Info Source

NOVEMBER 7, 2023

DIR 11-7-2023 To read and open interactive links as a PDF, kindly download by clicking here.

40

40

Thales Cloud Protection & Licensing

NOVEMBER 1, 2023

Thales Wins Big in 2023 madhav Thu, 11/02/2023 - 05:09 Here at Thales, we are incredibly proud of what we do. 2023 has been a particularly good year for us; keep reading for a run-through of our most recent successes. Here at Thales, we believe that our research can transform the cybersecurity landscape for the better.

Cloud 144

Cloud Cybersecurity Marketing Ransomware 144

Data Breach Today

MARCH 20, 2024

Among the exiting employees is Zohar Alon, the longtime Dome9 Security leader who joined Cybereason just 11 months ago as president of product and research and development.o joined Cybereason just 11 months ago as president of product and research and development.

IT 277

IT Security 277

Data Breach Today

JANUARY 11, 2023

Zero Day Affects With Swath of Windows Versions Microsoft fixed an actively exploited zero-day vulnerability in 2023's first Patch Tuesday dump. The Redmond giant also issued fixes for 98 other vulnerabilities, including 11 classified as critical and 87 as important.

Ransomware 130

Ransomware 130

Security Affairs

OCTOBER 17, 2023

Russia-linked APT group Sandworm has hacked eleven telecommunication service providers in Ukraine between since May 2023. The Russia-linked APT group Sandworm (UAC-0165) has compromised eleven telecommunication service providers in Ukraine between May and September 2023, reported the Ukraine’s Computer Emergency Response Team (CERT-UA).

Authentication 104

Authentication Passwords Data collection Communications 104

eSecurity Planet

OCTOBER 11, 2023

Microsoft’s Patch Tuesday for October 2023 covers a total of 103 CVEs, including three zero-day vulnerabilities affecting WordPad, Skype and the HTTP/2 “ Rapid Reset ” DDoS vulnerability. CVE-2023-41763 , an elevation of privilege vulnerability in Skype for Business with a CVSS score of 5.3

Authentication 107

Authentication Phishing Cybersecurity Access 107

Security Affairs

OCTOBER 12, 2023

to address the CVE-2023-42824 vulnerability that has been actively exploited in attacks. to address the recently disclosed zero-day CVE-2023-42824. Last week, Apple released emergency security updates to address a new zero-day vulnerability, tracked as CVE-2023-42824, that is exploited in attacks targeting iPhone and iPad devices. “A

Security 104

Security IT Information Security 104

eSecurity Planet

JANUARY 11, 2023

Microsoft’s first Patch Tuesday of 2023 addresses 98 vulnerabilities, more than twice as many as last month – including one zero-day flaw that’s being actively exploited, as well as 11 critical flaws. The second, CVE-2023-21743 , impacts Microsoft SharePoint Server.

Ransomware 120

Ransomware Risk IT Security 120

Jamf

SEPTEMBER 19, 2023

JNUC 2023 got off to an announcement-packed start with our brand-new CEO John Strosahl.

Access 107

Access Security 107

eSecurity Planet

MARCH 11, 2024

We’ve seen multiple over the last couple of months, but these are new and not to be confused with CVEs from 2023. The problem: CVE-2023-22527 , a remote code execution vulnerability in outdated versions of Atlassian Confluence Data Center and Confluence Server, is currently being actively exploited. LTS) 8.5.5 (LTS)

Authentication 107

Authentication Cloud Access Cybersecurity 107

Security Affairs

OCTOBER 9, 2023

IBM observed a credential harvesting campaign that is targeting Citrix NetScaler gateways affected by the CVE-2023-3519 vulnerability. IBM’s X-Force researchers reported that threat actors are conducting a large-scale credential harvesting campaign exploiting the recent CVE-2023-3519 vulnerability (CVSS score: 9.8)

Authentication 109

Authentication Passwords Cybersecurity Security 109

eSecurity Planet

DECEMBER 18, 2023

December 11, 2023 Sonar Finds Three Vulnerabilities in Open-Source Firewall pfSense Type of vulnerability: Cross-site scripting and command injection. NIST has cataloged the three vulnerabilities as CVE-2023-42325 , CVE-2023-42327 , and CVE-2023-42326. pfSense CE 2.7.0 and below and pfSense Plus 23.05.1

Analytics 111

Analytics Cybersecurity Authentication Access 111

Security Affairs

JUNE 20, 2023

Zyxel released security updates to address a critical security flaw, tracked as CVE-2023-27992 (CVSS score: 9.8), affecting its network-attached storage (NAS) devices. 11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0. In late April, Zyxel addressed the critical vulnerability CVE-2023-28771 (CVSS score 9.8)

Authentication 89

Authentication Security IT Information Security 89

IT Governance

OCTOBER 24, 2023

Publicly disclosed data breaches and cyber attacks City of Philadelphia discloses data breach after five months Date of breach: 24 May 2023 ( notice issued 20 October 2023). International Criminal Court says cyberattack was attempted espionage Date of breach: 19 September 2023 ( update on 20 October 2023).

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Security Affairs

MARCH 25, 2023

On the third day of the Pwn2Own Vancouver 2023 hacking contest, the organization awarded $185,000 for 10 zero-day exploits. Pwn2Own Vancouver 2023 is ended, contestants disclosed 27 unique zero-days and the organization awarded a total of $1,035,000 and a Tesla Model 3. They earn $30,000 and 3 Master of Pwn points. .”

Security 96

Security IT Information Security 96

Security Affairs

APRIL 14, 2023

Google released an emergency security update to address the first Chrome zero-day vulnerability (CVE-2023-2033) in 2023, the company is aware of attacks in the wild exploiting the issue. The vulnerability was reported by Clément Lecigne of Google’s Threat Analysis Group on 2023-04-11. “Type Confusion in V8.

Libraries 83

Libraries Education Cybersecurity Security 83

Krebs on Security

SEPTEMBER 12, 2023

Apple says the iOS flaw ( CVE-2023-41064 ) does not seem to work against devices that have its ultra-paranoid “ Lockdown Mode ” enabled. 11 that an exploit for a heap overflow bug in Chrome is being exploited in the wild. Tracked as CVE-2023-36761 , it is flagged as an “information disclosure” vulnerability.

Authentication 235

Authentication Passwords Access Privacy 235

eSecurity Planet

SEPTEMBER 18, 2023

This week, the following active exploits of vulnerabilities were announced: Iranian advanced persistent threat (APT) group exploits January 2023 vulnerabilities in Fortinet firewalls and ManageEngine software to perform remote code execution (RCE) on U.S. Read More: The 8 Best Vulnerability Scanner Tools for 2023 What is Patch Management?

Cybersecurity 107

Cybersecurity Ransomware Libraries Risk 107

IT Governance

AUGUST 7, 2023

Welcome to our August 2023 catches of the month feature, in which we explore the latest phishing scams and the tactics that cyber criminals use to trick people into handing over personal data. This comes in the form of a new feature in its Enhanced Phishing Protection tool, which was released as part of Windows 11 22H2.

Phishing 98

Phishing Passwords Education Personal data 98

eSecurity Planet

OCTOBER 30, 2023

See the Top Patch and Vulnerability Management tools October 23, 2023 Citrix NetScaler Vulnerability Under Active Attack Type of attack: Active exploitation of the high-risk Sensitive Information Disclosure vulnerability ( CVE-2023-4966 ) disclosed on October 10, 2023 and now known as Citrix Bleed.

Authentication 103

Authentication Cloud Access Cybersecurity 103

Security Affairs

APRIL 19, 2023

Google rolled out emergency fixes to address another actively exploited high-severity zero-day flaw, tracked as CVE-2023-2136 , in its Chrome web browser. The vulnerability is an Integer overflow in the Skia graphics library, the issue was reported by Clément Lecigne of Google’s Threat Analysis Group on April 12, 2023.

Libraries 90

Libraries Education Access Cybersecurity 90

IT Governance

NOVEMBER 3, 2023

IT Governance’s research has discovered the following for October 2023: 114 publicly disclosed security incidents. Our monthly blogs will provide analysis of the data we’ve collected and we’ll continue to discuss the biggest breaches on our 2023 overview of publicly disclosed data breaches and cyber attacks.

Data breaches 87

Data breaches Insurance Ransomware Education 87

eSecurity Planet

NOVEMBER 6, 2023

30, 2023 NGINX Ingress Controller for Kubernetes Flaws Can Lead to Credential Theft Type of Attack: Path sanitization bypass and injection vulnerabilities discovered in the NGINX Ingress controller can allow for credential theft, arbitrary command execution, and critical data access. CVE-2023-5044 (Code Injection): This CVSS score 7.6

Ransomware 109

Ransomware Authentication Cybersecurity Education 109

Security Affairs

AUGUST 8, 2023

Microsoft Patch Tuesday security updates for August 2023 addressed 74 vulnerabilities, including two actively exploited flaws. The company also fixed 11 flaws in Chromium group for Edge (Chromium-Based) and a fix for AMD. The full list of vulnerabilities released by Microsoft for August 2023 is available here. reads the post.

Phishing 89

Phishing Security Government IT 89

Thales Cloud Protection & Licensing

MAY 3, 2023

Meet Thales at the KuppingerCole European Identity and Cloud Conference 2023 madhav Wed, 05/03/2023 - 08:08 From May 9 to May 12, 2023, Berlin will host the European Identity and Cloud Conference (EIC), organized by industry analyst KuppingerCole. This session will take place on Thursday, May 11, 2023, from 11:00—11:40.

Cloud 71

Cloud B2B Authentication Phishing 71

Security Affairs

JANUARY 11, 2023

Microsoft Patch Tuesday security updates for January 2023 fixed 97 flaws and an actively exploited zero-day. 11 vulnerabilities are rated Critical and 87 are rated Important in severity. 11 vulnerabilities are rated Critical and 87 are rated Important in severity. No No CVE-2023-21538.NET No No CVE-2023-21538.NET

Security 96

Security Libraries Encryption Authentication 96

Krebs on Security

FEBRUARY 1, 2024

11-12, 2022. ” Colorado resident Emily “Em” Hernandez allegedly helped the group gain access to victim devices in service of SIM-swapping attacks between March 2021 and April 2023. .” 11, 2022 after they SIM-swapped an AT&T customer by impersonating them at a retail store using a fake ID.

Blockchain 233

Blockchain Ransomware Retail Analytics 233

RFID Global Solution, Inc.

MARCH 15, 2023

Join us May 9-11, 2023 at RFID Journal Live! 2023 appeared first on RFID Global Solution. in Orlando. The post RFID Journal Live!

52

52

eSecurity Planet

AUGUST 14, 2023

August 12 , 2023 Ford Auto’s TI Wi-Fi Vulnerability The Internet of Things (IoT) continues to expand and become a threat to connected businesses. August 11 , 2023 DEFCON and Black Hat Vulnerabilities Security researchers at DEFCON and Black Hat discussed a number of vulnerabilities with significant impact for affected organizations.

Cybersecurity 98

Cybersecurity Access IoT Manufacturing 98

Security Affairs

MAY 15, 2023

DRM Dashboard Ransomware Monitor released the first quarterly report for the year 2023 about the activities of ransomware groups globally. DRM Dashboard Ransomware Monitor, an independent platform of cybersecurity monitoring, is pleased to release the quarterly the DRM-Report for the first quarter of 2023.

Ransomware 77

Ransomware Cybersecurity Security Access 77

Security Affairs

DECEMBER 5, 2023

Google fixed a critical zero-click RCE vulnerability (CVE-2023-40088) with the release of the December 2023 Android security updates. Google December 2023 Android security updates addressed 85 vulnerabilities, including a critical zero-click remote code execution (RCE) flaw tracked as CVE-2023-40088.

Security 117

Security IT Information Security 117

Krebs on Security

FEBRUARY 14, 2023

Redmond flags CVE-2023-23376 as an “Important” elevation of privilege vulnerability in the Windows Common Log File System Driver , which is present in Windows 10 and 11 systems, as well as many server versions of Windows. Microsoft’s security advisories are somewhat sparse with details about the zero-day bugs.

Phishing 48

Phishing Security Authentication Ransomware 48

IT Governance

NOVEMBER 20, 2023

Date of breach: 26 October 2023 Breached organisation: Homeland, Inc., An investigation found that there was unauthorised access to its network between 18 and 23 May 2023. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

Security Affairs

NOVEMBER 7, 2023

Veeam addressed four vulnerabilities (CVE-2023-38547, CVE-2023-38548, CVE-2023-38549, CVE-2023-41723) in the Veeam ONE IT infrastructure monitoring and analytics platform. The vulnerability CVE-2023-38547 (CVSS score 9.9) ” Affected Version(s) are Veeam ONE 11, 11a, 12. . ” reads the advisory.

Analytics 115

Analytics Access IT Security 115

Everteam

APRIL 11, 2023

Archiving , Data Management , Digital bulk , Document Management Documation 2023: summary of our conferences Anne-Claire Girard 11 April 2023 Here is what you should know: Summary of Everteam Documation 2023 conferences “When do we talk about digital Bulk? Can we automatically put order in it?

Archiving 52

Archiving Marketing Paper Compliance 52

IT Governance

OCTOBER 31, 2023

Publicly disclosed data breaches and cyber attacks France says Russian state hackers breached numerous critical networks Date of breach: From second half of 2021 (reported 26 October 2023). Reeds Spring district alerts families to cybersecurity data breach Date of breach: 26 April 2023 (reported 26 October 2023).

Data Privacy 52

Data Privacy Privacy Data breaches Security 52