Security Affairs

OCTOBER 17, 2023

Russia-linked APT group Sandworm has hacked eleven telecommunication service providers in Ukraine between since May 2023. The Russia-linked APT group Sandworm (UAC-0165) has compromised eleven telecommunication service providers in Ukraine between May and September 2023, reported the Ukraine’s Computer Emergency Response Team (CERT-UA).

Authentication 98

Authentication Passwords Data collection Communications 98

eSecurity Planet

DECEMBER 18, 2023

December 11, 2023 Sonar Finds Three Vulnerabilities in Open-Source Firewall pfSense Type of vulnerability: Cross-site scripting and command injection. NIST has cataloged the three vulnerabilities as CVE-2023-42325 , CVE-2023-42327 , and CVE-2023-42326. pfSense CE 2.7.0 and below and pfSense Plus 23.05.1

Analytics 111

Analytics Cybersecurity Authentication Access 111

eSecurity Planet

MARCH 11, 2024

We’ve seen multiple over the last couple of months, but these are new and not to be confused with CVEs from 2023. According to Cisco , after exploiting the Secure Client vulnerability, an attacker could execute arbitrary code or access sensitive data in the browser, like valid SAML tokens. and earlier OpenEdge 12.2.13

Authentication 107

Authentication Cloud Access Cybersecurity 107

IT Governance

OCTOBER 24, 2023

Publicly disclosed data breaches and cyber attacks City of Philadelphia discloses data breach after five months Date of breach: 24 May 2023 ( notice issued 20 October 2023). It turned out that an unauthorised party had accessed and downloaded its business records, including files containing personal data.

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Krebs on Security

SEPTEMBER 12, 2023

Apple says the iOS flaw ( CVE-2023-41064 ) does not seem to work against devices that have its ultra-paranoid “ Lockdown Mode ” enabled. 11 that an exploit for a heap overflow bug in Chrome is being exploited in the wild. Tracked as CVE-2023-36761 , it is flagged as an “information disclosure” vulnerability.

Authentication 246

Authentication Passwords Access Privacy 246

eSecurity Planet

NOVEMBER 6, 2023

30, 2023 NGINX Ingress Controller for Kubernetes Flaws Can Lead to Credential Theft Type of Attack: Path sanitization bypass and injection vulnerabilities discovered in the NGINX Ingress controller can allow for credential theft, arbitrary command execution, and critical data access. CVE-2023-5044 (Code Injection): This CVSS score 7.6

Ransomware 110

Ransomware Authentication Cybersecurity Education 110

eSecurity Planet

OCTOBER 30, 2023

See the Top Patch and Vulnerability Management tools October 23, 2023 Citrix NetScaler Vulnerability Under Active Attack Type of attack: Active exploitation of the high-risk Sensitive Information Disclosure vulnerability ( CVE-2023-4966 ) disclosed on October 10, 2023 and now known as Citrix Bleed.

Authentication 103

Authentication Cloud Access Cybersecurity 103

eSecurity Planet

SEPTEMBER 18, 2023

This week, the following active exploits of vulnerabilities were announced: Iranian advanced persistent threat (APT) group exploits January 2023 vulnerabilities in Fortinet firewalls and ManageEngine software to perform remote code execution (RCE) on U.S. Read More: The 8 Best Vulnerability Scanner Tools for 2023 What is Patch Management?

Cybersecurity 107

Cybersecurity Ransomware Libraries Risk 107

Thales Cloud Protection & Licensing

MAY 3, 2023

Meet Thales at the KuppingerCole European Identity and Cloud Conference 2023 madhav Wed, 05/03/2023 - 08:08 From May 9 to May 12, 2023, Berlin will host the European Identity and Cloud Conference (EIC), organized by industry analyst KuppingerCole. Zero Trust and FIDO2 Interested to learn more about FIDO2?

Cloud 71

Cloud B2B Authentication Phishing 71

Security Affairs

APRIL 14, 2023

Google released an emergency security update to address the first Chrome zero-day vulnerability (CVE-2023-2033) in 2023, the company is aware of attacks in the wild exploiting the issue. The vulnerability was reported by Clément Lecigne of Google’s Threat Analysis Group on 2023-04-11. “Type Confusion in V8.

Libraries 78

Libraries Education Cybersecurity Security 78

Security Affairs

APRIL 19, 2023

Google rolled out emergency fixes to address another actively exploited high-severity zero-day flaw, tracked as CVE-2023-2136 , in its Chrome web browser. The vulnerability is an Integer overflow in the Skia graphics library, the issue was reported by Clément Lecigne of Google’s Threat Analysis Group on April 12, 2023.

Libraries 86

Libraries Education Access Cybersecurity 86

IT Governance

AUGUST 7, 2023

Welcome to our August 2023 catches of the month feature, in which we explore the latest phishing scams and the tactics that cyber criminals use to trick people into handing over personal data. This comes in the form of a new feature in its Enhanced Phishing Protection tool, which was released as part of Windows 11 22H2.

Phishing 98

Phishing Passwords Education Personal data 98

eSecurity Planet

AUGUST 14, 2023

August 12 , 2023 Ford Auto’s TI Wi-Fi Vulnerability The Internet of Things (IoT) continues to expand and become a threat to connected businesses. Mobile devices connected to the automobile infotainment system may be exposed to RCE attacks seeking to access the device or use it to attack connected networks.

Cybersecurity 98

Cybersecurity Access IoT Manufacturing 98

IT Governance

DECEMBER 19, 2023

When the Russian Cl0p gang exploited a zero-day SQL injection vulnerability in MOVEit Transfer in May 2023, Delta Dental was one of hundreds of organisations whose data was compromised. The post The Week in Cyber Security and Data Privacy: 11 – 18 December 2023 appeared first on IT Governance UK Blog.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Krebs on Security

FEBRUARY 1, 2024

11-12, 2022. ” Colorado resident Emily “Em” Hernandez allegedly helped the group gain access to victim devices in service of SIM-swapping attacks between March 2021 and April 2023. . 11, 2022 after they SIM-swapped an AT&T customer by impersonating them at a retail store using a fake ID.

Blockchain 244

Blockchain Ransomware Retail Analytics 244

Security Affairs

JANUARY 11, 2023

Microsoft Patch Tuesday security updates for January 2023 fixed 97 flaws and an actively exploited zero-day. 11 vulnerabilities are rated Critical and 87 are rated Important in severity. 11 vulnerabilities are rated Critical and 87 are rated Important in severity. No No CVE-2023-21538.NET No No CVE-2023-21538.NET

Security 94

Security Libraries Encryption Authentication 94

Security Affairs

NOVEMBER 7, 2023

Veeam addressed four vulnerabilities (CVE-2023-38547, CVE-2023-38548, CVE-2023-38549, CVE-2023-41723) in the Veeam ONE IT infrastructure monitoring and analytics platform. The vulnerability CVE-2023-38547 (CVSS score 9.9) ” Affected Version(s) are Veeam ONE 11, 11a, 12. . ” reads the advisory.

Analytics 110

Analytics Access IT Security 110

Security Affairs

MAY 15, 2023

DRM Dashboard Ransomware Monitor released the first quarterly report for the year 2023 about the activities of ransomware groups globally. DRM Dashboard Ransomware Monitor, an independent platform of cybersecurity monitoring, is pleased to release the quarterly the DRM-Report for the first quarter of 2023.

Ransomware 73

Ransomware Cybersecurity Security Access 73

eSecurity Planet

SEPTEMBER 22, 2023

As with all SASE solutions, the platform provides secure access to SaaS apps, internal apps, and on-device security that’s agnostic to network infrastructure. Monitored user activity allows for operations and security to detect anomalous behavior and either enable or block access to resources as needed. Who is Barracuda?

Cloud 98

Cloud Access Marketing Cybersecurity 98

IT Governance

NOVEMBER 20, 2023

Date of breach: 26 October 2023 Breached organisation: Homeland, Inc., An investigation found that there was unauthorised access to its network between 18 and 23 May 2023. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

Krebs on Security

FEBRUARY 14, 2023

Redmond flags CVE-2023-23376 as an “Important” elevation of privilege vulnerability in the Windows Common Log File System Driver , which is present in Windows 10 and 11 systems, as well as many server versions of Windows. Microsoft’s security advisories are somewhat sparse with details about the zero-day bugs.

Phishing 50

Phishing Security Authentication Ransomware 50

The Last Watchdog

MARCH 4, 2024

A recent study found only 27% of charities undertook risk assessments in 2023 and only 11% said they reviewed risks posed by suppliers. Next, implement multi-factor authentication to make gaining access even more difficult for hackers. Many nonprofits are exposed to potential daily threats and don’t even know it.

Cybersecurity 213

Cybersecurity Risk Authentication Data breaches 213

IT Governance

OCTOBER 31, 2023

Publicly disclosed data breaches and cyber attacks France says Russian state hackers breached numerous critical networks Date of breach: From second half of 2021 (reported 26 October 2023). It’s unclear how long the vulnerability was in place, or who may have accessed the data. Includes the driving licences of “thousands of motorists”.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

IBM Big Data Hub

JUNE 15, 2023

Call for Code 2023 continues to focus on sustainability and features multiple “Challenge Rounds” that offer developers more opportunities to participate, gain skills in new offerings such as IBM’s embeddable AI software portfolio , win cash prizes and launch their solutions.

Cloud 84

Cloud Communications Access Government 84

Security Affairs

JANUARY 29, 2024

A flaw in Microsoft Outlook can be exploited to access NTLM v2 hashed passwords by tricking users into opening a specially crafted file. The vulnerability CVE-2023-35636 impacting Microsoft Outlook is a Microsoft Outlook information disclosure issue that could be exploited by threat actors to access NT LAN Manager (NTLM) v2 hashed passwords.

Passwords 106

Passwords Authentication Access Security 106

Krebs on Security

FEBRUARY 9, 2024

“We were made aware of an inadvertent issue that allowed registered users to our system to access serial numbers that were not associated with their account,” the statement reads. However, the changes may date back to September 2023, when Juniper announced it had rebuilt its customer support portal. Update, 11:01 a.m.

Artificial Intelligence 282

Artificial Intelligence Access IT Government 282

Security Affairs

MAY 12, 2023

Recently, VIPRE Security Group published their Email Security in 2023 report , where they shared insights on the development of email-based threats and how they can impact organizations. At this point, the bad actor has access to the information they were after. What Can We Expect in 2023? It’s not likely to stop there.

Security 84

Security Phishing B2B Data breaches 84

Krebs on Security

JANUARY 30, 2024

stole at least $800,000 from at least five victims between August 2022 and March 2023. 0ktapus often leveraged information or access gained in one breach to perpetrate another. As documented by Group-IB, the group pivoted from its access to Twilio to attack at least 163 of its customers. Image credit: Amitai Cohen of Wiz.

Passwords 327

Passwords Phishing Access Encryption 327

Security Affairs

JANUARY 18, 2024

CVE-2023-6548 – Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability. CVE-2023-6549 – Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability. CVE-2024-0519 – Google Chromium V8 Out-of-Bounds Memory Access Vulnerability. The vulnerability CVE-2023-6549 is a Denial of Service.

IT 108

IT Authentication Cloud Access 108

IBM Big Data Hub

OCTOBER 16, 2023

Unlock the full value of your APIs with IBM API Connect We are excited to share that Gartner recently named IBM a Leader in the 2023 Gartner® Magic Quadrant™ for API Management. Award-winning design: API management software should be accessible and easy to use for developers of any skill level.

Cloud 69

Cloud Security IT Access 69

Security Affairs

MARCH 8, 2024

QNAP addressed three vulnerabilities in its NAS products that can be exploited to access devices. QNAP addressed three vulnerabilities in Network Attached Storage (NAS) devices that can be exploited to access the devices. x QTS 5.1.3.2578 build 20231110 and later QTS 4.5.x x QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.x

Authentication 115

Authentication IT Access Security 115

Security Affairs

SEPTEMBER 20, 2023

Researchers discovered four vulnerabilities (CVE-2023-40931, CVE-2023-40932, CVE-2023-40933, CVE-2023-40934) in the Nagios XI network and IT infrastructure monitoring solution that could lead to information disclosure and privilege escalation. The flaws impact Nagios XI version 5.11.1

Passwords 115

Passwords Cybersecurity Access IT 115

Security Affairs

SEPTEMBER 8, 2023

A zero-day vulnerability (CVE-2023-20269) in Cisco ASA and FTD is actively exploited in ransomware attacks, the company warns. “This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features.

Ransomware 129

Ransomware Authentication Access Education 129

eSecurity Planet

AUGUST 11, 2023

Large, sprawling organizations often struggle to apply consistent security policies outside of their network to remote workers accessing cloud-hosted resources, branch offices, and edge computing. The distributed access points avoid latency problems through short-distance connections to high-speed networks.

Access 103

Access Security Cloud IoT 103

KnowBe4

MARCH 12, 2023

Saturday March 11, 2023 -- Over the last 24 hours, the Federal Deposit Insurance Corporation has established the FDIC Bank of Santa Clara and insured depositors will have access to funds no later than Monday morning.

Insurance 95

Insurance Access 95

Security Affairs

APRIL 28, 2024

According to the advisory published by Broadcom, Brocade SANnav doesn’t have access to remote Docker registries, and knowledge of the keys is a minimal risk as SANnav is prevented from communicating with Docker registries. “Luckily, I was able to get access to the latest version of SANnav in May 2023 (the latest version was 2.2.2

Authentication 102

Authentication Access Encryption Communications 102

Security Affairs

NOVEMBER 6, 2023

Experts warn threat actors that started exploiting a recent critical flaw CVE-2023-22518 in Confluence Data Center and Confluence Server. Over the weekend threat actors started exploiting a recently disclosed vulnerability ( CVE-2023-22518 ) in all versions of Atlassian Confluence Data Center and Confluence Server. or later 8.3.4

Ransomware 95

Ransomware Access Security IT 95