Security Affairs

SEPTEMBER 9, 2022

CISA added 12 more security flaws to its Known Exploited Vulnerabilities Catalog including four D-Link vulnerabilities. Last week, Google rolled out emergency fixes to address a vulnerability, tracked as CVE-2022-3075 , in the Chrome web browser that is being actively exploited in the wild. Now CISA added this flaw to the Catalog.

IT 120

IT Passwords Ransomware Cybersecurity 120

Info Source

DECEMBER 12, 2022

DIR 12-13-2022. To open and read this issue as a PDF (or to download): Click here.

40

40

Data Breach Today

DECEMBER 6, 2022

Collective DDoS Defense, Rethinking Internet Defense, Zero-Day Harvesting and More Black Hat Europe returns to London, offering deep dives into the latest cybersecurity research and trends, including how to build an open, transparent, but also secure internet; harvesting zero-day flaws before attackers; what we can learn from "metaparasitical" scammers (..)

Cybersecurity 130

Cybersecurity Security 130

Info Source

JULY 12, 2022

DIR 7-12-2022. To open and read this issue as a PDF (or to download): Click here.

40

40

Info Source

JULY 12, 2022

DIR 7-12-2022. To open and read this issue as a PDF (or to download): Click here.

40

40

KnowBe4

SEPTEMBER 28, 2023

The latest cyber claims report from Coalition , a digital risk insurance provider, finds a 12% increase in cyber insurance claims in the first half of 2023 over the second half of 2022, due to surging attack frequency and severity.

Insurance 106

Insurance Risk Ransomware Security 106

Security Affairs

DECEMBER 14, 2022

Microsoft released December 2022 Patch Tuesday security updates that fix 52 vulnerabilities across its products. 12 of these vulnerabilities were submitted through the ZDI program. The actively exploited zero-day is a Windows SmartScreen security feature bypass vulnerability tracked as CVE-2022-44698. ” reads the advisory.

Security 110

Security IT Information Security 110

Security Affairs

APRIL 7, 2022

Experts discovered a vulnerability, tracked as CVE-2022-22292, which can be exploited to compromise Android 9, 10, 11, and 12 devices. Researchers from mobile cybersecurity firm Kryptowire discovered a vulnerability, tracked as CVE-2022-22292 , in Android 9, 10, 11, and 12 devices. To nominate, please visit:?

Cybersecurity 129

Cybersecurity Security Access Information Security 129

KnowBe4

MARCH 22, 2022

CyberheistNews Vol 12 #12 | Mar. [New White House Alert] Train Your Users Against Threat of Russian Cyberattacks. Email not displaying? View Knowbe4 Blog. New White House Alert] Train Your Users Against Threat of Russian Cyberattacks.

Risk 94

Risk Government 94

Hunton Privacy

MARCH 7, 2023

On March 7, 2023, the Irish Data Protection Commission (“DPC”) published its Annual Report for 2022 (the “Report”). Highlights from the Report include: During 2022, the DPC received 2,700 complaints from data subjects under the General Data Protection Regulation (“GDPR”).

Personal data 114

Personal data GDPR Data breaches Compliance 114

Outpost24

AUGUST 12, 2022

Threat Actor of the Month - August 2022. Fri, 08/12/2022 - 08:04. Florian Barre. Gerard, Jacobo, from Threat Context. Threat Intelligence. This month we’re introducing you to GhostSec, a hacktivist group with ties to the Anonymous collective.

52

52

KnowBe4

JUNE 23, 2022

Amazon Prime Days this year are July 12 - 13th 2022. As a result, cybercriminals are taking every step to capitalize on the holiday with new phishing attacks. I have been getting asked about common types of Amazon-related scams and wanted to share what to look out for.

Phishing 110

Phishing Cybersecurity 110

Thales Cloud Protection & Licensing

JANUARY 5, 2022

Trends and Predictions for 2022 – More of the Same? Wed, 01/05/2022 - 05:12. What will 2022 bring for cybersecurity? What are the key security challenges for 2022? Andy Green and I discussed many more pressing and emerging topics around the trends we expect to see in 2022.

Phishing 127

Phishing Digital transformation Communications Cybersecurity 127

Data Matters

FEBRUARY 25, 2022

– 12:30 p.m. Join us from February 28 – March 3 for DPFS Week 2022 , a series of webinars looking at the impacts of data privacy across the financial sector. How to deal with and manage the key issues for 2022, such as AI, data governance, and international transfers. – 5:30 p.m. GMT | 11:00 a.m.

Financial Services 103

Financial Services Privacy Data Privacy Cybersecurity 103

Security Affairs

JUNE 29, 2022

The MITRE organization published the 2022 CWE Top 25 most dangerous software weaknesses. The MITRE shared the list of the 2022 top 25 most common and dangerous weaknesses, it could help organizations to assess internal infrastructure and determine their surface of attack. 0 +4 12 CWE-502 Deserialization of Untrusted Data 6.68

Authentication 97

Authentication Education Cybersecurity Security 97

Security Affairs

AUGUST 9, 2022

Microsoft Patch Tuesday security updates for August 2022 addressed a zero-day attack remote code execution vulnerability in Windows. Most of the flaws, 64, are escalation of privilege issues, followed by remote code execution, 31, and 12 information disclosure. No No RCE CVE-2022-34716.NET No No RCE CVE-2022-34716.NET

Security 121

Security Cloud IT Information Security 121

Security Affairs

OCTOBER 14, 2022

Experts released the PoC exploit code for the authentication bypass flaw CVE-2022-40684 in FortiGate firewalls and FortiProxy web proxies. A proof-of-concept (PoC) exploit code for the authentication bypass vulnerability CVE-2022-40684 (CVSS score: 9.6) SecurityAffairs – hacking, CVE-2022-40684). and from 7.2.0

Authentication 115

Authentication Cybersecurity Risk Security 115

IG Guru

DECEMBER 27, 2021

The post Michigan ARMA Chapters Announce Winter 2022 Events appeared first on IG GURU.

Records Management 75

Records Management Archiving Education Information governance 75

KnowBe4

MARCH 15, 2022

CyberheistNews Vol 12 #11 | Mar. [Heads Up] FBI: Ransomware Gang Breached 52 US Critical Infrastructure Orgs. Email not displaying? View Knowbe4 Blog. Heads Up] FBI: Ransomware Gang Breached 52 U.S. Critical Infrastructure Orgs. critical infrastructure sectors.

Ransomware 89

Ransomware 89

KnowBe4

SEPTEMBER 7, 2022

CyberheistNews Vol 12 #36 | September 7th, 2022. 1-Time Passcodes Are a Corporate Liability. Department of Homeland Security Fraud Warning. Email not displaying? View Knowbe4 Blog. Eye Opener] So, Your MFA Is Phishable, What to Do Next?

Phishing 81

Phishing Authentication Security 81

Security Affairs

JANUARY 30, 2022

A researcher disclosed an exploit for a Windows local privilege elevation issue (CVE-2022-21882) that allows anyone to gain admin privileges in Windows 10. The security researchers RyeLv has publicly released an exploit for a Windows local privilege elevation flaw ( CVE-2022-21882 ) that allows anyone to gain admin privileges in Windows 10.

Authentication 82

Authentication Ransomware Security Access 82

Security Affairs

FEBRUARY 9, 2022

Google February 2022 Android security updates address two critical flaws, including a remote escalation of privilege. Google has released the February 2022 Android security updates that address two critical vulnerabilities, one of them is a remote escalation of privilege that requires no user interaction for its exploitation.

Security 74

Security IT 74

KnowBe4

APRIL 5, 2022

CyberheistNews Vol 12 #14 | Apr. [EYE OPENER] A Lack of Employee Cyber Hygiene is the Next Big Threat. Email not displaying? View Knowbe4 Blog. EYE OPENER] A Lack of Employee Cyber Hygiene is the Next Big Threat.

Passwords 94

Passwords Risk Security IT 94

Krebs on Security

FEBRUARY 1, 2024

Three Americans were charged this week with stealing more than $400 million in a November 2022 SIM-swapping attack. 11-12, 2022. 11-12, 2022. 11, 2022 after they SIM-swapped an AT&T customer by impersonating them at a retail store using a fake ID. technology companies during the summer of 2022.

Blockchain 233

Blockchain Ransomware Retail Analytics 233

Security Affairs

MAY 21, 2024

Black Basta has been active since April 2022, like other ransomware operations, it implements a double-extortion attack model. In November 2022, Sentinel Labs researchers reported having found evidence that links the Black Basta ransomware gang to the financially motivated hacking group FIN7.

Ransomware 127

Ransomware Phishing Access IT 127

Security Affairs

JULY 3, 2022

Google Project Zero states that in H1 2022 at least half of zero-day issues exploited in attacks were related to not properly fixed old flaws. “As of June 15, 2022, there have been 18 0-days detected and disclosed as exploited in-the-wild in 2022. ” wrote Stone.

Security 98

Security Access Information Security IT 98

IT Governance

DECEMBER 20, 2022

2022 will go down as the year where some semblance of normality returned. In total, we have so far reported more than 1,000 data breaches in 2022, with almost half a billion breached records. Google , Clearview AI , and Meta all receives hefty penalties in 2022, demonstrating the continued important of effective information security.

Security 132

Security Data breaches Ransomware Military 132

KnowBe4

MARCH 29, 2022

CyberheistNews Vol 12 #13 | Mar. [Heads Up] Published Zelenskyy Deepfake Video Demonstrates the Modern War is Online. Email not displaying? View Knowbe4 Blog. Heads Up] Published Zelenskyy Deepfake Video Demonstrates the Modern War is Online.

Ransomware 91

Ransomware Government IT 91

DLA Piper Privacy Matters

JANUARY 28, 2022

On behalf of DLA Piper’s Global Data Protection team, we would like to wish you a happy International Data Protection Day 2022. Fully refreshed and updated for 2022 we have new jurisdictional entries that now includes Sri Lanka and the Abu Dhabi Global Market Free Zone who launched their new data protection regime last year.

GDPR 98

GDPR Privacy Data breaches Personal data 98

Security Affairs

MAY 12, 2024

Black Basta ransomware affiliates have breached over 500 organizations between April 2022 and May 2024, FBI and CISA reported. Black Basta has targeted at least 12 critical infrastructure sectors, including Healthcare and Public Health. “Black Basta is a ransomware-as-a-service (RaaS) variant, first identified in April 2022.

Ransomware 112

Ransomware Blockchain Retail Insurance 112

Data Breach Today

FEBRUARY 24, 2023

Russian Groups Have Been Sending DDoS Attacks to Western Countries The United States is warning domestic and European organizations to be extra vigilant about their presence in cyberspace on the one-year anniversary of Russia's 2022 invasion of Ukraine.

IT 152

IT 152

KnowBe4

APRIL 12, 2022

CyberheistNews Vol 12 #15 | Apr. Heads Up] Hard-boiled Social Engineering by a Fake "Emergency Data Request". Bloomberg has reported that forged "Emergency Data Requests" last year induced Apple and Meta to surrender "basic subscriber details, such as a customer's address, phone number and IP address.".

79

79