomware, a menace that has evolved into a formidable adversary, takes center stage in our examination of the cyber threat landscape during the second quarter of 2023.

Ransomware 106

Ransomware Data collection Cyber threats Hacking 106

Security Affairs

JANUARY 12, 2024

Researchers published a proof-of-concept (PoC) code for the recently disclosed critical flaw CVE-2023-51467 in the Apache OfBiz. Researchers from cybersecurity firm VulnCheck have created a proof-of-concept (PoC) exploit code for the recently disclosed critical flaw CVE-2023-51467 (CVSS score: 9.8) in the Apache OfBiz.

Authentication 125

Authentication Software Passwords Hacking 125

CyberSecurity Insiders

MAY 1, 2023

Companies that fail to protect their customers’ information are likely to face lawsuits in the year 2023, as impacted customers are no longer willing to tolerate such acts at the expense of their privacy and financial losses. By the way, data spills occurring from state-funded hacks are no longer covered under cyber insurance.

Data breaches 138

Data breaches Cyber Insurance Insurance Technology 138

Security Affairs

JANUARY 19, 2024

Ransomware groups claimed that they successfully targeted 4191 victims in 2023, Cybernews researchers report. of attacks in 2023), while summer was the most active for ransomware attacks (30.4%). The top 10 groups, based on the number of victims, collectively account for 59% of the total victims in 2023.

Ransomware 119

Ransomware Manufacturing Retail Insurance 119

Security Affairs

OCTOBER 2, 2023

Experts warn of threat actors actively exploiting CVE-2023-40044 flaw in recently disclosed flaw in Progress Software’s WS_FTP products. The vulnerability was discovered by researchers at the cybersecurity firm Assetnote. All versions of WS_FTP Server are affected by these vulnerabilities.” ” reads the report published by Rapid7.

Authentication 112

Authentication Software Internet Internet 112

Security Affairs

JANUARY 19, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti EPMM flaw CVE-2023-35082 to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added the Ivanti EPMM flaw CVE-2023-35082 (CVSS score: 9.8) and below). .

Mobile 98

Mobile Internet Internet Hacking 98

CyberSecurity Insiders

MAY 10, 2023

The cybersecurity workforce gap also increased by 26.2% As a fresh new batch of cybersecurity graduates enter the workforce, I’d like to offer a few bits of advice. Going Beyond Technical Credentials What distinguishes candidates who will fare well in the high-stress, continually evolving cybersecurity industry?

Cybersecurity 102

Cybersecurity Penetration Testing Technology Hacking 102

Security Affairs

NOVEMBER 2, 2023

Rapid7 researchers warn of the suspected exploitation of a recently disclosed critical security flaw (CVE-2023-46604) in the Apache ActiveMQ. Cybersecurity researchers at Rapid7 are warning of the suspected exploitation of the recently disclosed critical vulnerability CVE-2023-46604 in the Apache ActiveMQ. before 5.18.3

Ransomware 118

Ransomware Cybercrime Software Encryption 118

Security Boulevard

DECEMBER 25, 2022

And what are our cybersecurity and privacy predictions for 2023? The post The Year in Review and 2023 Predictions appeared first on The Shared Security Show. The post The Year in Review and 2023 Predictions appeared first on Security Boulevard. What did we get wrong?

Cybersecurity 98

Cybersecurity Data privacy Technology InfoSec 98

SecureList

MARCH 12, 2024

Profile of participants and applications We collected the data from a sample of the application security assessment projects our team completed in 2021–2023. Recommendations provided in these rankings are general in nature and based on information security best practices standards and guidelines, such as OWASP and NIST.

Passwords 99

Passwords Authentication Architecture Risk 99

Security Affairs

OCTOBER 31, 2023

Researchers publicly released the exploit code for the critical Cisco IOS XE vulnerability tracked as CVE-2023-20198. ai publicly released the exploit code for the critical Cisco IOS XE vulnerability tracked as CVE-2023-20198. We’ve developed a Proof of Concept for CVE-2023-20198 in #Cisco IOS XE. Researchers at Horizon3.ai

Internet 125

Internet Internet Software Accountability 125

Security Affairs

OCTOBER 9, 2023

IBM observed a credential harvesting campaign that is targeting Citrix NetScaler gateways affected by the CVE-2023-3519 vulnerability. IBM’s X-Force researchers reported that threat actors are conducting a large-scale credential harvesting campaign exploiting the recent CVE-2023-3519 vulnerability (CVSS score: 9.8)

VPN 109

VPN Authentication Cyber Attacks Passwords 109

Jane Frankland

JANUARY 12, 2024

I knew it was a crazy act, and perhaps it was unfair of me to subject him to it, but I wanted him to understand a pressing need in cybersecurity. My intention was to physically manifest the dire state of gender diversity for cybersecurity; to make him truly feel the weight of it all. It’s declined. For example, Byrnes et al.

Cybersecurity 182

Cybersecurity Risk Banking CISO 182

Security Affairs

AUGUST 2, 2023

Researchers warn that hundreds of Citrix servers have been hacked in an ongoing campaign exploiting the RCE CVE-2023-3519. Cybersecurity and Infrastructure Security Agency (CISA) recently warned of cyber attacks against Citrix NetScaler Application Delivery Controller (ADC) and Gateway devices exploiting the zero-day CVE-2023-3519.

VPN 90

VPN Hacking Cyber Attacks Software 90

SecureWorld News

FEBRUARY 26, 2024

In Q&A format, they share about their professional journeys, unique experiences, and hopes for the future of cybersecurity—along with some personal anecdotes. Bill Bowman, CISSP, CIPM, is the Chief Information Security Officer & Data Privacy Officer at financial software company Emburse. I learned from them.

Cybersecurity 91

Cybersecurity CISO InfoSec Data privacy 91

Security Affairs

JULY 23, 2023

Researchers reported that more than 15000 Citrix servers exposed online are likely vulnerable to attacks exploiting the vulnerability CVE-2023-3519. Exploits of CVE-2023-3519 on unmitigated appliances have been observed. Update on CVE-2023-3519 vulnerable IPs: we now tag 15K Citrix IPs as vulnerable to CVE-2023-3519.

VPN 88

VPN Cyber Attacks Software Cybersecurity 88

Security Boulevard

OCTOBER 31, 2023

On October 30, 2023, the Securities and Exchange Commission (SEC) filed a civil complaint against SolarWinds Corporation and its chief information security officer, Timothy G. Brown, for violating federal securities laws by making false and misleading statements about its cybersecurity practices and known risks.

Software 64

Software Cybersecurity Information Security Risk 64

Security Affairs

JUNE 15, 2023

According to a joint advisory published by cybersecurity agencies, the LockBit ransomware group has successfully extorted roughly $91 million in about 1,700 attacks against U.S. Lockbit was responsible for 18% of the total reported Australian ransomware incidents from April 1, 2022, to March 31, 2023. was the prevalent variant in 2023.

Ransomware 86

Ransomware Cybersecurity Education Government 86

Security Affairs

APRIL 25, 2023

VMware released security updates to address two zero-day vulnerabilities ( CVE-2023-20869, CVE-2023-20870 ) that were chained by the STAR Labs team during the Pwn2Own Vancouver 2023 hacking contest against Workstation and Fusion software hypervisors. They earned $80,000 and 8 Master of Pwn points.

Hacking 96

Hacking Education Software Media 96

Security Affairs

OCTOBER 20, 2023

More than 40,000 Cisco IOS XE devices have been compromised in attacks exploiting recently disclosed critical vulnerability CVE-2023-20198. Whatever you were thinking about CVE-2023-20198 ( #Cisco IOS EX) it's 100x worst. Cybersecurity firm GreyNoise also identified malicious activity related to the exploitation of the above issue.

Hacking 120

Hacking Internet Internet Accountability 120

SecureWorld News

SEPTEMBER 5, 2023

In Q&A format, they share about their professional journeys, unique experiences, and hopes for the future of cybersecurity—along with some personal anecdotes. Arun DeSouza is the Chief Information Security Officer and Chief Privacy Officer for Nexteer Automotive. He serves on the Advisory Council of SecureWorld Detroit.

Cybersecurity 85

Cybersecurity CISO Risk Firewall 85

Security Affairs

APRIL 19, 2023

Google rolled out emergency fixes to address another actively exploited high-severity zero-day flaw, tracked as CVE-2023-2136 , in its Chrome web browser. The vulnerability is an Integer overflow in the Skia graphics library, the issue was reported by Clément Lecigne of Google’s Threat Analysis Group on April 12, 2023.

Education 89

Education Media Engineering Hacking 89

Security Affairs

APRIL 12, 2023

SAP April 2023 security updates include a total of 24 notes, 19 of which are new vulnerabilities. CVE-2023-28765 : An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) – versions 420, 430, can exploit the issue to access to lcmbiar file and further decrypt the file.

Education 82

Education Media Authentication Passwords 82

BH Consulting

MARCH 8, 2024

That inspiration is needed, because inequality and gender representation still need to improve in cybersecurity. Even though girls outperform at school, just 26 per cent of people under the age of 30 working in cybersecurity are female, according to ISC2. They are paving the way for the next generation of cybersecurity professionals.

Cybersecurity 107

Cybersecurity Social Engineering Healthcare Data privacy 107

Security Affairs

MAY 9, 2023

Microsoft Patch Tuesday Security updates for May 2023 address a total of 40 vulnerabilities, including two zero-day actively exploited in attacks. Microsoft’s May 2023 security updates address 40 vulnerabilities, including two zero-day flaws actively exploited in attacks. ” reads the advisory. We are in the final!

Antivirus 96

Antivirus Malware Hacking Cybersecurity 96

Security Affairs

APRIL 14, 2023

Google released an emergency security update to address the first Chrome zero-day vulnerability (CVE-2023-2033) in 2023, the company is aware of attacks in the wild exploiting the issue. The vulnerability was reported by Clément Lecigne of Google’s Threat Analysis Group on 2023-04-11. “Type Confusion in V8.

Education 82

Education Media Engineering Hacking 82

Security Affairs

JANUARY 19, 2024

Kansas State University (K-State) suffered a cybersecurity incident that has disrupted part of its network and services. Kansas State University (K-State) suffered a cybersecurity incident that impacted a portion of its network and services. The university immediately launched an investigation into the incident.

Cybersecurity 106

Cybersecurity Wireless VPN Hacking 106

Security Affairs

AUGUST 24, 2023

Proof-of-concept exploit code for critical Ivanti Sentry authentication bypass flaw CVE-2023-38035 has been released. Researchers released a proof-of-concept (PoC) exploit code for critical Ivanti Sentry authentication bypass vulnerability CVE-2023-38035 (CVSS score 9.8). The vulnerability CVE-2023-38035 impacts Sentry versions 9.18

Internet 80

Internet Internet Authentication Risk 80