article thumbnail

DHS issued an alert on attacks aimed at Managed Service Providers

Security Affairs

The use of MSP is increasing the attack surface for attackers, the DHS’ alert TA18-276B , is related to activity that was uncovered by DHS’ National Cybersecurity and Communications Integration Center (NCCIC) in April 2017. ” reads the alert issued by DHS. APT actors have targeted victims in several U.S.

article thumbnail

Key aerospace player Safran Group leaks sensitive data

Security Affairs

It collaborates with Airbus, the second-largest aerospace company globally after Boeing, to manufacture aerospace equipment. Also, the company manufactures surface-to-air defense systems and missiles. The unidentified hackers allegedly attempted to map the company’s computer system between 2009 and 2010.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

SimJacker attack allows hacking any phone with just an SMS

Security Affairs

Cybersecurity researchers at AdaptiveMobile Security disclosed a critical vulnerability in SIM cards dubbed SimJacker that could be exploited by remote attackers to compromise targeted mobile phones and spy on victims just by sending an SMS. . ” states the post. .”

article thumbnail

Observations on the Cybersecurity Executive Order and Presidential Policy Directive

Hunton Privacy

Although worded in terms of “consultation” and “voluntary” adoption of a yet-to-be-developed cybersecurity framework, the Executive Order also calls for federal agencies to consider incentives, including changes to the federal acquisition regulations, for encouraging adoption of the framework. Industry has good reason to pay attention.

article thumbnail

Severe vulnerabilities allow hacking older GE anesthesia machines

Security Affairs

The experts at the healthcare cybersecurity firm CyberMDX have found some flaws in the firmware of the anesthesia machines, the issues could expose patients to serious risks. The company pointed out that it is impossible to change gas mix parameters on systems manufactured after 2009, only older devices are affected by the issues.

Risk 90
article thumbnail

U.S. Department of Transportation Issues Third Round of Guidance on Automated Vehicles

Data Matters

The Federal Highway Administration will pursue an updated to the 2009 Manual on Uniform Traffic Control Devices that will take into consideration the rapid development of automated technologies and other needs. access for individuals with disabilities).”. State, local, and tribal governments. which are due by December 3.

article thumbnail

Easily Exploitable Linux Flaw Exposes All Distributions: Qualys

eSecurity Planet

Researchers at cybersecurity vendor Qualys this week disclosed the memory corruption vulnerability in polkit’s pkexec, which if exploited by a bad actor can enable an unprivileged user to gain full root privileges on a system, giving the unprivileged user administrative rights. Patching Open-Source Systems a Challenge.