2024

Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus 2024-06-10 at 09:16 By Cybersecurity researchers have disclosed details of a threat actor known as Sticky Werewolf that has been linked to cyber attacks targeting entities in Russia and Belarus. The phishing attacks were aimed at a pharmaceutical company, a Russian research institute dealing with […]

AI hits prime time for physical security 2024-06-10 at 07:16 By AI is a valuable surveillance tool that is changing how organizations secure their physical infrastructure. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Event safety: How one day can affect a company’s reputation 2024-06-10 at 07:16 By Company events — big or small — are important when considering how to protect brand image. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Study finds a quarter of bosses hoped RTO would make employees quit 2024-06-09 at 21:31 By Brandon Vigliarolo Worker happiness hits an all-time low A study claims to have proof of what some have suspected: return to office mandates are just back-channel layoffs and post-COVID work culture is making everyone miserable. … This article is an

New PHP Vulnerability Exposes Windows Servers to Remote Code Execution 2024-06-09 at 18:16 By Details have emerged about a new critical security flaw impacting PHP that could be exploited to achieve remote code execution under certain circumstances. The vulnerability, tracked as CVE-2024-4577, has been described as a CGI argument injection vulnerability affecting all versions of

Microsoft Revamps Controversial AI-Powered Recall Feature Amid Privacy Concerns 2024-06-09 at 18:16 By Microsoft on Friday said it will disable its much-criticized artificial intelligence (AI)-powered Recall feature by default and make it an opt-in. Recall, currently in preview and coming exclusively to Copilot+ PCs on June 18, 2024, functions as an “explorable visual timeline” by

Ultimate Cyber Hygiene Guide: Learn How to Simplify Your Security Efforts 2024-06-09 at 18:16 By 2023 was a year of unprecedented cyberattacks. Ransomware crippled businesses, DDoS attacks disrupted critical services, and data breaches exposed millions of sensitive records. The cost of these attacks? Astronomical. The damage to reputations? Irreparable. But here’s the shocking truth: many

LightSpy Spyware’s macOS Variant Found with Advanced Surveillance Capabilities 2024-06-09 at 18:16 By Cybersecurity researchers have disclosed that the LightSpy spyware recently identified as targeting Apple iOS users is in fact a previously undocumented macOS variant of the implant. The findings come from both Huntress Labs and ThreatFabric, which separately analyzed the artifacts associated with

Cyber Landscape is Evolving – So Should Your SCA 2024-06-09 at 18:16 By Traditional SCAs Are Broken: Did You Know You Are Missing Critical Pieces? Application Security professionals face enormous challenges securing their software supply chains, racing against time to beat the attacker to the mark.  Software Composition Analysis (SCA) tools have become a basic

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief 2024-06-09 at 15:16 By Brandon Vigliarolo Scott Small tells us gang’s ‘intent and capability’ should get the attention of CSOs Interview  It might not be as big a name as BlackCat or LockBit, but the Akira ransomware is every bit as dangerous,

Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up 2024-06-08 at 17:46 By Jessica Lyons Lessons learned from the infosec chief convicted and punished for covering up theft of data from taxi app maker Interview  Joe Sullivan – the now-former Uber chief security officer who was found guilty of covering-up

Our vulture survived Computex – now he just needs to tell us the highs and lows 2024-06-08 at 15:16 By Iain Thomson We all grab a mic and discuss Nvidia, Intel, AMD, strange squid, and a certain CEO’s ego Kettle  Well, that was Computex 2024. A week of Nvidia, Intel, AMD, Qualcomm, and others talking

New PHP Vulnerability Exposes Windows Servers to Remote Code Execution 2024-06-08 at 11:01 By Details have emerged about a new critical security flaw impacting PHP that could be exploited to achieve remote code execution under certain circumstances. The vulnerability, tracked as CVE-2024-4577, has been described as a CGI argument injection vulnerability affecting all versions of

Astroboffins order most advanced spectrograph ever to sniff out alien life 2024-06-08 at 10:16 By Matthew Connatser ANDES, in the Andes, is predicted to find the first Population III mega-star The European Southern Observatory (ESO) this week signed a deal with a group of scientific institutions to build a spectrograph that can scan space for