January 2024

Trellix XDR Platform for RDR strengthens operational resilience for customers

Trellix XDR Platform for RDR strengthens operational resilience for customers 2024-01-15 at 13:01 By Industry News Trellix announced Trellix XDR Platform for Ransomware Detection and Response (RDR), available immediately worldwide. Trellix XDR Platform for RDR provides visibility across an organization’s entire security ecosystem and delivers critical coverage for each stage of a ransomware campaign. The […]

React to this headline:

Loading spinner

Trellix XDR Platform for RDR strengthens operational resilience for customers Read More »

The New ROM Antics – building the ZX Spectrum 128

The New ROM Antics – building the ZX Spectrum 128 2024-01-15 at 11:33 By Rupert Goodwins If you think Sinclair’s hardware was odd, you haven’t met the people Opinion  Following an unlikely series of events involving British Telecom, Prince Philip and a VTX-5000 modem, your teenage protagonist found himself at a drunken dinner party in

React to this headline:

Loading spinner

The New ROM Antics – building the ZX Spectrum 128 Read More »

Juniper fixes critical RCE in its SRX firewalls and EX switches (CVE-2024-21591)

Juniper fixes critical RCE in its SRX firewalls and EX switches (CVE-2024-21591) 2024-01-15 at 11:16 By Helga Labus Juniper Networks has fixed a critical pre-authentication remote code execution (RCE) vulnerability (CVE-2024-21591) in Junos OS on SRX firewalls and EX switches. About CVE-2024-21591 CVE-2024-21591 is an out-of-bounds write vulnerability that could allow an unauthenticated, network-based threat

React to this headline:

Loading spinner

Juniper fixes critical RCE in its SRX firewalls and EX switches (CVE-2024-21591) Read More »

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners 2024-01-15 at 11:02 By Multiple security vulnerabilities have been disclosed in Bosch BCC100 thermostats and Rexroth NXA015S-36V-B smart nutrunners that, if successfully exploited, could allow attackers to execute arbitrary code on affected systems. Romanian cybersecurity firm Bitdefender, which discovered the flaw in Bosch BCC100 thermostats last August, said

React to this headline:

Loading spinner

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners Read More »

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability 2024-01-15 at 11:02 By Thousands of WordPress sites using a vulnerable version of the Popup Builder plugin have been compromised with a malware called Balada Injector. First documented by Doctor Web in January 2023, the campaign takes place in a series of periodic attack waves, weaponizing security flaws

React to this headline:

Loading spinner

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability Read More »

Infosys co-founder doubles down on call for 70-hour work weeks

Infosys co-founder doubles down on call for 70-hour work weeks 2024-01-15 at 10:17 By Laura Dobberstein It’s not like Gandhi ever saw his kids, says Narayana Murthy Indian billionaire and Infosys co-founder Narayana Murthy has doubled down on his comments that India’s youth should voluntarily work 70-hour weeks.… This article is an excerpt from The

React to this headline:

Loading spinner

Infosys co-founder doubles down on call for 70-hour work weeks Read More »

Cloudflare defends firing of staffer for reasons HR could not explain

Cloudflare defends firing of staffer for reasons HR could not explain 2024-01-15 at 08:36 By Simon Sharwood Net-taming firm lets staff go if they’re bad at ‘measurable performance targets’ or aren’t ‘right for the team’, which seems a tad contradictory Cloudflare has defended its HR practices after a former employee posted a nine-minute video of

React to this headline:

Loading spinner

Cloudflare defends firing of staffer for reasons HR could not explain Read More »

DDoS Attacks on the Environmental Services Industry Surge by 61,839% in 2023

DDoS Attacks on the Environmental Services Industry Surge by 61,839% in 2023 2024-01-15 at 08:36 By The environmental services industry witnessed an “unprecedented surge” in HTTP-based distributed denial-of-service (DDoS) attacks, accounting for half of all its HTTP traffic. This marks a 61,839% increase in DDoS attack traffic year-over-year, web infrastructure and security company Cloudflare said

React to this headline:

Loading spinner

DDoS Attacks on the Environmental Services Industry Surge by 61,839% in 2023 Read More »

Flipping the BEC funnel: Phishing in the age of GenAI

Flipping the BEC funnel: Phishing in the age of GenAI 2024-01-15 at 08:02 By Help Net Security For years, phishing was just a numbers game: A malicious actor would slap together an extremely generic (and usually poorly-written) email and fire it out to thousands of recipients in the hope that a few might take the

React to this headline:

Loading spinner

Flipping the BEC funnel: Phishing in the age of GenAI Read More »

Preventing insider access from leaking to malicious actors

Preventing insider access from leaking to malicious actors 2024-01-15 at 07:32 By Help Net Security In this Help Net Security video, John Morello, CTO of Gutsy, discusses the often-overlooked aspect of cybersecurity – the offboarding process. He outlines the real-world implications and potential impact on an organization’s security posture if off-boarding isn’t handled thoroughly. The

React to this headline:

Loading spinner

Preventing insider access from leaking to malicious actors Read More »

Linus Torvalds postpones Linux 6.8 merge window after being taken offline by storms

Linus Torvalds postpones Linux 6.8 merge window after being taken offline by storms 2024-01-15 at 07:17 By Laura Dobberstein Roads are icy and drivers are dangerous. There will be no Starbucks run. Linus Torvalds has indefinitely postponed the merge window for version 6.8 of the Linux kernel after a winter storm knocked out power and

React to this headline:

Loading spinner

Linus Torvalds postpones Linux 6.8 merge window after being taken offline by storms Read More »

The intersection of cybersecurity and artificial intelligence

The intersection of cybersecurity and artificial intelligence 2024-01-15 at 07:16 By Artificial intelligence (AI) is a valuable cybersecurity asset, but it’s not a silver bullet. To best leverage AI, we must consider the security teams of the future. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to

React to this headline:

Loading spinner

The intersection of cybersecurity and artificial intelligence Read More »

Adalanche: Open-source Active Directory ACL visualizer, explorer

Adalanche: Open-source Active Directory ACL visualizer, explorer 2024-01-15 at 07:01 By Mirko Zorz Adalanche provides immediate insights into the permissions of users and groups within an Active Directory. It’s an effective open-source tool for visualizing and investigating potential account, machine, or domain takeovers. Additionally, it helps identify and display any misconfigurations. What unique features make

React to this headline:

Loading spinner

Adalanche: Open-source Active Directory ACL visualizer, explorer Read More »

Key elements for a successful cyber risk management strategy

Key elements for a successful cyber risk management strategy 2024-01-15 at 06:32 By Mirko Zorz In this Help Net Security interview, Yoav Nathaniel, CEO at Silk Security, discusses the evolution of cyber risk management strategies and practices, uncovering common mistakes and highlighting key components for successful risk resolution. Nathaniel anticipates a growing pressure on organizations

React to this headline:

Loading spinner

Key elements for a successful cyber risk management strategy Read More »

Government organizations’ readiness in the face of cyber threats

Government organizations’ readiness in the face of cyber threats 2024-01-15 at 06:01 By Help Net Security Cyber threats targeting government organizations have become increasingly sophisticated, posing significant risks to national security, public infrastructure, and sensitive data. These threats are diverse in nature, originating from various actors such as nation-states, hacktivist groups, and organized cybercrime entities.

React to this headline:

Loading spinner

Government organizations’ readiness in the face of cyber threats Read More »

China loathes AirDrop so much it’s publicized an old flaw in Apple’s P2P protocol

China loathes AirDrop so much it’s publicized an old flaw in Apple’s P2P protocol 2024-01-15 at 05:03 By Simon Sharwood Infosec academic suggests Beijing’s warning that iThing owners aren’t anonymous deserves attention outside the great firewall, too In June 2023 China made a typically bombastic announcement: operators of short-distance ad hoc networks must ensure they

React to this headline:

Loading spinner

China loathes AirDrop so much it’s publicized an old flaw in Apple’s P2P protocol Read More »

New Findings Challenge Attribution in Denmark’s Energy Sector Cyberattacks

New Findings Challenge Attribution in Denmark’s Energy Sector Cyberattacks 2024-01-14 at 11:46 By The cyber attacks targeting the energy sector in Denmark last year may not have had the involvement of the Russia-linked Sandworm hacking group, new findings from Forescout show. The intrusions, which targeted around 22 Danish energy organizations in May 2023, occurred in two distinct waves, one

React to this headline:

Loading spinner

New Findings Challenge Attribution in Denmark’s Energy Sector Cyberattacks Read More »

Week in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-days

Week in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-days 2024-01-14 at 09:33 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Social engineer reveals effective tricks for real-world intrusions In this Help Net Security interview, Jayson E. Street, Chief Adversarial Officer

React to this headline:

Loading spinner

Week in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-days Read More »

NASA, Lockheed Martin reveal subtly supersonic X-59 plane

NASA, Lockheed Martin reveal subtly supersonic X-59 plane 2024-01-13 at 16:17 By Thomas Claburn Boffins say the quiet part out loud: There’s no room for the sonic boom NASA’s X-59 quiet supersonic aircraft made its public debut on Friday in a media event at the Lockheed Martin Skunk Works in Palmdale, California, where the plane

React to this headline:

Loading spinner

NASA, Lockheed Martin reveal subtly supersonic X-59 plane Read More »

Scroll to Top