Tech Republic Security

DECEMBER 25, 2023

Save on tech services or switch to a lucrative new tech career in 2024 by training at your own pace to develop high-demand cybersecurity skills. On sale from 12/26 through 1/1.

Cybersecurity 199

Cybersecurity Hacking 199

Bleeping Computer

DECEMBER 25, 2023

​The source code for Grand Theft Auto 5 was reportedly leaked on Christmas Eve, a little over a year after the Lapsus$ threat actors hacked Rockstar games and stole corporate data. [.

Hacking 139

Hacking 139

Security Affairs

DECEMBER 25, 2023

The threat actor UAC-0099 is exploiting a flaw in the WinRAR to deliver LONEPAGE malware in attacks against Ukraine. A threat actor, tracked as UAC-0099, continues to target Ukraine. In some attacks, the APT group exploited a high-severity WinRAR flaw CVE-2023-38831 to deliver the LONEPAGE malware. UAC-0099 threat actor has targeted Ukraine since mid-2022, it was spotted targeting Ukrainian employees working for companies outside of Ukraine.

Malware 137

Malware Phishing Media Hacking 137

Penetration Testing

DECEMBER 25, 2023

In the intricate world of cybersecurity, Barracuda Networks has faced a formidable challenge with the discovery of two zero-day vulnerabilities, CVE-2023-7102 and CVE-2023-7101, both linked to the Spreadsheet::ParseExcel library. These vulnerabilities, stemming from an... The post CVE-2023-7102: A zero-day flaw affects Barracuda Email Security Gateway appeared first on Penetration Testing.

Penetration Testing 108

Penetration Testing Cybersecurity 108

Advertisement

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

Cybersecurity

Malwarebytes

DECEMBER 25, 2023

Last week on Malwarebytes Labs: Comcast’s Xfinity breached by Citrix Bleed; 36 million customer’s data accessed How does ThreatDown Vulnerability Assessment and Patch Management work? How Outlook notification sounds can lead to zero-click exploits Update Chrome now! Emergency update patches zero-day US pharmacy Rite Aid banned from operating facial recognition systems Webinar recap: Ransomware gangs and Living Off The Land attacks (LOTL) FBI issues advisory over Play ransomware New MetaStealer m

Data breaches 91

Data breaches Ransomware 91

Penetration Testing

DECEMBER 25, 2023

Indian governmental structures and the defense sector have become the targets of a sophisticated hacker attack, leveraging phishing techniques and malicious software based on Rust for intelligence gathering. Dubbed Operation RusticWeb, this campaign, uncovered... The post Phishing for Secrets: Operation RusticWeb Casts Net on Indian Officials appeared first on Penetration Testing.

Phishing 96

Phishing Penetration Testing Software Malware 96

Penetration Testing

DECEMBER 25, 2023

The ransomware group Akira has declared responsibility for the recent cyberattack on the systems of Nissan in Australia and New Zealand. The hackers claim to have exfiltrated over 100 GB of documents from the... The post 100GB of Secrets Seized: Akira Claims Responsibility for Nissan Cyberattack appeared first on Penetration Testing.

Penetration Testing 92

Penetration Testing Ransomware Malware 92

Security Boulevard

DECEMBER 25, 2023

Sophisticated Internet of Things (IoT) technologies transformed the cybersecurity systems in financial services. They’re continuously evolving and improving. Take credit cards as an example—commercial banks significantly cut the risk of skimming by replacing magstripe cards with chip-and-PIN cards. But despite these advancements, fraudsters remain at large.

IoT 73

IoT Financial Services Banking Internet 73

Penetration Testing

DECEMBER 25, 2023

In the shadowy realms of cyber warfare, a new and alarming phishing campaign emerges, orchestrated by the notorious UAC-0050 group. This campaign, marked by its precision and malign intent, targets Ukraine’s public and private... The post UAC-0050 Phishing Steals Data from Ukrainian & Polish Agencies appeared first on Penetration Testing.

Phishing 84

Phishing Penetration Testing Malware 84

Security Boulevard

DECEMBER 25, 2023

The vulnerabilities in our digital infrastructure are coming to light due to our unrelenting pursuit of technical improvement. Chip manufacturers Arm and Qualcomm were recently the targets of targeted attacks that revealed serious zero-day vulnerabilities in their chips. The hour’s importance has come to review how we handle cybersecurity as the digital world keeps changing. […] The post Time to Rethink Cybersecurity?

Cybersecurity 67

Cybersecurity Manufacturing Cyber Attacks 67

Advertiser: Revenera

In a recent study, IDC found that 64% of organizations said they were already using open source in software development with a further 25% planning to in the next year. Most organizations are unaware of just how much open-source code is used and underestimate their dependency on it. As enterprises grow the use of open-source software, they face a new challenge: understanding the scope of open-source software that's being used throughout the organization and the corresponding exposure.

Risk

Penetration Testing

DECEMBER 25, 2023

In the ever-evolving world of cybersecurity, new threats constantly emerge, challenging the vigilance of digital defenders. Recently, the cybersecurity landscape witnessed a sophisticated Nim-based campaign, masterminded to exploit the vulnerabilities of unsuspecting online platforms.... The post Hidden in Plain Sight: Nim Backdoor Lurks, Netskope Exposes Cyber Game appeared first on Penetration Testing.

Penetration Testing 79

Penetration Testing Cybersecurity Malware 79

Security Boulevard

DECEMBER 25, 2023

Yahoo DMARC guidelines for 2024 now includes a strong recommendation for the DMARC RUA tag. Here’s how to enable it for your domains! The post Yahoo “Strongly” Recommends DMARC RUA Tag for Bulk Senders appeared first on Security Boulevard.

Cybersecurity 67

Cybersecurity 67

Penetration Testing

DECEMBER 25, 2023

French video game developer Ubisoft has once again fallen victim to a cyberattack. On the morning of December 22, 2023, a security research team shared screenshots allegedly from Ubisoft’s internal services. Ubisoft subsequently acknowledged... The post Ubisoft Hit by New Data Breach appeared first on Penetration Testing.

Data breaches 77

Data breaches Penetration Testing 77

Security Boulevard

DECEMBER 25, 2023

Understanding Zero Trust Traditionally, cybersecurity operated on a simple principle: trust what’s inside, be wary of what’s outside. This model assumed that once someone or something gained access to your network, they could be trusted as long as they were within the walls of your digital fortress. However, the changing digital landscape, characterized by remote […] The post Why a Zero Trust Security Policy Matters and Steps to Implementation appeared first on Centraleyes.

Cybersecurity 67

Cybersecurity 67

Advertisement

Within the past few years, ransomware attacks have turned to critical infrastructure, healthcare, and government entities. Attackers have taken advantage of the rapid shift to remote work and new technologies. Add to that hacktivism due to global conflicts and U.S. elections, and an increased focus on AI, and you have the perfect recipe for a knotty and turbulent 2024.

Cybersecurity

Penetration Testing

DECEMBER 25, 2023

In the realm of telecommunication, a new vulnerability, CVE-2023-51443, has emerged, casting a shadow over FreeSWITCH, an open-source communication framework integral to many of the world’s telephony infrastructures. Maintained by SignalWire, FreeSWITCH is crucial... The post 5,000 Businesses Exposed: Critical FreeSWITCH Flaw Urges Immediate Patching appeared first on Penetration Testing.

Penetration Testing 75

Penetration Testing Telecommunications 75

Security Boulevard

DECEMBER 25, 2023

I have been an active volunteer as part of corporate medical response teams for more than 20 years of my career. It has never been my primary job, but I like having the skills to help when really bad things happen in life. Such corporate teams bring like minded people together to assist when others are in medical need. Over the decades, I have responded to hundreds of events, ranging from automobile accidents, heart attacks, severed limbs, breathing problems, and allergic reactions.

62

62

Penetration Testing

DECEMBER 25, 2023

Europol, in collaboration with law enforcement agencies from 17 countries, undertook a concerted effort to notify 443 online retailers about the compromise of their customers’ payment card data. During a two-month operation led by... The post 443 Websites Infected: EuroPol Urges Caution After Global Skimmer Ring Exposed appeared first on Penetration Testing.

Penetration Testing 74

Penetration Testing Retail 74

Security Boulevard

DECEMBER 25, 2023

Understanding the Basic Concept of VLANs Virtual Local Area Networks, or VLANs, serve as a critical computing technology designed for effective network traffic management. These are subsets within a Local Area Network (LAN) that partition the network into multiple distinct segments or domains. Why use a VLAN? Utilizing VLANs allows network administrators to group network … Why Use a VLAN?

Network Security 62

Network Security Technology 62

Advertisement

The healthcare industry has massively adopted web tracking tools, including pixels and trackers. Tracking tools on user-authenticated and unauthenticated web pages can access personal health information (PHI) such as IP addresses, medical record numbers, home and email addresses, appointment dates, or other info provided by users on pages and thus can violate HIPAA Rules that govern the Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates.

Healthcare

Penetration Testing

DECEMBER 25, 2023

In the dynamic realm of cybersecurity, the discovery of RetSpill marks a significant evolution in Linux kernel exploitation. This technique leverages a control flow hijacking primitive to escalate privileges, a feat increasingly challenging due... The post Patch Alert: RetSpill Vulnerability Opens Backdoor in Millions of Linux Machines appeared first on Penetration Testing.

Penetration Testing 71

Penetration Testing Cybersecurity 71

Security Boulevard

DECEMBER 25, 2023

Recent events have brought to light the Ledger supply chain breach, a cybercrime incident that led to the theft of $600,000 in virtual assets. For those who don’t know, Ledger is a company that develops hardware and software-based cryptocurrency wallets. Recent reports state that the cryptocurrency wallet security breach was a consequence experienced as a […] The post Ledger Supply Chain Breach: $600,000 Theft Unveiled appeared first on TuxCare.

Cryptocurrency 57

Cryptocurrency Cybercrime Software Accountability 57

Penetration Testing

DECEMBER 25, 2023

In the ever-evolving landscape of cybersecurity, Doctor Web’s November 2023 virus activity review offers an intriguing glimpse into the shifting nature of digital threats. This comprehensive analysis reveals a notable decrease in the overall... The post Virus Retreat: November Sees 18% Drop in Threats Detected by Dr.Web appeared first on Penetration Testing.

Threat Detection 69

Threat Detection Penetration Testing Cybersecurity Malware 69

Security Boulevard

DECEMBER 25, 2023

Vim, a powerful and widely used text editor, has recently come under scrutiny due to several vulnerabilities that could potentially compromise system security. In this article, we will delve into the intricacies of these vulnerabilities, exploring their impact and the affected versions of Ubuntu. Understanding these issues is crucial for users to take prompt action […] The post Ubuntu Security Updates Fixed Vim Vulnerabilities appeared first on TuxCare.

57

57

Advertisement

The losses companies suffered in 2023 ransomware attacks increased by 74% compared to those of the previous year, according to new data from the Federal Bureau of Investigation (FBI). The true figure is likely to be even higher, though, as many identity theft and phishing attacks go unreported. Ransomware attackers can potentially paralyze not just private sector organizations but also healthcare facilities, schools, and entire police departments.

Identity Theft

Penetration Testing

DECEMBER 25, 2023

According to the cyber intelligence platform FalconFeedsio, an emerging Iranian hacking group named Cyber Toufan recently disclosed stolen data from 49 Israeli companies. Experts believe this mass data theft stemmed from the breach of... The post 1 Hosting Hack, 40 Israeli Leaks: Cyber Toufan’s Shadowy Strike appeared first on Penetration Testing.

Penetration Testing 65

Penetration Testing Hacking 65

Centraleyes

DECEMBER 25, 2023

Understanding Zero Trust Traditionally, cybersecurity operated on a simple principle: trust what’s inside, be wary of what’s outside. This model assumed that once someone or something gained access to your network, they could be trusted as long as they were within the walls of your digital fortress. However, the changing digital landscape, characterized by remote workforces, cloud-based applications, and interconnections with countless external systems, has shattered this once-solid

Authentication 52

Authentication Architecture Cyber threats Accountability 52

Security Boulevard

DECEMBER 25, 2023

The post Merry Little Christmas appeared first on Security Boulevard.

57

57

Security Affairs

DECEMBER 25, 2023

Microsoft reports that the Iran-linked APT33 group is targeting defense contractors worldwide with FalseFont backdoor. Microsoft says the APT33 (aka Peach Sandstorm , Holmium , Elfin , and Magic Hound ) Iranian cyber-espionage group is using recently discovered FalseFont backdoor malware to attack against organizations in the Defense Industrial Base (DIB) sector. “Microsoft has observed the Iranian nation-state actor Peach Sandstorm attempting to deliver a newly developed backdoor named

Passwords 132

Passwords Accountability Authentication Malware 132

Speaker: Blackberry, OSS Consultants, & Revenera

Software is complex, which makes threats to the software supply chain more real every day. 64% of organizations have been impacted by a software supply chain attack and 60% of data breaches are due to unpatched software vulnerabilities. In the U.S. alone, cyber losses totaled $10.3 billion in 2022. All of these stats beg the question, “Do you know what’s in your software?

Cybersecurity