Schneier on Security

MARCH 25, 2025

This person received an Apple threat notification in November 2024, but no WhatsApp notification. Our analysis showed an attempt to infect the device with novel spyware in June 2024. We shared details with Apple, who confirmed they had patched the attack in iOS 18. Other Surveillance Tech Deployed Against The Same Italian Cluster.

Spyware 225

Spyware Surveillance Technology 225

Security Boulevard

DECEMBER 31, 2024

The FIDO Alliance found in a survey that as consumers become more familiar with passkeys, they are adopting the technology as a more secure alternative to passwords to authenticate their identities online. The post Best of 2024: FIDO: Consumers are Adopting Passkeys for Authentication appeared first on Security Boulevard.

Authentication 105

Authentication Passwords Technology 105

The Last Watchdog

MAY 23, 2024

By the same token, AppSec technology is advancing apace to help companies meet this challenge. We also had a lively sidebar about the lessons security vendors are learning as they race to integrate GenAI and LLM technology into their respective solutions. AppSec has never been more challenging.

Technology 278

Technology Antivirus Marketing Internet 278

Krebs on Security

DECEMBER 3, 2024

Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a small number of new generic top-level domains (gTLDs) — such as.shop ,top ,xyz — that attract scammers with rock-bottom prices and no meaningful registration requirements, new research finds.

Cybercrime 298

Cybercrime Phishing Accountability Internet 298

Google Security

MARCH 7, 2025

Posted by Dirk Ghmann In 2024, our Vulnerability Reward Program confirmed the ongoing value of engaging with the security research community to make Google and its products safer. Chrome Chrome did some remodeling in 2024 as we updated our reward amounts and structure to incentivize deeper research. million in total.

Mobile 103

Mobile Hacking Engineering Technology 103

Security Affairs

FEBRUARY 13, 2025

Researchers at cybersecurity firm Resecurity detected a rise in cyberattacks targeting UAV and counter-UAV technologies. Resecurity identified an increase in malicious cyber activity targeting UAV and counter-UAV (C-UAV/C-UAS) technologies.

Technology 89

Technology Surveillance Manufacturing Cyber threats 89

SecureList

FEBRUARY 20, 2025

Kaspersky Managed Detection and Response service (MDR) provides round-the-clock monitoring and threat detection, based on Kaspersky technologies and expertise. For organizations with in-house security operations teams, internal processes and technologies must be equipped to handle the modern threat landscape. in IT, 18.3% in IT, 18.3%

Social Engineering 101

Social Engineering Phishing Government Threat Detection 101

Lohrman on Security

JANUARY 12, 2025

What were the top government technology and cybersecurity blog posts in 2024? The metrics tell us what cybersecurity and technology infrastructure topics were most popular.

Technology 207

Technology Government Cybersecurity 207

SecureList

NOVEMBER 29, 2024

IT threat evolution in Q3 2024 IT threat evolution in Q3 2024. Non-mobile statistics IT threat evolution in Q3 2024. Mobile statistics Targeted attacks New APT threat actor targets Russian government entities In May 2024, we discovered a new APT targeting Russian government organizations.

Energy and Utilities 106

Energy and Utilities Ransomware Malware Government 106

Security Affairs

NOVEMBER 4, 2024

The July 2024 ransomware attack that hit the City of Columbus, Ohio, exposed the personal and financial data of 500,000 individuals. On July 18, 2024, the City of Columbus, Ohio, suffered a cyber attack that impacted the City’s services. ” reads the update published by the City.

Ransomware 116

Ransomware Identity Theft Data breaches Cyber threats 116

Lohrman on Security

JUNE 9, 2024

Over the past month, the Verizon Data Breach Investigation Report and the Watchguard Technologies Internet Security Report were released. Here are some highlights.

Data breaches 296

Data breaches Internet Internet Technology 296

SecureList

MARCH 25, 2025

Key findings Phishing Banks were the most popular lure in 2024, accounting for 42.58% of financial phishing attempts. Amazon Online Shopping was mimicked by 33.19% of all phishing and scam pages targeting online store users in 2024. Cryptocurrency phishing saw an 83.37% year-over-year increase in 2024, with 10.7

Phishing 83

Phishing Banking Scams Mobile 83

Joseph Steinberg

JANUARY 30, 2024

They will then shift our focus to the future, and help us forecast for 2024 with a forward-thinking exploration of anticipated cybersecurity challenges and advancements. Steinberg and Liwer will analyze the potential impact of emerging technologies, legislative changes, and geopolitical events on the cybersecurity landscape.

Artificial Intelligence 269

Artificial Intelligence Cybersecurity Cyber threats Technology 269

The Last Watchdog

AUGUST 12, 2024

LAS VEGAS – Here’s what I discovered last week here at Black Hat USA 2024 : GenAI is very much in the mix as a potent X-factor in cybersecurity. This is all part of Generative AI and Large Language Models igniting the next massive technological disruption globally. AppSec technology security-hardens software at the coding level.

Software 290

Software Technology Mobile Cybersecurity 290

Security Affairs

DECEMBER 18, 2024

Researchers warn that threat actors are attempting to exploit a recently disclosed Apache Struts vulnerability CVE-2024-53677. Researchers warn that threat actors are attempting to exploit the vulnerability CVE-2024-53677 (CVSS score of 9.5) “The vulnerability, CVE-2024-53677, appears to be related to CVE-2023-50164.

Hacking 80

Hacking Technology Software Information Security 80

Krebs on Security

DECEMBER 11, 2024

An analysis of their technology infrastructure shows that all of these exchanges use Russian email providers, and most are directly hosted in Russia or by Russia-backed ISPs with infrastructure in Europe (e.g. A machine-translated version of Flymoney, one of dozens of cryptocurrency exchanges apparently nested at Cryptomus. ”

Cryptocurrency 287

Cryptocurrency Banking Cybercrime Advertising 287

Malwarebytes

DECEMBER 27, 2024

And as long as we have been waiting for AI technology to become commonplace, if AI has taught us one thing this year, then its that when humans and AI cooperate, amazing things can happen. As with many developing technologies, sometimes the race to stay ahead is more important than security. But amazing is not always positive.

Scams 117

Scams Media Artificial Intelligence Technology 117

The Last Watchdog

DECEMBER 13, 2023

I had the opportunity to sit down with DigiCert’s Jason Sabin , Chief Technology Officer and Avesta Hojjati , Vice President of Engineering to chew this over. We drilled down on a few significant developments expected to play out in 2024 and beyond. And PKI is the best technology we’ve got to get us there.

Encryption 311

Encryption Technology CISO IoT 311

Security Boulevard

NOVEMBER 1, 2024

Keep Your Organization Safe with Up-to-Date CVE Information Cybersecurity vulnerability warnings from the National Institute of Standards and Technology (NIST) continue to identify critical concerns. The post Cybersecurity Vulnerability News: October 2024 CVE Roundup appeared first on TrueFort.

Cybersecurity 64

Cybersecurity Technology Risk 64

Malwarebytes

NOVEMBER 6, 2024

If your Android phone shows patch level 2024-11-05 or later then the issues discussed below have been fixed. The CVEs that look the most important are: CVE-2024-43047 : a high-severity use-after-free issue in closed-source Qualcomm components within the Android kernel that elevates privileges.

Encryption 137

Encryption Mobile Technology Software 137

Responsible Cyber

NOVEMBER 23, 2024

Overview of Vendor Breaches in 2024 In 2024, the cybersecurity landscape has faced an alarming rise in vendor-related breaches, underscoring the vulnerabilities associated with third-party service providers. A common characteristic among the vendor breaches reported in 2024 is the exploitation of weak security protocols.

Risk 81

Risk Healthcare Education Cybersecurity 81

Security Affairs

OCTOBER 20, 2024

Technology firm F5 patches a high-severity elevation of privilege vulnerability in BIG-IP and a medium-severity flaw in BIG-IQ. F5 addressed two vulnerabilities in BIG-IP and BIG-IQ enterprise products, respectively tracked as CVE-2024-45844 and CVE-2024-47139. There is no data plane exposure; this is a control plane issue only.”

Authentication 138

Authentication Hacking Technology Information Security 138

The Last Watchdog

OCTOBER 23, 2024

22, 2024, CyberNewswire — INE Security offers essential advice to protect digital assets and enhance security. As small businesses increasingly depend on digital technologies to operate and grow, the risks associated with cyber threats also escalate. Cary, NC, Oct.

Small Business 162

Small Business Data breaches Backups Passwords 162

The Last Watchdog

MAY 13, 2024

Secretary of State Antony Blinken opened RSA Conference 2024 last week issuing a clarion call for the cybersecurity community to defend national security, nurture economic prosperity and reinforce democratic values. Today’s revolutions in technology are at the heart of our competition with geopolitical rivals,” Blinken said.

Artificial Intelligence 278

Artificial Intelligence Technology Accountability DNS 278

The Last Watchdog

FEBRUARY 11, 2025

11, 2025, CyberNewswire — Gcore , the global edge AI, cloud, network, and security solutions provider, today announced the findings of its Q3-Q4 2024 Radar report into DDoS attack trends. DDoS attacks have reached unprecedented scale and disruption in 2024, and businesses need to act fast to protect themselves from this evolving threat.

DDOS 130

DDOS Financial Services Technology Accountability 130

Krebs on Security

AUGUST 27, 2024

26, Versa urged customers to deploy a patch for the vulnerability ( CVE-2024-39717 ), which the company said is fixed in Versa Director 22.1.4 ISP on June 12, 2024. In January 2024, the U.S. In a security advisory published Aug. Versa said the weakness allows attackers to upload a file of their choosing to vulnerable systems.

Internet 341

Internet Internet Technology Engineering 341

The Last Watchdog

DECEMBER 12, 2023

What should I be most concerned about – and focus on – in 2024? In 2024, we will see more targeted, sophisticated business email compromise (BEC) attacks, including VIP impersonation, vendor email compromise (VEC), and autonomous agents used for malicious purposes. The comments we received were uniformly insightful and helpful.

Cybersecurity 258

Cybersecurity Social Engineering Cyber threats Software 258

Security Affairs

OCTOBER 21, 2024

“ Hello BreachForums Community , Today, I am selling the Cisco breach that recently happened (6/10/2024)” reads the message published by IntelBroker. DevHub is a platform designed for developers to access resources, tools, and APIs to build and integrate applications with Cisco’s technologies.

Cybercrime 133

Cybercrime Data breaches Technology Banking 133

Security Affairs

OCTOBER 25, 2024

The vulnerability CVE-2024-20481 (CVSS score of 5.8) Now the company confirmed that the flaw CVE-2024-20481 is actively exploited in the wild. Recently, tesearchers from Positive Technologies warned that unknown threat actors have attempted to exploit the now-patched vulnerability CVE-2024-37383 (CVSS score: 6.1)

VPN 114

VPN Firewall Technology Passwords 114

The Hacker News

MAY 14, 2025

A cyber espionage group known as Earth Ammit has been linked to two related but distinct campaigns from 2023 to 2024 targeting various entities in Taiwan and South Korea, including military, satellite, heavy industry, media, technology, software services, and healthcare sectors.

Healthcare 103

Healthcare Media Software Technology 103

Security Affairs

NOVEMBER 23, 2024

International Game Technology (IGT) detected a cyberattack on November 17, the company promptly started its incident response procedures. International Game Technology PLC (IGT), formerly Gtech S.p.A. is a multinational gambling company that produces slot machines and other gambling technology. and Lottomatica S.p.A.,

Technology 131

Technology Hacking Ransomware Cybersecurity 131

Krebs on Security

APRIL 30, 2025

Scattered Spider is a loosely affiliated criminal hacking group whose members have broken into and stolen data from some of the world’s largest technology companies. Tyler Buchanan, being escorted by Spanish police at the airport in Palma de Mallorca in June 2024. As first reported by KrebsOnSecurity, Buchanan (a.k.a.

Identity Theft 194

Identity Theft Phishing Cryptocurrency Cybercrime 194

Security Affairs

DECEMBER 30, 2024

On Wednesday, December 25, 2024, at 17:07 EST, the threat actor IntelBroker posted on X about releasing more data. We have analyzed the post data, and it aligns with the known data set from October 14, 2024.” At 17:40 EST, IntelBroker released 4.45 GB of data for free on BreachForums. ” reads the update published by Cisco.

Data breaches 126

Data breaches Cybercrime Authentication Technology 126

Thales Cloud Protection & Licensing

OCTOBER 11, 2024

divya Fri, 10/11/2024 - 08:54 As user expectations for secure and seamless access continue to grow, the 2024 Thales Consumer Digital Trust Index (DTI) research revealed that 65% of users feel frustrated with frequent password resets. Passwordless Authentication without Secrets! To learn more about how Thales OneWelcome and Badge, Inc.

Authentication 132

Authentication Retail Healthcare Manufacturing 132

Joseph Steinberg

APRIL 28, 2024

CyberSecurity Expert Joseph Steinberg, will join the faculty of Columbia University for the upcoming Summer 2024 semester. The post CyberSecurity Expert Joseph Steinberg To Lecture At Columbia University appeared first on Joseph Steinberg: CyberSecurity Expert Witness, Privacy, Artificial Intelligence (AI) Advisor.

Artificial Intelligence 278

Artificial Intelligence Cybersecurity Technology 278

Krebs on Security

NOVEMBER 21, 2024

technology companies between 2021 and 2023, including LastPass , MailChimp , Okta , T-Mobile and Twilio. In January 2024, KrebsOnSecurity broke the news that Urban had been arrested in Florida in connection with multiple SIM-swapping attacks. police as part of an FBI investigation into the MGM hack.

Identity Theft 267

Identity Theft Phishing Cryptocurrency Accountability 267

Security Affairs

JANUARY 17, 2025

ESET disclosed details of a now-patched vulnerability, tracked as CVE-2024-7344 (CVSS score: 6.7), that could allow a bypass of the Secure Boot mechanism in UEFI systems. The vulnerability CVE-2024-7344 affects the UEFI application of several real-time system recovery software suites developed by Howyar Technologies Inc.,

Firmware 110

Firmware Technology Software Manufacturing 110