Bleeping Computer

APRIL 17, 2024

Cisco has released patches for a high-severity Integrated Management Controller (IMC) vulnerability with public exploit code that can let local attackers escalate privileges to root. [.]

119

119

Tech Republic Security

APRIL 21, 2023

launched the Google Cloud Alliance this week with the goal of advancing digital security in the public sector. The post Google moves to keep public sector cybersecurity vulnerabilities leashed appeared first on TechRepublic. Google Cloud and The Center for Internet Security, Inc.,

Cybersecurity 192

Cybersecurity Cyber threats Internet Internet 192

Bleeping Computer

APRIL 11, 2024

Cybersecurity and Infrastructure Security Agency (CISA) has released a new version of "Malware Next-Gen," now allowing the public to submit malware samples for analysis by CISA. [.]

Malware 121

Malware Cybersecurity Government 121

Penetration Testing

MAY 6, 2024

Their... The post Major VPN Flaw Exposed: “TunnelVision” (CVE-2024-3661) Threatens Security on Public Networks appeared first on Penetration Testing.

VPN 126

VPN Penetration Testing 126

Schneier on Security

FEBRUARY 14, 2024

The winner of the Best Paper Award at Crypto this year was a significant improvement to lattice-based cryptanalysis. This is important, because a bunch of NIST’s post-quantum options base their security on lattice problems. I worry about standardizing on post-quantum algorithms too quickly.

255

255

Heimadal Security

OCTOBER 31, 2023

Canada’s largest public library system reported a cyberattack that took down its website, member services pages, and limited access to its digital collections. The Toronto Public Library provides more than 12 million items across 100 branches to more than 1.2 million members.

Cybersecurity 98

Cybersecurity 98

Schneier on Security

MAY 3, 2019

We need public-interest technologists. The Ford Foundation defines public-interest technologists as "technology practitioners who focus on social justice, the common good, and/or the public interest." We need public-interest technologists in policy discussions. Public-interest technology isn't new.

Cybersecurity 244

Cybersecurity Technology Government Internet 244

Penetration Testing

APRIL 25, 2024

The release of public PoC exploit code targeting a maximum severity zero-day flaw in Cisco IOS XE (CVE-2023-20198) has dramatically amplified the risk landscape for countless organizations worldwide.

Penetration Testing 108

Penetration Testing Risk 108

Schneier on Security

MARCH 5, 2019

We need public-interest technologists. The Ford Foundation defines public-interest technologists as "technology practitioners who focus on social justice, the common good, and/or the public interest." We need public-interest technologists in policy discussions. Public-interest technology isn't new.

Cybersecurity 230

Cybersecurity Technology Government Internet 230

Security Boulevard

MAY 24, 2024

The post New Publication From the Cloud Security Alliance (CSA): Hardware Security Modules as a Service appeared first on Entrust Blog. The post New Publication From the Cloud Security Alliance (CSA): Hardware Security Modules as a Service appeared first on Security Boulevard.

Encryption 64

Encryption 64

Penetration Testing

MARCH 18, 2024

However, any repository created under an organization’s user account is not controllable unless the organization has adopted the GitHub enterprise-managed... The post git-alerts: detect and monitor GitHub org users’ public repositories for secrets and sensitive files appeared first on Penetration Testing.

Penetration Testing 143

Penetration Testing Accountability 143

Security Through Education

MARCH 4, 2024

Public speaking is something that many people struggle with. In fact, 75% of the population has a fear of public speaking. Here are some influence techniques that help, both as a professional social engineer and a public speaker. Just the mere mention of it may start to make your heart race, if it is a fear of yours!

Social Engineering 105

Social Engineering Engineering Risk Security Awareness 105

Tech Republic Security

DECEMBER 6, 2022

The post Protect yourself and your business on public Wi-Fi appeared first on TechRepublic. At 75% off, this affordable VPN service is more affordable than ever and capable of defending your business from cybercrime while browsing the internet.

VPN 136

VPN Cybercrime Internet Internet 136

The Hacker News

FEBRUARY 29, 2024

GitHub on Thursday announced that it’s enabling secret scanning push protection by default for all pushes to public repositories.

114

114

Troy Hunt

DECEMBER 24, 2019

When is data "public"? And what does "public" even mean? Does it mean it's merely visible to the public? Or does it mean the public can do anything they like with it? unsettling: To be clear, all of this info must have been willingly public at some point. So what's the problem? Should it appear in HIBP?

Data breaches 150

Data breaches Mobile Media Marketing 150

Security Affairs

FEBRUARY 12, 2024

Exploring the Risks: Unveiling 9 Potential Techniques Hackers Employ to Exploit Public Wi-Fi and Compromise Your Sensitive Data We’ve all used public Wi-Fi: it’s convenient, saves our data, and speeds up browsing. Always verify the authenticity of Wi-Fi networks before connecting, especially in public places.

DNS 123

DNS VPN Encryption Passwords 123

eSecurity Planet

OCTOBER 16, 2023

Public cloud security refers to protections put in place to secure data and resources in cloud environments shared by multiple users or organizations. These safeguards, when combined with adherence to security best practices and standards, establish a strong security architecture for public cloud environments.

Encryption 107

Encryption DDOS Authentication Firewall 107

Security Boulevard

APRIL 23, 2024

What is Malware Next-Gen It […] The post CISA Announces Malware Next-Gen Analysis for Public Access appeared first on TuxCare. The post CISA Announces Malware Next-Gen Analysis for Public Access appeared first on Security Boulevard.

Malware 64

Malware Cybersecurity Cyber threats Government 64

Heimadal Security

AUGUST 30, 2021

The Boston Public Library is used by more than 4 million visitors per year through its central library and twenty-five neighborhood branches, as well as millions more online. On Wednesday morning, 8/25, the Boston Public Library experienced […]. On Wednesday morning, 8/25, the Boston Public Library experienced […].

Cybersecurity 129

Cybersecurity Malware 129

Security Boulevard

MARCH 21, 2024

When tech billionaires and corporations steer AI, we get AI that tends to reflect the interests of tech billionaires and corporations, instead of the public. The post Public AI as an Alternative to Corporate AI appeared first on Security Boulevard. Given how transformative this technology will be for the world, this is a problem.

Government 69

Government Technology Artificial Intelligence 69

Adam Shostack

AUGUST 13, 2020

I’ll be speaking at the MDIC’s Annual Public Forum today, discussing how threat modeling helps bring maturity to the medtech sector. Join us shortly!

130

130

Malwarebytes

OCTOBER 2, 2023

In an interview with Reuters , Meta President of Global Affairs Nick Clegg said the company used the public posts to train the LLM (large language model) that feeds into its new Meta AI virtual assistant. If others can see it, it’s public knowledge and the tech giants are of the opinion they can use it to train their AI.

Media 141

Media Artificial Intelligence Risk Cybersecurity 141

Security Affairs

DECEMBER 18, 2023

A cyber attack hit on December 8, 2023 the Italian cloud service provider Westpole, which is specialized in digital services for public administration. PA Digitale provides its service to 1300 public administrations, including 540 municipalities. Threat actors employed the Lockbit 3.0 reported the ACN.

Ransomware 121

Ransomware Cyber Attacks Media Government 121

Penetration Testing

APRIL 18, 2024

This vulnerability could allow authenticated attackers with... The post Public Exploit Released for Cisco IMC Flaw – Update Immediately to Halt Takeover Attacks appeared first on Penetration Testing.

Penetration Testing 83

Penetration Testing Authentication Risk 83

Security Affairs

APRIL 18, 2024

Cisco has addressed a high-severity Integrated Management Controller (IMC) vulnerability and is aware of a public exploit code for this issue. Cisco has addressed a high-severity vulnerability in its Integrated Management Controller (IMC) for which publicly available exploit code exists.

Authentication 109

Authentication Hacking Information Security 109

Tech Republic Security

NOVEMBER 3, 2023

In the active Elektra-Leak campaign, attackers hunt for Amazon IAM credentials within public GitHub repositories before using them for cryptomining. Get tips on mitigating this cybersecurity threat.

Cybersecurity 145

Cybersecurity Software 145

Security Boulevard

JANUARY 11, 2024

The rapid proliferation of the Internet of Things (IoT) represents vast opportunities for the public sector. In this blog post, we’ll explore the potential impact of IoT malware on the public sector — a story of innovation, risk, and the need for resilience.

IoT 75

IoT Malware Education Government 75

Bleeping Computer

DECEMBER 13, 2023

Hackers are attempting to leverage a recently fixed critical vulnerability (CVE-2023-50164) in Apache Struts that leads to remote code execution, in attacks that rely on publicly available proof-of-concept exploit code. [.]

101

101

Bleeping Computer

JUNE 22, 2023

DuckDuckGo has released its privacy-centric browser for Windows to the general public. It is a beta version available for download with no restrictions. [.]

Software 132

Software 132

Security Affairs

NOVEMBER 17, 2022

Public schools in two Michigan counties were forced to halt their activities, including the lessons, after a ransomware attack. Public schools in Jackson and Hillsdale counties, Michigan, reopen after a closure of two days caused by a ransomware attack that hit its systems. SecurityAffairs – hacking, Public schools).

Ransomware 123

Ransomware Cybercrime Hacking Cybersecurity 123

CyberSecurity Insiders

AUGUST 29, 2021

Boston Public Library (BPL) branches based in Massachusetts have been witnessing a digital disruption since Wednesday last week, all because of a cyber attack. Note- Founded in 1848, the Boston Public Library, also called the Library for the Commonwealth, is open to all local public and is being run by state funding.

Cyber Attacks 130

Cyber Attacks Wireless Mobile Internet 130

Bleeping Computer

JANUARY 29, 2024

Researchers found roughly 45,000 Jenkins instances exposed online that are vulnerable to CVE-2023-23897, a critical remote code execution (RCE) flaw for which multiple public proof-of-concept (PoC) exploits are in circulation. [.]

90

90

SecureWorld News

APRIL 16, 2024

Right of Publicity (ROP) claims, like the state statutes and common law upon which they rely, are varied in substance and outcome. Tennessee's ELVIS Act Liability Prior to the amendment, Tennessee's existing right of publicity law, the Personal Rights Protection Act of 1984, Tenn. Code § 47-25-1101 et seq.

Artificial Intelligence 100

Artificial Intelligence Advertising Technology Internet 100

Bleeping Computer

JULY 14, 2023

In what is shaping up to be a widespread privacy controversy, Spotify has come under scrutiny following allegations by users that the music streaming service made their private playlists public without their consent. [.]

Technology 98

Technology Software 98

The Hacker News

AUGUST 24, 2023

Public Wi-Fi, which has long since become the norm, poses threats to not only individual users but also businesses. Next, let's explore the risks of connecting to public Wi-Fi, both for you personally and for businesses.

Risk 86

Risk 86

Google Security

MARCH 28, 2024

Tianhao Chi and Puneet Sood, Google Public DNS The Domain Name System (DNS) is a fundamental protocol used on the Internet to translate human-readable domain names (e.g., Google Public DNS) locates the authoritative DNS nameservers for the requested name, and queries one or more of them to obtain the IP address(es) to return to the browser.

DNS 82

DNS Internet Internet Encryption 82

eSecurity Planet

NOVEMBER 17, 2022

Public-facing cloud storage buckets are a data privacy nightmare, according to a study released today. The answer, according to Laminar, is a data-centric view rather than an infrastructure-centric one, cataloging all data in your cloud environment to ensure that sensitive information is kept private while public files remain accessible.

Data privacy 145

Data privacy Risk Marketing Passwords 145