Featured - Security Ticks

Zero-Day Breach at Rackspace Sparks Vendor Blame Game

Data Breaches, Featured, Rackspace, Ransomware, ScienceLogic, SL1, Supply Chain Security, Zero-Day / SecurityTicks

Zero-Day Breach at Rackspace Sparks Vendor Blame Game 2024-10-02 at 21:01 By Ryan Naraine A breach at Rackspace exposes the fragility of the software supply chain, triggering a blame game among vendors over an exploited zero-day. The post Zero-Day Breach at Rackspace Sparks Vendor Blame Game appeared first on SecurityWeek. This article is an excerpt […]

React to this headline:

Zero-Day Breach at Rackspace Sparks Vendor Blame Game Read More »

Record-Breaking DDoS Attack Peaked at 3.8 Tbps, 2.14 Billion Pps

Cloudflare, DDoS, DDoS record, Featured, Network Security / SecurityTicks

Record-Breaking DDoS Attack Peaked at 3.8 Tbps, 2.14 Billion Pps 2024-10-02 at 15:46 By Eduard Kovacs Cloudflare recently mitigated another record-breaking DDoS attack, peaking at 3.8 Tbps and 2.14 billion Pps. The post Record-Breaking DDoS Attack Peaked at 3.8 Tbps, 2.14 Billion Pps appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Record-Breaking DDoS Attack Peaked at 3.8 Tbps, 2.14 Billion Pps Read More »

More LockBit Hackers Arrested, Unmasked as Law Enforcement Seizes Servers

arrested, Evil Corp, Featured, LockBit, Ransomware, Sanctions, Tracking & Law Enforcement / SecurityTicks

More LockBit Hackers Arrested, Unmasked as Law Enforcement Seizes Servers 2024-10-01 at 18:46 By Eduard Kovacs Previously seized LockBit websites have been used to announce more arrests, charges and infrastructure disruptions. The post More LockBit Hackers Arrested, Unmasked as Law Enforcement Seizes Servers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

More LockBit Hackers Arrested, Unmasked as Law Enforcement Seizes Servers Read More »

California Governor Vetoes Bill to Create First-in-Nation AI Safety Measures

Artificial Intelligence, Featured, Government, Regulations / SecurityTicks

California Governor Vetoes Bill to Create First-in-Nation AI Safety Measures 2024-09-30 at 06:16 By Associated Press Gavin Newsom vetoed a landmark bill SB 1047 aimed at establishing first-in-the-nation safety measures for large artificial intelligence models. The post California Governor Vetoes Bill to Create First-in-Nation AI Safety Measures appeared first on SecurityWeek. This article is an

React to this headline:

California Governor Vetoes Bill to Create First-in-Nation AI Safety Measures Read More »

Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation

Artificial Intelligence, Encryption, Endpoint Security, Featured, Microsoft, Privacy & Compliance, Proof-of-Presence, Windows Hello, Windows Recall / SecurityTicks

Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation 2024-09-27 at 21:01 By Ryan Naraine Microsoft reboots controversial Windows Recall with proof-of-presence encryption, anti-tampering checks, and secure enclave data management. The post Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation appeared first on SecurityWeek. This article is an

React to this headline:

Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation Read More »

Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than Expected

CUPS, Featured, Linux, Linux vulnerability, printer, Vulnerabilities / SecurityTicks

Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than Expected 2024-09-27 at 13:31 By Eduard Kovacs A researcher has disclosed the details of an unpatched vulnerability that was expected to pose a serious threat to many Linux systems. The post Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than

React to this headline:

Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than Expected Read More »

Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks

Featured, ICS, ICS/OT, Israel, Lebanon, Water / SecurityTicks

Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks 2024-09-26 at 15:01 By Eduard Kovacs Unsophisticated methods can still be used to hack ICS/OT — even so, many cyberattack claims are likely exaggerated. The post Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks appeared

React to this headline:

Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks Read More »

CrowdStrike Overhauls Testing and Rollout Procedures to Avoid System Crashes

BSOD, buggy update, CrowdStrike, Featured, Incident Response, Microsoft, Windows / SecurityTicks

CrowdStrike Overhauls Testing and Rollout Procedures to Avoid System Crashes 2024-09-24 at 23:16 By Ryan Naraine CrowdStrike says it has revamped several testing, validation, and update rollout processes to prevent a repeat of the July BSOD incident. The post CrowdStrike Overhauls Testing and Rollout Procedures to Avoid System Crashes appeared first on SecurityWeek. This article

React to this headline:

CrowdStrike Overhauls Testing and Rollout Procedures to Avoid System Crashes Read More »

AI-Generated Malware Found in the Wild

AI, Artificial Intelligence, Featured, Malware, Malware & Threats / SecurityTicks

AI-Generated Malware Found in the Wild 2024-09-24 at 20:16 By Kevin Townsend HP has intercepted an email campaign comprising a standard malware payload delivered by an AI-generated dropper. The post AI-Generated Malware Found in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

AI-Generated Malware Found in the Wild Read More »

Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach

data breach, Data Breaches, Data leak, Deloitte, Featured / SecurityTicks

Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach 2024-09-24 at 12:16 By Eduard Kovacs Deloitte says no sensitive data exposed after a notorious hacker leaked what he claimed to be internal communications. The post Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach appeared first on SecurityWeek. This

React to this headline:

Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach Read More »

Cybersecurity Products Conking Out After macOS Sequoia Update

buggy update, Endpoint Security, Featured, macOS, security product / SecurityTicks

Cybersecurity Products Conking Out After macOS Sequoia Update 2024-09-23 at 15:01 By Ionut Arghire macOS Sequoia updates are causing cybersecurity software failures and breaking network connectivity for many. The post Cybersecurity Products Conking Out After macOS Sequoia Update appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Cybersecurity Products Conking Out After macOS Sequoia Update Read More »

Ivanti Warns of Second CSA Vulnerability Exploited in Attacks

exploited, Featured, Ivanti, Vulnerabilities / SecurityTicks

Ivanti Warns of Second CSA Vulnerability Exploited in Attacks 2024-09-20 at 11:46 By Eduard Kovacs In addition to the Ivanti CSA flaw CVE-2024-8190, another vulnerability affecting the same product, tracked as CVE-2024-8963, has been exploited. The post Ivanti Warns of Second CSA Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Ivanti Warns of Second CSA Vulnerability Exploited in Attacks Read More »

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon

botnet, China, Featured, Flax Typhoon, Nation-State, Raptor Train, takedown, Tracking & Law Enforcement / SecurityTicks

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon 2024-09-19 at 13:16 By Eduard Kovacs The US government has announced the disruption of Raptor Train, a Flax Typhoon botnet powered by hacked consumer devices. The post US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon appeared first on SecurityWeek. This article is an

React to this headline:

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon Read More »

Hundreds of Pagers Exploded in Lebanon and Syria in a Deadly Attack. Here’s What We Know.

Cyberwarfare, Featured, Israel / SecurityTicks

Hundreds of Pagers Exploded in Lebanon and Syria in a Deadly Attack. Here’s What We Know. 2024-09-18 at 00:46 By Associated Press Very small explosive devices may have been built into the pagers prior to their delivery to Hezbollah, and then all remotely triggered simultaneously. The post Hundreds of Pagers Exploded in Lebanon and Syria

React to this headline:

Hundreds of Pagers Exploded in Lebanon and Syria in a Deadly Attack. Here’s What We Know. Read More »

Hezbollah Members Among Hundreds Wounded after Pagers Explode in Lebanon and Syria, Officials Say

Cyberwarfare, Featured, Hezbollah, Israel / SecurityTicks

Hezbollah Members Among Hundreds Wounded after Pagers Explode in Lebanon and Syria, Officials Say 2024-09-17 at 19:03 By Associated Press A Hezbollah official speculated that malware may have caused the pagers to heat up and explode. The post Hezbollah Members Among Hundreds Wounded after Pagers Explode in Lebanon and Syria, Officials Say appeared first on

React to this headline:

Hezbollah Members Among Hundreds Wounded after Pagers Explode in Lebanon and Syria, Officials Say Read More »

The AI Threat: Deepfake or Deep Fake? Unraveling the True Security Risks

AI, Artificial Intelligence, deepfake, Featured / SecurityTicks

The AI Threat: Deepfake or Deep Fake? Unraveling the True Security Risks 2024-09-17 at 17:34 By Kevin Townsend When it comes to adversarial use of AI, the real question is whether the AI threat is a deep fake, or whether the deepfake is the AI threat. The post The AI Threat: Deepfake or Deep Fake?

React to this headline:

The AI Threat: Deepfake or Deep Fake? Unraveling the True Security Risks Read More »

Recent WhatsUp Gold Vulnerabilities Possibly Exploited in Ransomware Attacks

exploited, Featured, Ransomware, Vulnerabilities, WhatsUp Gold / SecurityTicks

Recent WhatsUp Gold Vulnerabilities Possibly Exploited in Ransomware Attacks 2024-09-17 at 13:01 By Eduard Kovacs Two recently patched Progress Software WhatsUp Gold vulnerabilities may have been exploited in the wild, possibly in ransomware attacks. The post Recent WhatsUp Gold Vulnerabilities Possibly Exploited in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Recent WhatsUp Gold Vulnerabilities Possibly Exploited in Ransomware Attacks Read More »

Apple Suddenly Drops NSO Group Spyware Lawsuit

apple, Featured, iOS, Nation-State, nso group, surveillance, Vulnerabilities, WhatApp / SecurityTicks

Apple Suddenly Drops NSO Group Spyware Lawsuit 2024-09-14 at 00:01 By Ryan Naraine Apple said there’s “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case. The post Apple Suddenly Drops NSO Group Spyware Lawsuit appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Apple Suddenly Drops NSO Group Spyware Lawsuit Read More »

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel

CrowdStrike, EDR, Endpoint Security, Featured, kernel, Microsoft, Windows / SecurityTicks

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel 2024-09-13 at 21:45 By Ryan Naraine Microsoft is revamping how anti-malware tools interact with the Windows kernel to avoid another CrowdStrike faulty update catastrophe. The post Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel Read More »

Fortinet Data Breach Impacts Customer Information

data breach, Data Breaches, Featured, Fortinet / SecurityTicks

Fortinet Data Breach Impacts Customer Information 2024-09-13 at 12:16 By Eduard Kovacs Fortinet has confirmed suffering a data breach impacting customers after a hacker leaked files allegedly stolen from the company. The post Fortinet Data Breach Impacts Customer Information appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Fortinet Data Breach Impacts Customer Information Read More »