February 2024

Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor

Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor 2024-02-15 at 17:31 By The Russia-linked threat actor known as Turla has been observed using a new backdoor called TinyTurla-NG as part of a three-month-long campaign targeting Polish non-governmental organizations in December 2023. “TinyTurla-NG, just like TinyTurla, is a small ‘last chance’ backdoor that is left behind […]

React to this headline:

Loading spinner

Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor Read More »

Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries

Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries 2024-02-15 at 17:31 By A reverse engineering of the firmware running on Ivanti Pulse Secure appliances has revealed numerous weaknesses, once again underscoring the challenge of securing software supply chains. Eclypsiusm, which acquired firmware version 9.1.18.2-24467.1 as part of the process, said the base

React to this headline:

Loading spinner

Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries Read More »

Microsoft ‘retires’ Azure IoT Central in platform rethink

Microsoft ‘retires’ Azure IoT Central in platform rethink 2024-02-15 at 17:02 By Lindsay Clark After March, devs won’t be able to create new application resources, in 2027 the system will be shut down Exclusive  Without warning, Microsoft has decided to retire a key plank of its Azure IoT platform, leaving developers currently building systems high

React to this headline:

Loading spinner

Microsoft ‘retires’ Azure IoT Central in platform rethink Read More »

BigID unveils access intelligence capabilities for security, risk, and AI compliance

BigID unveils access intelligence capabilities for security, risk, and AI compliance 2024-02-15 at 17:02 By Industry News BigID announced new access governance controls that enable organizations to easily improve security posture, mitigate insider risk, achieve zero trust security, and accelerate AI compliance. BigID is pioneering access governance and controls for analytics and AI data, across

React to this headline:

Loading spinner

BigID unveils access intelligence capabilities for security, risk, and AI compliance Read More »

ESET Patches High-Severity Privilege Escalation Vulnerability

ESET Patches High-Severity Privilege Escalation Vulnerability 2024-02-15 at 17:02 By Ionut Arghire ESET has released patches for a high-severity elevation of privilege vulnerability in its Windows security products. The post ESET Patches High-Severity Privilege Escalation Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Loading spinner

ESET Patches High-Severity Privilege Escalation Vulnerability Read More »

No Security Scrutiny for Half of Major Code Changes: AppSec Survey

No Security Scrutiny for Half of Major Code Changes: AppSec Survey 2024-02-15 at 17:02 By Ionut Arghire Only 54% of major code changes go through a full security review, a new CrowdStrike State of Application Security report reveals. The post No Security Scrutiny for Half of Major Code Changes: AppSec Survey appeared first on SecurityWeek.

React to this headline:

Loading spinner

No Security Scrutiny for Half of Major Code Changes: AppSec Survey Read More »

New Wi-Fi Authentication Bypass Flaws Expose Home, Enterprise Networks

New Wi-Fi Authentication Bypass Flaws Expose Home, Enterprise Networks 2024-02-15 at 17:02 By Eduard Kovacs A couple of Wi-Fi authentication bypass vulnerabilities found in open source software can expose enterprise and home networks to attacks. The post New Wi-Fi Authentication Bypass Flaws Expose Home, Enterprise Networks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Loading spinner

New Wi-Fi Authentication Bypass Flaws Expose Home, Enterprise Networks Read More »

NICE Actimize introduces generative AI-based solutions designed to fight financial crime

NICE Actimize introduces generative AI-based solutions designed to fight financial crime 2024-02-15 at 16:31 By Industry News NICE Actimize announces three advanced generative AI-based solutions designed to fight financial crime and allow organizations to significantly reduce the manual and labor-intensive tasks currently employed in financial crime investigations and reporting. Offering up to a 50% reduction

React to this headline:

Loading spinner

NICE Actimize introduces generative AI-based solutions designed to fight financial crime Read More »

Cybercriminals are stealing Face ID scans to break into mobile banking accounts

Cybercriminals are stealing Face ID scans to break into mobile banking accounts 2024-02-15 at 16:17 By Connor Jones Deepfake-enabled attacks against Android and iOS users are netting criminals serious cash Cybercriminals are targeting iOS users with malware that steals Face ID scans to break into and pilfer money from bank accounts – thought to be

React to this headline:

Loading spinner

Cybercriminals are stealing Face ID scans to break into mobile banking accounts Read More »

Lessons to be Learned: Attacks on Higher Education Proliferate

Lessons to be Learned: Attacks on Higher Education Proliferate 2024-02-15 at 16:02 By Trustwave SpiderLabs is wrapping up a multi-month investigation into the threats facing the education sector, across higher education, primary and secondary schools. Trustwave will post the 2024 Education Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies report on February 22, but

React to this headline:

Loading spinner

Lessons to be Learned: Attacks on Higher Education Proliferate Read More »

Mitek MiControl empowers financial institutions to detect check fraud

Mitek MiControl empowers financial institutions to detect check fraud 2024-02-15 at 16:02 By Industry News Mitek introduced MiControl, a comprehensive fraud management console that works with Mitek’s Check Fraud Defender. MiControl detects check fraud, reduces losses and further increases consumers’ online security. With its advanced visualizations and overlays, paired with business rules configured by the

React to this headline:

Loading spinner

Mitek MiControl empowers financial institutions to detect check fraud Read More »

Cisco cuts 5% of workforce amid cautious enterprise spending

Cisco cuts 5% of workforce amid cautious enterprise spending 2024-02-15 at 15:26 By Paul Kunert $800M charge facing network giant as customers work way through existing inventory Networking goliath Cisco has finally confirmed talk from earlier in the week that it is laying off thousands of staff, reflecting the cautious outlook that management are seeing

React to this headline:

Loading spinner

Cisco cuts 5% of workforce amid cautious enterprise spending Read More »

Creating open yet secure environments for logistics facilities

Creating open yet secure environments for logistics facilities 2024-02-15 at 15:26 By The for robust security must be balanced against the need for facilities to offer an open and welcoming environment. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Loading spinner

Creating open yet secure environments for logistics facilities Read More »

Infoblox SOC Insights reduces critical security operations challenges

Infoblox SOC Insights reduces critical security operations challenges 2024-02-15 at 15:02 By Industry News Infoblox announced an AI-driven security operations solution, SOC Insights, that boosts its DNS Detection and Response solution, BloxOne Threat Defense. SOC Insights empowers security analysts to jump-start investigations that truly matter and dramatically reduce response time by turning vast amounts of

React to this headline:

Loading spinner

Infoblox SOC Insights reduces critical security operations challenges Read More »

IT body proposes that AI pros get leashed and licensed to uphold ethics

IT body proposes that AI pros get leashed and licensed to uphold ethics 2024-02-15 at 14:41 By Paul Kunert Set up a register and strike them off for bad behavior Creating a register of licensed AI professionals to uphold ethical standards and securing whistleblowing channels to call out bad management are two policies that could

React to this headline:

Loading spinner

IT body proposes that AI pros get leashed and licensed to uphold ethics Read More »

Battery maker Varta halts production after cyberattack

Battery maker Varta halts production after cyberattack 2024-02-15 at 14:17 By Helga Labus German battery manufacturer Varta was forced to shut down its IT systems and stop production as a result of a cyberattack. The Varta cyberattack The cyberattack occurred on Monday night and affected five of the company’s production plants and the administration. According

React to this headline:

Loading spinner

Battery maker Varta halts production after cyberattack Read More »

Bitwarden adds event logs and self-hosting capabilities to its Passwordless.dev toolkit

Bitwarden adds event logs and self-hosting capabilities to its Passwordless.dev toolkit 2024-02-15 at 14:17 By Industry News Bitwarden strengthened its Passwordless.dev enterprise plan with event logs and self-hosting options. These features empower organizations with greater transparency when moving to passwordless authentication and enable developers to build workforce passkey authentication with ease. High demand for enterprise

React to this headline:

Loading spinner

Bitwarden adds event logs and self-hosting capabilities to its Passwordless.dev toolkit Read More »

Twilio reminds users that Authy Desktop apps die next month – not in August

Twilio reminds users that Authy Desktop apps die next month – not in August 2024-02-15 at 13:47 By Richard Speed ‘This is an excellent way to piss off thousands of developers’ End of life for the Authy Desktop authentication app is scheduled for March 19, rather than the August 2024 date previously announced.… This article

React to this headline:

Loading spinner

Twilio reminds users that Authy Desktop apps die next month – not in August Read More »

Microsoft Warns of Exploited Exchange Server Zero-Day

Microsoft Warns of Exploited Exchange Server Zero-Day 2024-02-15 at 13:46 By Ionut Arghire Microsoft says a newly patched Exchange Server vulnerability (CVE-2024-21410) has been exploited in attacks. The post Microsoft Warns of Exploited Exchange Server Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Loading spinner

Microsoft Warns of Exploited Exchange Server Zero-Day Read More »

Scroll to Top