Security Affairs

JANUARY 25, 2024

Cisco addressed a critical flaw in its Unified Communications and Contact Center Solutions products that could lead to remote code execution. Cisco released security patches to address a critical vulnerability, tracked as CVE-2024-20253 (CVSS score of 9.9), impacting multiple Unified Communications and Contact Center Solutions products.

Communications 110

Communications IT Access Security 110

Schneier on Security

APRIL 10, 2024

The Communications of the ACM asked me to expand it. Last week I posted a short memorial of Ross Anderson. Here’s the longer version.

Communications 108

Communications IT Cybersecurity Security 108

Thales Cloud Protection & Licensing

DECEMBER 20, 2023

2024 Tech and Cybersecurity Forecast: Navigating New Frontiers in Business madhav Thu, 12/21/2023 - 05:15 People always want to comprehend what the future brings. 2024 promises to be a pivotal year, bringing transformative advancements and new challenges in tech and cybersecurity. The same is true for today’s business leaders.

Cybersecurity 83

Cybersecurity Blockchain Artificial Intelligence Encryption 83

Security Affairs

JANUARY 10, 2024

Cisco has addressed a critical flaw, tracked as CVE-2024-20272, in its Unity Connection that can be exploited by a remote, unauthenticated attacker to gain root privileges on vulnerable devices. Cisco Unity Connection is a messaging platform and voicemail system that is part of the Cisco Unified Communications suite of products.

Authentication 104

Authentication Communications Security IT 104

OpenText Information Management

MARCH 26, 2024

Healthcare providers that prioritize total experience can tap into this lucrative market by offering personalized communications, wellness programs, digital health tools, and proactive health management solutions. The post The total patient experience: reflections from HIMSS 2024 appeared first on ONE OpenText Blogs.

Digital transformation 59

Digital transformation Communications Education Analytics 59

OpenText Information Management

DECEMBER 18, 2023

1 As we move into a new year, here are five trends shaking things up for marketing and customer success … The post 5 digital experience trends to know in 2024 appeared first on OpenText Blogs.

Marketing 64

Marketing Customer Experience Sales Communications 64

Hunton Privacy

MARCH 14, 2024

On March 13, 2024, the Federal Communications Commission’s updates to the FCC data breach notification rules (the “Rules”) went into effect. The Order was published in the Federal Register on February 12, 2024, and the petitions were filed shortly thereafter.

Data breaches 126

Data breaches Communications Information Security Security 126

Krebs on Security

APRIL 15, 2024

On March 7, 2024, the U.S. Brown said when he complained to his leasing office, they sold him a small $50 key fob that uses Near-Field Communications (NFC) to toggle the lock when he brings the fob close to his front door. Meanwhile, Chirp’s parent company, RealPage, Inc. , is being sued by multiple U.S. out of a possible 10).

Analytics 252

Analytics Cybersecurity Passwords Communications 252

eSecurity Planet

JANUARY 2, 2024

4 January 1, 2024 Windows Vulnerability Allows DLL Exploitation Type of vulnerability: Bypassing privilege access requirements to exploit executables The problem: Researchers from Security Joes discovered a malicious code execution vulnerability in Windows 10 and 11. 1020000 1.26.10-gke.1235000 1235000 1.27.7-gke.1293000 1293000 1.28.4-gke.1083000

Authentication 86

Authentication Libraries Cybersecurity Security 86

IBM Big Data Hub

FEBRUARY 12, 2024

By providing transparency and communicating their mission, Reformation has become known for their commitment to social good among the younger generations. .” Along with punchy marketing, the brand details exactly how they’re providing sustainable products.

Customer Experience 74

Customer Experience Artificial Intelligence Marketing Access 74

eDiscovery Daily

MARCH 22, 2024

At first, I wondered why there wouldn’t be deep dives into generative artificial intelligence, or the latest in IT strategies and technology, but rather the focus was dominantly professional development with themes like making a difference, skilling up in career and communication in today’s CIO role and mastering executive presence to name a few.

Communications 41

Communications Artificial Intelligence Government Education 41

eSecurity Planet

FEBRUARY 26, 2024

February 19, 2024 Microsoft Exchange Servers Vulnerable to Privilege Escalation Attacks Type of vulnerability: Critical severity privilege escalation vulnerability. The problem: CVE-2024-21410 allows remote attackers to carry out NTLM relay attacks on Microsoft Exchange Servers, providing them with privileged access.

Risk 107

Risk Authentication Systems administration Ransomware 107

eDiscovery Daily

FEBRUARY 12, 2024

We narrowed down our many Legalweek 2024 learnings to six key takeaways. Clare Chalkley, VP of legal services at Integreon disclosed the stats from the 2024 State of the Industry report by eDiscovery Today/Doug Austin. The post Learnings from ALM/Law.com Legalweek 2024: Six Key Takeaways appeared first on CloudNine.

CMS 41

CMS Phishing Communications Insurance 41

eDiscovery Daily

FEBRUARY 11, 2024

We narrowed down our many Legalweek 2024 learnings to six key takeaways. Clare Chalkley, VP of legal services at Integreon disclosed the stats from the 2024 State of the Industry report by eDiscovery Today/Doug Austin. The post Learning from ALM/Law.com Legalweek 2024: Six Key Takeaways appeared first on CloudNine.

CMS 41

CMS Phishing Communications Insurance 41

Hunton Privacy

FEBRUARY 7, 2023

On January 26, 2023, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth responded to a call for input from the UK’s Digital Regulation Cooperation Forum (DRCF) on its workplan for 2023 – 2024.

Data Privacy 61

Data Privacy Blockchain Compliance Privacy 61

Security Affairs

MARCH 11, 2024

The group focuses on internet-facing services, in at least one instance the group exploited the vulnerability CVE-2024-21887 in Ivanti Connect Secure VPN. The malware uses AES encryption for C2 communication, however, depending on the transmitted data, RSA may also be utilized.

Communications 92

Communications Encryption IT Security 92

Security Affairs

MARCH 15, 2024

Russian hackers have knocked down the GPS and communications of Defence Secretary Grant Shapps RAF Dassault Falcon 900 jet with electronic warfare attack. A Sun’s defence editor onboard the RAF Dassault Falcon 900 jet reported that the GPS and communications were disabled by a jamming attack allegedly launched by Russia.

Communications 106

Communications Military Risk IT 106

The Last Watchdog

APRIL 2, 2024

Related: AI makes scam email look real Fresh evidence comes from Mimecast’s “The State of Email and Collaboration Security” 2024 report. BEC = big losses attackers finagle their way into corporate communications, mimicking or outright hijacking legitimate email accounts. And it’s paying off to the tune of $2.7

Security 171

Security Communications Risk Phishing 171

Security Affairs

JANUARY 22, 2024

Resecurity has detected a noticeable increase in data leaks from consumer-focused platforms in Thailand, confirming that threat actors are actively targeting the personal data of citizens now at the beginning of 2024. But as we step into 2024, this trend might see a change.

Data breaches 107

Data breaches Personal data Communications Government 107

IT Governance

FEBRUARY 21, 2024

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Key dates 31 March 2024 – PCI DSS v4.0 Subscribe now The post The Week in Cyber Security and Data Privacy: 12 – 18 February 2024 appeared first on IT Governance UK Blog.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Security Affairs

JANUARY 3, 2024

Orbit Chain is a multi-asset blockchain platform that connects various blockchains through Inter-Blockchain Communication (IBC). — Orbit Chain (@Orbit_Chain) January 1, 2024 Researchers from blockchain security firm CertiK also alerted of suspicious withdrawals from the multi-asset blockchain platform.

Blockchain 118

Blockchain Communications Security Access 118

Hunton Privacy

FEBRUARY 12, 2024

On February 8, 2024, the Federal Communications Commission declared that calls using AI- generated, cloned voices fall under the category of “artificial or prerecorded voice” within the Telephone Consumer Protection Act (“TCPA”) and therefore are generally prohibited without prior express consent, effective immediately.

Communications 95

Communications IT Artificial Intelligence Information Security 95

eSecurity Planet

JANUARY 29, 2024

Meanwhile, the release of proof-of-concept code starts the countdown to attack on other critical vulnerabilities, including Cisco Enterprise Communication, Fortra GoAnywhere, and GitLab. January 19, 2024 Critical VMware vCenter Server Zero-Day Under Attack Since 2021 Type of vulnerability: Remote code execution (RCE) vulnerability.

Authentication 84

Authentication Communications Passwords Access 84

Krebs on Security

DECEMBER 6, 2023

ICANN says the RDRS doesn’t guarantee access to requested registration data, and that all communication and data disclosure between the registrars and requestors takes place outside of the system.

Phishing 215

Phishing GDPR Personal data Communications 215

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

Security 100

Security Ransomware Data breaches Cybersecurity 100

IT Governance

FEBRUARY 14, 2024

GB Western Municipal Construction Source New Construction and real estate USA Yes 101 GB Tennessee Farmers Insurance Source New Insurance USA Yes 71,000 CNO ACE Source 1 ; source 2 New Healthcare USA Yes 65,195 Verizon Communications Inc. Key dates 31 March 2024 – PCI DSS v4.0 GB Signature Performance, Inc. of the Standard.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Hunton Privacy

FEBRUARY 22, 2024

On January 24, 2024, the European Commission announced that it had published the Commission Decision establishing the European AI Office (the “Decision”).

Risk 106

Risk Communications Marketing IT 106

eSecurity Planet

JANUARY 8, 2024

January 3, 2024 52% of Exposed SSH Servers Vulnerable to Terrapin Attack Type of attack: Secure Shell (SSH) vulnerability enables prefix truncation attacks. Chrome web browsers experience heap buffer overflow ( CVE-2023-7024 ) in the WebRTC real-time communication coding that can crash chrome or allow for code execution. Versions 0.65

Encryption 103

Encryption Libraries Cybersecurity Communications 103

Security Affairs

JANUARY 31, 2024

In early January 2024, software firm Ivanti reported that threat actors were exploiting two zero-day vulnerabilities ( CVE-2023-46805, CVE-2024-21887 ) in Connect Secure (ICS) and Policy Secure to remotely execute arbitrary commands on targeted gateways. The second flaw, tracked as CVE-2024-21887 (CVSS score 9.1)

Authentication 84

Authentication Military Communications Security 84

Security Affairs

MARCH 4, 2024

HaxRob reported that the GTPDOOR backdoor uses the GPRS Tunnelling Protocol ( GTP ) for C2 communications. 3/n)) pic.twitter.com/hAKRJR1KFp — HaxRob (@haxrob) February 28, 2024 Both binaries targeted a very old Red Hat Linux version. ” reads the analysis. “The following diagram illustrates a forseen use of GTPDOOR.

Communications 123

Communications Access Encryption Authentication 123

OpenText Information Management

APRIL 2, 2024

Showcasing the power of information management and AI at Google Cloud Next 2024 From April 9th to 11th, OpenText will take center stage in the AI Innovation Space at Google Cloud Next 2024 , taking place both online and in-person at the Mandalay Bay in Las Vegas.

Cloud 64

Cloud Content services Data Privacy Communications 64

Security Affairs

MARCH 2, 2024

US CISA, the FBI, and MS-ISAC issued a joint CSA to warn of attacks involving Phobos ransomware variants observed as recently as February 2024 US CISA, the FBI, and MS-ISAC issued a joint cyber security advisory (CSA) to warn of attacks involving Phobos ransomware variants such as Backmydata , Devos, Eight, Elking, and Faust.

Ransomware 115

Ransomware Education Phishing Authentication 115

Security Affairs

JANUARY 28, 2024

Pro-Ukraine hackers wiped 2 petabytes of data from Russian research center Participants earned more than $1.3M

Security 89

Security Artificial Intelligence Ransomware Data breaches 89

eSecurity Planet

APRIL 1, 2024

March 22, 2024 Emergency Out-of-Band Windows Server Security Updates Type of vulnerability (or attack): Memory leak. or above March 25, 2024 Hackers Pollute Python Package Index Open-Source Libraries Type of vulnerability (or attack): Malicious library code. The fix: Update affected versions ASAP: FortiClient EMS 7.2: through 7.2.2

Libraries 90

Libraries Authentication Artificial Intelligence Cloud 90

Hunton Privacy

FEBRUARY 21, 2024

On February 16, 2024, the UK Information Commissioner’s Office (the “ICO”) published its first piece of guidance on content moderation. The ICO defines content moderation in the guidance as the analysis of user-generated content to assess whether it meets certain standards, and any action a service takes as a result of this analysis.

Personal data 78

Personal data Communications Risk IT 78

Krebs on Security

MARCH 12, 2024

Last week, Apple pushed out an urgent software update to its flagship iOS platform, warning that there were at least two zero-day exploits for vulnerabilities being used in the wild (CVE-2024-23225 and CVE-2024-23296). 4, 2024, Google published Secure by Design , which lays out the company’s perspective on memory safety risks.

Authentication 223

Authentication Phishing Passwords Security 223

The Last Watchdog

SEPTEMBER 18, 2023

Despite a reduced year-over-year growth rate of 4.8%, Omdia anticipates stronger growth, powered by the rise of RBVM, in 2023 and 2024. Media contact: Stephanie DeAngelo, PR & Communications Manager Informa Tech, +1 619 510 1564 Access the report here.

Marketing 130

Marketing Risk Digital transformation Cybersecurity 130