2024

The Money Laundering Machine: Inside the global crime epidemic – Episode 24 2024-07-10 at 17:31 By In episode 24 of the Cybersecurity & Geopolitical Discussion, our trio of hosts discuss paradoxes surrounding money laundering and the reasons it’s so popular, particularly among well-establish organized criminal gangs. This article is an excerpt from Subscribe to Security

New Ransomware Group Exploiting Veeam Backup Software Vulnerability 2024-07-10 at 17:31 By A now-patched security flaw in Veeam Backup & Replication software is being exploited by a nascent ransomware operation known as EstateRansomware. Singapore-headquartered Group-IB, which discovered the threat actor in early April 2024, said the modus operandi involved the exploitation of CVE-2023-27532 (CVSS score:

A vulnerability was discovered in an NSA SkillTree training platform 2024-07-10 at 17:16 By Research has unveiled a potential vulnerability within a training platform called SkillTree. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Malware that is ‘not ransomware’ wormed its way through Fujitsu Japan’s systems 2024-07-10 at 17:01 By Connor Jones Company says data exfiltration was extremely difficult to detect Fujitsu Japan says an unspecified “advanced” malware strain was to blame for a March data theft, insisting the strain was “not ransomware”, yet it hasn’t revealed how many

Microsoft tries to clear the air with mountains of CO2 credits 2024-07-10 at 16:21 By Dan Robinson ‘Supply chains still powered by coal and gas’ scoffs Greenpeace Microsoft has inked a contract with Occidental Petroleum to buy 500,000 metric tons of carbon dioxide removal (CDR) “credits” over six years to support its overall carbon strategy.

How NeWS became yesterday’s news in the window system wars 2024-07-10 at 15:32 By Liam Proven X co-designer David Rosenthal looks back at why his other project failed A couple of weeks after its anniversary, one of the original engineers behind X has explored why it succeeded where rivals – one of which he co-developed

Smash-and-Grab Extortion 2024-07-10 at 15:16 By The Problem The “2024 Attack Intelligence Report” from the staff at Rapid7 [1] is a well-researched, well-written report that is worthy of careful study. Some key takeaways are:  53% of the over 30 new vulnerabilities that were widely exploited in 2023 and at the start of 2024 were zero-days.

Microsoft’s July Update Patches 143 Flaws, Including Two Actively Exploited 2024-07-10 at 15:16 By Microsoft has released patches to address a total of 143 security flaws as part of its monthly security updates, two of which have come under active exploitation in the wild. Five out of the 143 flaws are rated Critical, 136 are

True Protection or False Promise? The Ultimate ITDR Shortlisting Guide 2024-07-10 at 15:16 By It’s the age of identity security. The explosion of driven ransomware attacks has made CISOs and security teams realize that identity protection lags 20 years behind their endpoints and networks. This realization is mainly due to the transformation of lateral movement