eSecurity Planet

FEBRUARY 26, 2025

Zimperium found that mishing activity peaked in August 2024, with over 1,000 daily attacks recorded. As businesses rely more on mobile devices for authentication and communication, these evolving threats are slipping past conventional security defenses, putting corporate networks at greater risk. What is mishing?

Phishing 81

Phishing Mobile Social Engineering Data breaches 81

eSecurity Planet

SEPTEMBER 7, 2023

Much like the rest of technology, merger and acquisition (M&A) activity for cybersecurity companies has been in a slump this year. Startup Runways Dwindle A key factor that will likely drive more dealmaking activity is that CEOs of cybersecurity startups may not have much of a choice. And this may happen sooner than later.

Cybersecurity 120

Cybersecurity Marketing Software DDOS 120

eSecurity Planet

MAY 30, 2024

Table of Contents Toggle Recent Healthcare Attacks & Breaches 5 Key Cybersecurity Management Lessons to Learn Bottom Line: Learn Healthcare’s Lessons Before Suffering Pain Recent Healthcare Attacks & Breaches Large breaches affected over 88 million individuals in the USA in 2023, a 60% increase from 2022. Ascension lost $2.66

Healthcare 123

Healthcare Cybersecurity Ransomware Backups 123

eSecurity Planet

JANUARY 2, 2024

4 January 1, 2024 Windows Vulnerability Allows DLL Exploitation Type of vulnerability: Bypassing privilege access requirements to exploit executables The problem: Researchers from Security Joes discovered a malicious code execution vulnerability in Windows 10 and 11. 1020000 1.26.10-gke.1235000 1235000 1.27.7-gke.1293000 1293000 1.28.4-gke.1083000

Authentication 112

Authentication Software Engineering Security Defenses 112

eSecurity Planet

SEPTEMBER 3, 2024

For a deeper dive into Dashlane’s features and performance, check out this detailed Dashlane review for 2024. It incorporates strong network security measures to ensure your data remains protected. Dashlane utilizes 256-bit AES encryption, a top-tier encryption standard that secures your information against unauthorized access.

Password Management 104

Password Management Passwords Encryption VPN 104

eSecurity Planet

AUGUST 7, 2024

Detection: Quickly detect security breaches to limit their damage. Given the scarcity of cybersecurity experts, use automated systems or third-party services to monitor and detect irregularities in your environment constantly. These situations demonstrate how gaps in cloud security can cause severe disruptions.

Architecture 104

Architecture DDOS Encryption Data breaches 104

eSecurity Planet

SEPTEMBER 9, 2024

RansomHub used multiple vulnerabilities to launch ransomware attacks, emphasizing the critical need for updates and strong security measures. Organizations and end users need prompt patching and thorough security policies to protect systems and data from high-risk vulnerabilities.

Firmware 109

Firmware Backups Firewall Risk 109

eSecurity Planet

FEBRUARY 26, 2024

Organizations must prioritize implementing effective security measures and conducting frequent audits. To secure sensitive data, cybersecurity specialists, software vendors, and end users should encourage collaborative efforts against malicious activities. Attackers were seen attempting to disable security plug-ins.

Risk 113

Risk Authentication System Administration Ransomware 113

eSecurity Planet

SEPTEMBER 16, 2024

September 9, 2024 RAMBO Attack Exploits Radio Signals to Steal Sensitive Data Type of vulnerability: Side-channel attack. The problem: Progress Software has published fixes to solve CVE-2024-7591 , a significant incorrect input validation flaw in LoadMaster and Multi-Tenant Hypervisor rated CVSS 10.0.

Software 108

Software Malware System Administration Encryption 108

eSecurity Planet

JULY 15, 2024

To reduce the risks caused by these vulnerabilities, affected users should apply patches, upgrade software, and strengthen security measures as soon as possible. July 8, 2024 Four Unpatched Flaws Discovered in Gogs Type of vulnerability: Multiple, including argument injection and file deletion.

Authentication 109

Authentication Backups Software Risk 109

eSecurity Planet

DECEMBER 20, 2023

Attack surface management (ASM) is a relatively new cybersecurity technology that combines elements of vulnerability management and asset discovery with the automation capabilities of breach and attack simulation (BAS) and applies them to an organization’s entire IT environment, from networks to the cloud.

Software 113

Software Risk Architecture Internet 113

eSecurity Planet

FEBRUARY 5, 2024

Critical multi-platform vulnerabilities impacting diverse systems dominated the past week’s cybersecurity headlines. January 29, 2024 Juniper Releases Updates for Critical RCE Vulnerabilities Type of vulnerability: Missing authentication flaw and cross-site scripting (XSS) vulnerability. Both affect J-Web and all Junos OS versions.

Risk 113

Risk Penetration Testing Authentication Software 113

eSecurity Planet

JULY 29, 2024

July 23, 2024 CISA Adds Two Vulnerabilities to Catalog Type of vulnerability: Use-after-free and information disclosure. The problem: The Cybersecurity and Infrastructure Security Agency (CISA) just added two vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog. CVSS score.

Accountability 109

Accountability Internet Internet Software 109

eSecurity Planet

OCTOBER 8, 2024

Check your vendors’ security bulletins regularly, and make sure your team is prepared to fix vulnerabilities when they’re made known. October 2, 2024 Zimbra Email Servers Could See RCE Attacks Type of attack: Remote code execution. This flaw is tracked as CVE-2024-45519 and has a critical base score of 9.8. Kepler: version 9.0.0

Risk 109

Risk Malware Software Authentication 109

eSecurity Planet

APRIL 15, 2024

Last week’s cybersecurity incidents revealed significant vulnerabilities across multiple platforms. Typically, these vulnerabilities result in remote code execution or denial-of-service attacks, posing major dangers to users’ data security. Check out our article on SaaS security checklist and learn how to create one.

Firewall 109

Firewall VPN Software Risk 109

eSecurity Planet

OCTOBER 1, 2024

September 24, 2024 Upgrade WhatsApp Gold to Fix Six New Flaws Type of vulnerability: Not yet specified. Progress Software, which owns WhatsApp Gold, released a security bulletin advising customers to upgrade their WhatsApp Gold instances to version 24.0.1. The vulnerability is tracked as CVE-2024-7593 and has a severity rating of 9.8.

Authentication 109

Authentication Software DNS Internet 109

eSecurity Planet

MARCH 19, 2024

March 8, 2024 150,000 Fortinet Secure Web Gateways Remain Exposed Type of vulnerability: Arbitrary code execution (ACE). The problem: The FortiOS SSL VPN feature vulnerability, CVE-2024-21762, disclosed February 8th , remains exposed to attack on nearly 150,000 devices according to the ShadowServer Foundation website.

Authentication 119

Authentication VPN Software DDOS 119

eSecurity Planet

JUNE 18, 2024

Additionally, if you’re an Ivanti customer or use other products that frequently appear in our recaps and in security news, pay particularly careful attention. You’ll want to check for product security updates a couple of times a week. The fix: Upgrade your Pixel device to the most recent security update.

Firmware 113

Firmware Authentication Ransomware Software 113

eSecurity Planet

APRIL 29, 2024

April 22, 2024 CISA Adds 2022 Windows Print Spooler Vulnerability to KEV Catalog Type of vulnerability: Elevation of privilege. The exploitation disclosure led the US Cybersecurity Infrastructure and Security Agency (CISA) to add the vulnerability to the known exploited vulnerabilities (KEV) catalog. The problem: The CVSS 10.0/10.0

Firewall 113

Firewall Software Ransomware Penetration Testing 113

eSecurity Planet

JANUARY 12, 2024

For enhanced security and threat detection, consider integrating SIEM tools with your cloud log management. Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Technology 117

Technology Encryption Threat Detection Marketing 117

eSecurity Planet

JUNE 20, 2024

Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices. Subscribe The post Keeper vs Bitwarden (2024): Benefits & Features Compared appeared first on eSecurity Planet.

Password Management 107

Password Management Passwords Authentication Accountability 107

eSecurity Planet

AUGUST 14, 2024

Its open-source nature and robust encryption capabilities have made it a staple in many organizations’ and individuals’ security arsenals. In March 2024, Microsoft reported the discovery to OpenVPN through Coordinated Vulnerability Disclosure (CVD) via Microsoft Security Vulnerability Research (MSVR).

Identity Theft 113

Identity Theft Data breaches Risk Internet 113

eSecurity Planet

JUNE 21, 2024

Explore the different types of network security protection strategies to add more layers of protection against potential attacks and breaches. Get the Free Cybersecurity Newsletter Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Password Management 103

Password Management Passwords Encryption VPN 103

eSecurity Planet

MARCH 11, 2024

And all IT and security teams should follow vulnerability news for vendor bulletins and updates. March 4, 2024 JetBrains Server Issues Continue with New Vulnerabilities Type of vulnerability: Authentication bypass. The more severe CVE-2024-27198 allows a threat actor to take over the entire server. and iPadOS 17.4.

Authentication 109

Authentication Software VPN Security Defenses 109

eSecurity Planet

FEBRUARY 12, 2024

Make sure your security teams consistently check vendor bulletins for vulnerability announcements so your business can stay on top of all threats. February 5, 2024 JetBrains TeamCity Saga Continues with Another Server Vulnerability Type of vulnerability: Authentication bypass by an unauthenticated attacker. Connect Secure 9.1R17.3

VPN 109

VPN Authentication Software Firewall 109

eSecurity Planet

AUGUST 27, 2024

Make sure your security teams know their specific role in that process, and have frequent conversations about vulnerabilities so everyone knows what’s going on both in your infrastructure and in the industry overall. August 19, 2024 Critical WordPress Vulnerability Jeopardizes Millions of Sites Type of vulnerability: Privilege escalation.

Authentication 104

Authentication Firewall Software Security Defenses 104

eSecurity Planet

MARCH 4, 2024

February 26, 2024 FCKeditor Used for SEO Poisoning on Government, University Sites Type of vulnerability: Malicious URL redirect. February 27, 2024 Ransomware Gangs Target Unpatched ScreenConnect Servers Type of vulnerability: Authentication bypass and path traversal.

IoT 117

IoT Internet Internet Ransomware 117

eSecurity Planet

SEPTEMBER 21, 2023

In a blockbuster deal that could shake up the cybersecurity market, Cisco announced this morning that it will acquire Splunk for $28 billion. Cisco too has also lost ground to more nimble cybersecurity competitors but still boasts a strong customer base thanks to its networking dominance.

Marketing 98

Marketing Threat Detection Cybersecurity Security Defenses 98

eSecurity Planet

AUGUST 13, 2024

Look at our rundown, and make sure your security teams are apprised of any relevant vulnerabilities from this past week’s news. August 5, 2024 Another Apache OfBiz Vulnerability to Watch Type of vulnerability: Remote code execution. August 12, 2024 OpenSSH Flaw Opens the Door for RCE Type of vulnerability: Remote code execution.

Firmware 109

Firmware Software Wireless Security Defenses 109

eSecurity Planet

JUNE 3, 2024

Check your vendors’ security bulletins regularly, and make sure your team is following security news to patch issues as soon as they arise. May 28, 2024 Check Point VPN Zero-Day Vulnerability Requires Hotfix Type of attack: Information disclosure zero-day.

VPN 109

VPN Authentication Passwords Software 109

eSecurity Planet

JANUARY 29, 2024

January 19, 2024 Critical VMware vCenter Server Zero-Day Under Attack Since 2021 Type of vulnerability: Remote code execution (RCE) vulnerability. January 22, 2024 Apple Fixes 16 Vulnerabilities, Including Exploited Zero Days Type of vulnerability: A type confusion issue enables arbitrary code execution (ACE) attacks.

Software 113

Software Authentication CSO Accountability 113

eSecurity Planet

JANUARY 8, 2024

Here’s a roundup of the week’s major vulnerabilities that security teams should mitigate or patch. January 3, 2024 52% of Exposed SSH Servers Vulnerable to Terrapin Attack Type of attack: Secure Shell (SSH) vulnerability enables prefix truncation attacks. For CVE-2023-7024, update to the latest version of Chrome.

Encryption 109

Encryption Security Defenses Cybersecurity Internet 109

eSecurity Planet

AUGUST 13, 2024

Look at our rundown, and make sure your security teams are apprised of any relevant vulnerabilities from this past week’s news. August 5, 2024 Another Apache OfBiz Vulnerability to Watch Type of vulnerability: Remote code execution. August 12, 2024 OpenSSH Flaw Opens the Door for RCE Type of vulnerability: Remote code execution.

Firmware 104

Firmware Software Wireless Security Defenses 104

eSecurity Planet

AUGUST 20, 2024

Happy patching, and don’t forget to watch your vendors’ security feeds consistently. August 12, 2024 Ivanti Runs Into Snag With Virtual Traffic Manager Type of vulnerability: Authentication bypass. The vendor didn’t notice any active exploits when it released the security notice. a critical rating.

Authentication 106

Authentication Firmware Technology Software 106

SecureList

NOVEMBER 25, 2024

In this article in the KSB series, we review the trends of the past year, reflect on the predictions we made for 2024 , and offer insights into what we can expect in 2025. As expected, we continued to observe attacks in 2024 involving exploits for Apple devices. For instance, in Q2 2024, we saw a 23% increase in BYOVD usage.

IoT 119

IoT Energy and Utilities Phishing Cryptocurrency 119

eSecurity Planet

FEBRUARY 2, 2024

Teslas have plenty of vulnerabilities, as cybersecurity researchers have recently discovered. Rapid7’s Zero Day Initiative hosts an event called Pwn2Own, and at the 2023 event, computer security firm Synactiv hacked a Tesla computer within two minutes. Physical premises security is important for cybersecurity as well.

Hacking 125

Hacking IoT Firmware Cybersecurity 125

eSecurity Planet

JUNE 18, 2024

Rural hospitals face a unique challenge altogether — a lack of resources to invest in robust cybersecurity solutions, leaving their systems and patient data exposed. This new initiative aims to bolster cybersecurity defenses in these facilities by providing them with access to discounted (up to 75%) and even free cybersecurity solutions.

Cybersecurity 67

Cybersecurity Healthcare Computers and Electronics Data breaches 67