11 
Krebs on Security
SEPTEMBER 13, 2023
11, 2023, USDoD resurfaced after a lengthy absence to leak sensitive employee data stolen from the aerospace giant Airbus , while promising to visit the same treatment on top U.S. USDoD claimed they grabbed the data by using passwords stolen from a Turkish airline employee who had third-party access to Airbus’ systems.
Security Affairs
OCTOBER 9, 2023
IBM observed a credential harvesting campaign that is targeting Citrix NetScaler gateways affected by the CVE-2023-3519 vulnerability. IBM’s X-Force researchers reported that threat actors are conducting a large-scale credential harvesting campaign exploiting the recent CVE-2023-3519 vulnerability (CVSS score: 9.8)
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Krebs on Security
FEBRUARY 1, 2024
11-12, 2022. ” Colorado resident Emily “Em” Hernandez allegedly helped the group gain access to victim devices in service of SIM-swapping attacks between March 2021 and April 2023. .” 11, 2022 after they SIM-swapped an AT&T customer by impersonating them at a retail store using a fake ID.
IT Governance
JUNE 8, 2023
Despite an array of technological solutions designed to counter phishing attacks – from antimalware software to password protections – the main weapon in anyone’s arsenal should be knowledge and awareness. Verizon’s 2023 DBIR found that 36% of all data breaches involved phishing. How common are phishing attacks?
eSecurity Planet
SEPTEMBER 11, 2023
September 5, 2023 Atlas VPN Leaks Users’ IP Addresses Type of attack: Zero-Day Vulnerability, a new vulnerability that is often difficult to fix since no patch is available on the market yet. The problem: The vulnerabilities ( CVE-2023-39238 , CVE-2023-39239 and CVE-2023-39240 ), with a CVSS v3.1 score of 9.8
eSecurity Planet
APRIL 1, 2024
The problem: A SQLi flaw tracked as CVE-2023-48788 permits remote code execution (RCE) with SYSTEM privileges in low complexity attacks that don’t require user interaction. Oglio tracks vulnerability CVE-2023-48022 , rated CVSS 9.8 (out out of 10), and calls it Shadow Ray. The fix: Cisco recommends prompt application of patches.
eSecurity Planet
JUNE 21, 2022
The CEH certification from the EC-Council was introduced in 2003 and is now in version 11. While registration has closed for 2022, it’s likely to be offered again in 2023. AsTech’s Kent said of Security+, “This crosses several domains and is a basic introduction to security. As of mid-2022, the cost is $749 USD.
Expert insights. Personalized for you.
293 
Let's personalize your content