Penetration Testing

FEBRUARY 10, 2024

A proof-of-concept (PoC) exploit code and technical details have been made available for a zero-day security flaw, tracked as CVE-2022-4262 (CVSS 8.8), affecting Google Chrome. The heart of this vulnerability lies within the Chrome... The post Google Chrome Zero-Day PoC Code Released appeared first on Penetration Testing.

Penetration Testing 145

Penetration Testing 145

Security Affairs

FEBRUARY 10, 2024

Bitdefender Researchers linked a new macOS backdoor, named RustDoor, to the Black Basta and Alphv/BlackCat ransomware operations. Researchers from Bitdefender discovered a new macOS backdoor, dubbed RustDoor, which appears to be linked to ransomware operations Black Basta and Alphv/BlackCat. RustDoor is written in Rust language and supports multiple features.

Ransomware 123

Ransomware Architecture Malware Passwords 123

Penetration Testing

FEBRUARY 10, 2024

Today, one of the internet giants, Namecheap has been hit by a series of DDoS attacks that threaten to disrupt its operations. Namecheap, an ICANN-accredited domain name registrar, and web hosting company, stands as... The post Breaking News: Namecheap Hit by DDoS Attacks appeared first on Penetration Testing.

DDOS 117

DDOS Penetration Testing Internet Internet 117

Security Affairs

FEBRUARY 10, 2024

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiOS bug to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Fortinet FortiOS Out-of-Bound write vulnerability, tracked as CVE-2024-21762 , to its Known Exploited Vulnerabilities (KEV) catalog. This week Fortinet warned that the recently discovered critical remote code execution vulnerability in FortiOS SSL VPN, tracked as CVE-2024-21762 (CVSS score

VPN 114

VPN Hacking Cybersecurity Risk 114

Advertisement

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

Cybersecurity

Penetration Testing

FEBRUARY 10, 2024

In the ever-evolving realm of software development, security remains at the forefront of priorities, especially when vulnerabilities are reported. Recently, the Electron development team faced a storm of concern following the disclosure of several... The post Electron Team Addresses “runAsNode” CVE Misconceptions appeared first on Penetration Testing.

Penetration Testing 116

Penetration Testing Software 116

Bleeping Computer

FEBRUARY 10, 2024

Recent versions of the Raspberry Robin malware are stealthier and implement one-day exploits that are deployed only on systems that are susceptible to them. [.

Malware 118

Malware 118

Bleeping Computer

FEBRUARY 10, 2024

By 2025, Britain is set to ditch physical immigration documents like Biometric Residence Permits (BRPs) and Biometric Residence Cards (BRCs) in a bid to make its borders digital, in-line with developed countries like Australia. Understand what these Home Office changes mean for existing BRP and BRC holders, and what you need to do. [.

91

91

Penetration Testing

FEBRUARY 10, 2024

A new menace emerged, dubbed “KV-botnet,” this sophisticated malware network was identified by Lumen’s Black Lotus Labs, revealing a covert operation that had infected small-office and home-office routers and firewall devices globally. The KV-botnet... The post The Invisible Threat: KV-botnet Infects SOHO Devices Worldwide appeared first on Penetration Testing.

Penetration Testing 100

Penetration Testing Firewall Malware 100

SecureBlitz

FEBRUARY 10, 2024

Here is the Surfshark CleanWeb review… Anyone would agree that browsing with ads at every scroll can be annoying. That’s why ad blockers are popular today. But imagine having a VPN plus ad blocker all in one? That’s what you get with Surfshark CleanWeb. Surfshark CleanWeb works as an ad blocker feature integrated into the […] The post Surfshark CleanWeb Review 2024: Ultimate Ad Blocker appeared first on SecureBlitz Cybersecurity.

VPN 83

VPN Cybersecurity 83

Penetration Testing

FEBRUARY 10, 2024

Security researcher Austin A. DeFrancesco, known as DEFCESCO, recently revealed a trio of vulnerabilities in KiTTY, a popular fork of the renowned PuTTY SSH and telnet client. With over 20 million downloads worldwide, KiTTY’s... The post KiTTY Triple Threat: Millions of Users Exposed to RCE Flaws, No Patch Available! appeared first on Penetration Testing.

Penetration Testing 97

Penetration Testing 97

Advertiser: Revenera

In a recent study, IDC found that 64% of organizations said they were already using open source in software development with a further 25% planning to in the next year. Most organizations are unaware of just how much open-source code is used and underestimate their dependency on it. As enterprises grow the use of open-source software, they face a new challenge: understanding the scope of open-source software that's being used throughout the organization and the corresponding exposure.

Risk

Security Boulevard

FEBRUARY 10, 2024

When I'm talking to bankers and other fraud fighters, I often mention how easy it is for a criminal to obtain a Drivers License bearing any information they desire. I was reminded of this again as I saw the sentencing of Desmond Nkwenya from Brookhaven, Georgia this week. The DOJ press release from the Eastern District of Virginia released 09FEB2024 was entitled " Four Members of Bank Fraud Ring Sentenced.

Banking 70

Banking Scams Accountability Identity Theft 70

WIRED Threat Level

FEBRUARY 10, 2024

Plus: China’s Volt Typhoon hackers lurked in US systems for years, the Biden administration’s crackdown on spyware vendors ramps up, and a new pro-Beijing disinformation campaign gets exposed.

Spyware 94

Spyware Hacking 94

Security Boulevard

FEBRUARY 10, 2024

The below list covers the key professional bodies and certifications to consider as part of an IT Audit career. Bear in mind that there are many different routes and the qualifications that are right for you will depend on your interests, professional background, current role, and goals. Academic study is also very valuable, in particular any bachelors or masters degree.

Accountability 62

Accountability Information Security Risk 62

Security Boulevard

FEBRUARY 10, 2024

Authors/Presenters: Lorenz Kustosch, Carlos Gañán, Mattis van 't Schip, Michel van Eeten, Simon Parkin Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott ; and via the organizations YouTube channel.

Manufacturing 62

Manufacturing IoT 62

Advertisement

Within the past few years, ransomware attacks have turned to critical infrastructure, healthcare, and government entities. Attackers have taken advantage of the rapid shift to remote work and new technologies. Add to that hacktivism due to global conflicts and U.S. elections, and an increased focus on AI, and you have the perfect recipe for a knotty and turbulent 2024.

Cybersecurity

Security Boulevard

FEBRUARY 10, 2024

I have spent a not-very-happy time this morning, besieged by Facebook group posts passed off as porn videos and trying to get rid of them. In fact, it’s unlikely that they’re either porn or videos: they’re bot postings of malicious links that are probably intended to steal credentials. It’s not just fake porn that infests […] The post Facebook fake videos appeared first on Security Boulevard.

Scams 109

Scams 109