December, 2024 - Security Ticks

U.S. Government Urges Citizens To Use Encrypted Texts

U.S. Government Urges Citizens To Use Encrypted Texts 2024-12-10 at 19:14 View original post at Safety Detectives US officials are warning citizens to avoid unsecured texting and instructing them to rely on encrypted texts and messages amidst a devastating series of attacks on telecom companies. AT&T, Lumen Technologies, and Verizon, three US telecom giants, were […]

React to this headline:

U.S. Government Urges Citizens To Use Encrypted Texts Read More »

Cleo File Transfer Vulnerability Under Exploitation – Patch Pending, Mitigation Urged

Uncategorized / SecurityTicks

Cleo File Transfer Vulnerability Under Exploitation – Patch Pending, Mitigation Urged 2024-12-10 at 18:48 By Users of Cleo-managed file transfer software are being urged to ensure that their instances are not exposed to the internet following reports of mass exploitation of a vulnerability affecting fully patched systems. Cybersecurity company Huntress said it discovered evidence of

React to this headline:

Cleo File Transfer Vulnerability Under Exploitation – Patch Pending, Mitigation Urged Read More »

AMD secure VM tech undone by DRAM meddling

Uncategorized / SecurityTicks

AMD secure VM tech undone by DRAM meddling 2024-12-10 at 18:20 By Thomas Claburn Boffins devise BadRAM attack to pilfer secrets from SEV-SNP encrypted memory Researchers have found that the security mechanism AMD uses to protect virtual machine memory can be bypassed with $10 of hardware – and perhaps not even that.… This article is

React to this headline:

AMD secure VM tech undone by DRAM meddling Read More »

Apple’s iOS 18.2 update is coming — ChatGPT and more about the most-anticipated Intelligence features

Uncategorized / SecurityTicks

Apple’s iOS 18.2 update is coming — ChatGPT and more about the most-anticipated Intelligence features 2024-12-10 at 17:49 By Brooke Steinberg Apple Intelligence was the big news to come out of the tech giant’s annual World Wide Developer Conference back in June. This article is an excerpt from Latest Technology News and Product Reviews | New York Post

React to this headline:

Apple’s iOS 18.2 update is coming — ChatGPT and more about the most-anticipated Intelligence features Read More »

Check your phone bill — customers rage over upcharge added to accounts: ‘The greed is insane’

Uncategorized / SecurityTicks

Check your phone bill — customers rage over upcharge added to accounts: ‘The greed is insane’ 2024-12-10 at 17:04 By Ben Cost They really crossed the phone line this time. This article is an excerpt from Latest Technology News and Product Reviews | New York Post View Original Source React to this headline:

React to this headline:

Check your phone bill — customers rage over upcharge added to accounts: ‘The greed is insane’ Read More »

OpenAI’s Sora lets ChatGPT subscribers churn out janky text-generated videos

Uncategorized / SecurityTicks

OpenAI’s Sora lets ChatGPT subscribers churn out janky text-generated videos 2024-12-10 at 16:49 By Richard Speed Buckle up, because limbed creatures are about to get weird OpenAI has put its video generation tool, Sora, into the hands of ChatGPT Plus and Pro users.… This article is an excerpt from The Register View Original Source React

React to this headline:

OpenAI’s Sora lets ChatGPT subscribers churn out janky text-generated videos Read More »

Fake Recruiters Distribute Banking Trojan via Malicious Apps in Phishing Scam

Uncategorized / SecurityTicks

Fake Recruiters Distribute Banking Trojan via Malicious Apps in Phishing Scam 2024-12-10 at 16:49 By Cybersecurity researchers have shed light on a sophisticated mobile phishing (aka mishing) campaign that’s designed to distribute an updated version of the Antidot banking trojan. “The attackers presented themselves as recruiters, luring unsuspecting victims with job offers,” Zimperium zLabs Vishnu

React to this headline:

Fake Recruiters Distribute Banking Trojan via Malicious Apps in Phishing Scam Read More »

Stamus Networks Clear NDR uncovers unauthorized activity

Industry news, Stamus Networks / SecurityTicks

Stamus Networks Clear NDR uncovers unauthorized activity 2024-12-10 at 16:33 By Industry News Stamus Networks announced Clear NDR, an open and transparent NDR system that empowers cyber defenders to uncover and stop serious threats and unauthorized activity before they cause harm to the organization. It can be deployed as a standalone NDR solution or integrated

React to this headline:

Stamus Networks Clear NDR uncovers unauthorized activity Read More »

‘Tis the Season for Artificial Intelligence-Generated Fraud Messages

Artificial Intelligence, email security, Emerging Threats, Vulnerabilities / SecurityTicks

‘Tis the Season for Artificial Intelligence-Generated Fraud Messages 2024-12-10 at 16:19 By The FBI issued an advisory on December 3rd warning the public of how threat actors use generative AI to more quickly and efficiently create messaging to defraud their victims, echoing earlier warnings issued by Trustwave SpiderLabs. This article is an excerpt from Trustwave Blog

React to this headline:

‘Tis the Season for Artificial Intelligence-Generated Fraud Messages Read More »

When User Input Lines Are Blurred: Indirect Prompt Injection Attack Vulnerabilities in AI LLMs

Artificial Intelligence, Emerging Threats, Vulnerabilities / SecurityTicks

When User Input Lines Are Blurred: Indirect Prompt Injection Attack Vulnerabilities in AI LLMs 2024-12-10 at 16:19 By Tom Neaves It was a cold and wet Thursday morning, sometime in early 2006. There I was sitting at the very top back row of an awe-inspiring lecture theatre inside Royal Holloway’s Founder’s Building in Egham, Surrey (UK) while

React to this headline:

When User Input Lines Are Blurred: Indirect Prompt Injection Attack Vulnerabilities in AI LLMs Read More »

Horizon3.ai NodeZero Insights enables executives to visualize changes in their security posture

Horizon3.ai, Industry news / SecurityTicks

Horizon3.ai NodeZero Insights enables executives to visualize changes in their security posture 2024-12-10 at 16:19 By Industry News Horizon3.ai launched NodeZero Insights, a platform designed for security leaders, CIOs, CISOs and practitioners. This new solution delivers real-time dashboards to measure, track and strengthen an organization’s security posture over time. NodeZero Insights provides the clarity and

React to this headline:

Horizon3.ai NodeZero Insights enables executives to visualize changes in their security posture Read More »

Head Mare Group Intensifies Attacks on Russia with PhantomCore Backdoor

Hacktivism, Malware, trojan / SecurityTicks

Head Mare Group Intensifies Attacks on Russia with PhantomCore Backdoor 2024-12-10 at 16:00 By rohansinhacyblecom Key takeaways Overview On 2nd September 2024, Kaspersky released a blog about the Head Mare group, which first emerged in 2023. Head Mare is a hacktivist group targeting organizations in Russia and Belarus with the goal of causing maximum damage

React to this headline:

Head Mare Group Intensifies Attacks on Russia with PhantomCore Backdoor Read More »

Versa Endpoint DLP prevents data exfiltration

Industry news, Versa Networks / SecurityTicks

Versa Endpoint DLP prevents data exfiltration 2024-12-10 at 16:00 By Industry News Versa announced Versa Endpoint DLP, an integrated endpoint data loss prevention (DLP) capability delivered by the Versa SASE Client as part of the VersaONE Universal SASE Platform. The endpoint DLP feature provides the widest range of data exfiltration prevention capabilities in an integrated

React to this headline:

Versa Endpoint DLP prevents data exfiltration Read More »

Fully patched Cleo products under renewed ‘zero-day-ish’ mass attack

Uncategorized / SecurityTicks

Fully patched Cleo products under renewed ‘zero-day-ish’ mass attack 2024-12-10 at 15:36 By Connor Jones Thousands of servers targeted while customers wait for patches Researchers at security shop Huntress are seeing mass exploitation of a vulnerability affecting three Cleo file management products, even on patched systems.… This article is an excerpt from The Register View

React to this headline:

Fully patched Cleo products under renewed ‘zero-day-ish’ mass attack Read More »

Think Twice Before You Click: INTERPOL Unveils Alarming Cybercrime Trends

cybercrime, Interpol / SecurityTicks

Think Twice Before You Click: INTERPOL Unveils Alarming Cybercrime Trends 2024-12-10 at 15:36 By daksh sharma Overview In response to the growing threat of cyber and financial crimes targeting individuals and organizations, INTERPOL has launched a new campaign called “Think Twice.” The campaign aims to raise awareness about the dangers of increasingly complex online threats,

React to this headline:

Think Twice Before You Click: INTERPOL Unveils Alarming Cybercrime Trends Read More »

Attackers actively exploiting flaw(s) in Cleo file transfer software (CVE-2024-50623)

Cleo, CVE, Don't miss, file-sharing, Hot stuff, Huntress, News, vulnerability / SecurityTicks

Attackers actively exploiting flaw(s) in Cleo file transfer software (CVE-2024-50623) 2024-12-10 at 15:35 By Zeljka Zorz Attackers are exploiting a vulnerability (CVE-2024-50623) in file transfer software by Cleo – LexiCo, VLTransfer, and Harmony – to gain access to organizations’ systems, Huntress researchers warned on Monday. “We’ve discovered at least 10 businesses whose Cleo servers were

React to this headline:

Attackers actively exploiting flaw(s) in Cleo file transfer software (CVE-2024-50623) Read More »

Head Mare Group Intensifies Attacks on Russia with PhantomCore RAT

Malware, trojan / SecurityTicks

Head Mare Group Intensifies Attacks on Russia with PhantomCore RAT 2024-12-10 at 15:03 By rohansinhacyblecom Key takeaways Overview On 2nd September 2024, Kaspersky released a blog about the Head Mare group, which first emerged in 2023. Head Mare is a hacktivist group targeting organizations in Russia and Belarus with the goal of causing maximum damage

React to this headline:

Head Mare Group Intensifies Attacks on Russia with PhantomCore RAT Read More »

The Future of Network Security: Automated Internal and External Pentesting

Uncategorized / SecurityTicks

The Future of Network Security: Automated Internal and External Pentesting 2024-12-10 at 15:03 By In today’s rapidly evolving threat landscape, safeguarding your organization against cyberattacks is more critical than ever. Traditional penetration testing (pentesting), while effective, often falls short due to its high costs, resource requirements, and infrequent implementation. Automated internal and external network pentesting

React to this headline:

The Future of Network Security: Automated Internal and External Pentesting Read More »

Heart surgery device maker’s security bypassed, data encrypted and stolen

Uncategorized / SecurityTicks

Heart surgery device maker’s security bypassed, data encrypted and stolen 2024-12-10 at 14:33 By Connor Jones Sounds like th-aorta get this sorted quickly A manufacturer of devices used in heart surgeries says it’s dealing with “a cybersecurity incident” that bears all the hallmarks of a ransomware attack.… This article is an excerpt from The Register

React to this headline:

Heart surgery device maker’s security bypassed, data encrypted and stolen Read More »

Security Risks in TP-Link Archer Router Could Lead to Unauthorized Access

TP-Link Archer, vulnerability / SecurityTicks

Security Risks in TP-Link Archer Router Could Lead to Unauthorized Access 2024-12-10 at 14:33 By daksh sharma Overview The TP-Link Archer C50 V4, a popular dual-band wireless router designed for small office and home office (SOHO) networks, has been found to contain multiple security vulnerabilities that could expose users to a range of cyber threats.

React to this headline:

Security Risks in TP-Link Archer Router Could Lead to Unauthorized Access Read More »

December 2024