2024

Infoseccers think attackers backed by China are behind Ivanti zero-day exploits 2024-01-11 at 17:17 By Connor Jones Customers currently left patchless while attacks are expected to increase Security experts believe Chinese nation-state attackers are actively exploiting two zero-day vulnerabilities in security products made by Ivanti.… This article is an excerpt from The Register View Original

React to this headline:

Fallon Ambulance announces data breach affecting over 900,000 patients 2024-01-11 at 17:17 By Fallon Ambulance, a medical transportation company based in Boston, is being investigated for a data breach including patient and employee data. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems 2024-01-11 at 17:17 By Cybersecurity researchers have developed a proof-of-concept (PoC) code that exploits a recently disclosed critical flaw in the Apache OfBiz open-source Enterprise Resource Planning (ERP) system to execute a memory-resident payload. The vulnerability in question is CVE-2023-51467 (CVSS score: 9.8), a bypass for another severe shortcoming

React to this headline:

New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms 2024-01-11 at 17:17 By A new Python-based hacking tool called FBot has been uncovered targeting web servers, cloud services, content management systems (CMS), and SaaS platforms such as Amazon Web Services (AWS), Microsoft 365, PayPal, Sendgrid, and Twilio. “Key features include credential harvesting for spamming attacks,

React to this headline:

Not even poor Notepad is safe from Microsoft’s AI obsession 2024-01-11 at 17:02 By Richard Speed Power user excavates evidence of experimental ‘Cowriter’ feature Windows Notepad is set to be the next recipient of Microsoft’s AI attentions judging by screenshots posted by a Windows Insider user.… This article is an excerpt from The Register View

React to this headline:

Google rings in 2024 with more layoffs – hundreds cut from multiple divisions 2024-01-11 at 16:32 By Brandon Vigliarolo Cuts are a continuation of late-2023 redundancies to help teams better ‘align their resources’ The 2024 layoff season appears to have only begun, with Google cutting hundreds of employees across multiple divisions yesterday. … This article is

React to this headline:

PC ‘price hike’ coming as cost of memory soars – analysts 2024-01-11 at 15:32 By Paul Kunert Scores are on the doors for Q4, as after 2 years shipments grow again… by 0.3% The PC industry has ended a two-year run of declining shipments, by growing 0.3 percent in Q4 of 2023, amid a warning

React to this headline:

How governments become addicted to suppliers like Fujitsu 2024-01-11 at 15:17 By Lindsay Clark Interest in Japanese’s firm’s public sector deals – worth $15B in the UK alone since 2012 – spikes Analysis  Since the broadcast of a television drama telling the story of the Post Office Horizon scandal — one of the most serious

React to this headline:

(Response) Splitting Up Reverse Proxies To Reach Internal Only Paths 2024-01-11 at 15:02 By Tom Neaves When I’m carrying out security research into a thing, I generally don’t like to Google prior research right away. I know, this completely goes against how you would (and should!) carry out any research; starting with a literature review

React to this headline:

Office gossips beware – chitchat could choke your career chances 2024-01-11 at 14:32 By Paul Kunert Study of workplace blabbermouths reveals the consequences If you’re the type of office blabbermouth who loves to stand at the water cooler and tell anyone who’ll listen that Pete in accounts has bad breath, or John and Jill in

React to this headline:

There is a Ransomware Armageddon Coming for Us All 2024-01-11 at 14:17 By Generative AI will enable anyone to launch sophisticated phishing attacks that only Next-generation MFA devices can stop The least surprising headline from 2023 is that ransomware again set new records for a number of incidents and the damage inflicted. We saw new

React to this headline:

Atomic Stealer Gets an Upgrade – Targeting Mac Users with Encrypted Payload 2024-01-11 at 14:17 By Cybersecurity researchers have identified an updated version of a macOS information stealer called Atomic (or AMOS), indicating that the threat actors behind the malware are actively enhancing its capabilities. “It looks like Atomic Stealer was updated around mid to late December

React to this headline: