Featured - Security Ticks

US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea

botnet, Featured, Malware & Threats, takedown, Tracking & Law Enforcement / SecurityTicks

US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea 15/11/2023 at 17:01 By Eduard Kovacs US government announces the takedown of the IPStorm proxy service botnet and the guilty plea of its creator, a Russian/Moldovan national. The post US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea appeared first on SecurityWeek. This article […]

React to this headline:

US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea Read More »

Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack

Amd, CPU, Featured, Vulnerabilities / SecurityTicks

Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack 14/11/2023 at 21:46 By Eduard Kovacs CacheWarp is a new attack method affecting a security feature present in AMD processors that can pose a risk to virtual machines. The post Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack appeared first on SecurityWeek. This

React to this headline:

Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack Read More »

22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure

critical infrastructure, Cyberwarfare, Denmark, Featured, ICS/OT / SecurityTicks

22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure 14/11/2023 at 15:16 By Ionut Arghire Denmark’s SektorCERT association shares details on a coordinated attack against the country’s energy sector. The post 22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure appeared first on SecurityWeek. This article is an excerpt

React to this headline:

22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure Read More »

Operations at Major Australian Ports Significantly Disrupted by Cyberattack

Australia, cybercrime, Featured, port, Ransomware / SecurityTicks

Operations at Major Australian Ports Significantly Disrupted by Cyberattack 13/11/2023 at 14:02 By Eduard Kovacs A cyberattack on Australian shipping giant DP World, which may have been a ransomware attack, has resulted in serious disruptions at major ports. The post Operations at Major Australian Ports Significantly Disrupted by Cyberattack appeared first on SecurityWeek. This article

React to this headline:

Operations at Major Australian Ports Significantly Disrupted by Cyberattack Read More »

Intel Sued Over ‘Downfall’ CPU Vulnerability

Endpoint Security, Featured, Intel, lawsuit / SecurityTicks

Intel Sued Over ‘Downfall’ CPU Vulnerability 10/11/2023 at 17:47 By Eduard Kovacs A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall. The post Intel Sued Over ‘Downfall’ CPU Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Intel Sued Over ‘Downfall’ CPU Vulnerability Read More »

Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say

Featured, Ransomware / SecurityTicks

Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say 10/11/2023 at 15:01 By Associated Press A ransomware attack on China’s biggest bank, the Industrial and Commercial Bank of China Financial Services, disrupts Treasury market trades. The post Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say appeared first on

React to this headline:

Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say Read More »

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes

Cyberwarfare, Featured, ICS, ICS malware, ICS/OT, Malware & Threats, Mandiant, Nation-State, OT, Russia, Sandworm, Ukraine / SecurityTicks

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes 09/11/2023 at 12:16 By Ryan Naraine Mandiant says Russia’s Sandworm hackers used a novel OT attack to cause power outages that coincided with mass missile strikes on critical infrastructure across Ukraine. The post Russian Hackers Used Novel OT Attack to Disrupt

React to this headline:

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes Read More »

Sumo Logic Urges Users to Change Credentials Due to Security Breach

data breach, Data Breaches, Featured, Sumo Logic, Uncategorized / SecurityTicks

Sumo Logic Urges Users to Change Credentials Due to Security Breach 08/11/2023 at 17:46 By Eduard Kovacs Cloud monitoring and SIEM firm Sumo Logic is urging users to rotate credentials following the discovery of a security breach. The post Sumo Logic Urges Users to Change Credentials Due to Security Breach appeared first on SecurityWeek. This

React to this headline:

Sumo Logic Urges Users to Change Credentials Due to Security Breach Read More »

‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks

Cloud, cloud security, exploited, Featured, Linux / SecurityTicks

‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks 06/11/2023 at 17:06 By Eduard Kovacs Glibc vulnerability affecting major Linux distributions and tracked as Looney Tunables exploited in cloud attacks by Kinsing group. The post ‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks Read More »

Microsoft Says Exchange ‘Zero Days’ Disclosed by ZDI Already Patched or Not Urgent

Exchange, Featured, Vulnerabilities / SecurityTicks

Microsoft Says Exchange ‘Zero Days’ Disclosed by ZDI Already Patched or Not Urgent 06/11/2023 at 13:30 By Eduard Kovacs Microsoft says four Exchange ‘zero-days’ disclosed by ZDI have either already been patched or they don’t require immediate attention. The post Microsoft Says Exchange ‘Zero Days’ Disclosed by ZDI Already Patched or Not Urgent appeared first

React to this headline:

Microsoft Says Exchange ‘Zero Days’ Disclosed by ZDI Already Patched or Not Urgent Read More »

Countries at a UK Summit Pledge to Tackle AI’s Potentially ‘Catastrophic’ Risks

Artificial Intelligence, Featured / SecurityTicks

Countries at a UK Summit Pledge to Tackle AI’s Potentially ‘Catastrophic’ Risks 01/11/2023 at 23:46 By Associated Press Delegates from 28 nations agreed to work together to contain the potentially “catastrophic” risks posed by galloping advances in artificial intelligence. The post Countries at a UK Summit Pledge to Tackle AI’s Potentially ‘Catastrophic’ Risks appeared first

React to this headline:

Countries at a UK Summit Pledge to Tackle AI’s Potentially ‘Catastrophic’ Risks Read More »

Cybersecurity Leaders Spooked by SEC Lawsuit Against SolarWinds CISO

CISO Strategy, Featured / SecurityTicks

Cybersecurity Leaders Spooked by SEC Lawsuit Against SolarWinds CISO 31/10/2023 at 23:16 By Mike Lennon The SEC’s lawsuit against the CISO of SolarWinds is leaving CISOs across the industry spooked and reevaluating their roles. The post Cybersecurity Leaders Spooked by SEC Lawsuit Against SolarWinds CISO appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Cybersecurity Leaders Spooked by SEC Lawsuit Against SolarWinds CISO Read More »

SEC Charges SolarWinds and Its CISO With Fraud and Cybersecurity Failures

CISO, CISO Strategy, Featured, Incident Response, SolarWinds, SUNBURST, Tracking & Law Enforcement / SecurityTicks

SEC Charges SolarWinds and Its CISO With Fraud and Cybersecurity Failures 31/10/2023 at 05:01 By Mike Lennon The SEC filed charges against SolarWinds and its CISO over misleading investors about its cybersecurity practices and known risks. The post SEC Charges SolarWinds and Its CISO With Fraud and Cybersecurity Failures appeared first on SecurityWeek. This article

React to this headline:

SEC Charges SolarWinds and Its CISO With Fraud and Cybersecurity Failures Read More »

Biden Wants to Move Fast on AI Safeguards and Will Sign an Executive Order to Address His Concerns

AI, artificial inteligence, Artificial Intelligence, Featured, Government, Regulations / SecurityTicks

Biden Wants to Move Fast on AI Safeguards and Will Sign an Executive Order to Address His Concerns 30/10/2023 at 14:46 By Associated Press President Joe Biden on Monday will sign a sweeping executive order to guide the development of artificial intelligence — requiring industry to develop safety and security standards, and introducing new consumer

React to this headline:

Biden Wants to Move Fast on AI Safeguards and Will Sign an Executive Order to Address His Concerns Read More »

Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools

Featured, Malware, Malware & Threats, NSA / SecurityTicks

Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools 27/10/2023 at 17:47 By Ionut Arghire The StripedFly malware has APT-like capabilities, but remained unnoticed for five years, posing as a cryptocurrency miner. The post Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools appeared first on SecurityWeek. This article

React to this headline:

Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools Read More »

iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones

apple, Featured, Mobile & Wireless, side-channel attack, Vulnerabilities / SecurityTicks

iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones 26/10/2023 at 19:32 By Eduard Kovacs New iLeakage side-channel speculative execution attack exploits Safari to steal sensitive information from Macs and iPhones. The post iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones appeared first on SecurityWeek. This article is an excerpt

React to this headline:

iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones Read More »

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure

critical infrastructure, Featured, ICS/OT, Nation-State, Volt Typhoon / SecurityTicks

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure 25/10/2023 at 19:17 By Ryan Naraine Mandiant’s Chief analyst urges critical infrastructure defenders to work on finding and removing traces of Volt Typhoon, a Chinese government-backed hacking team caught in a series of eyebrow-raising attacks against targets in Guam and the

React to this headline:

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure Read More »

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

Featured, ICS, ICS/OT, open source, PLC / SecurityTicks

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding 25/10/2023 at 18:17 By Eduard Kovacs A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each vendor. The post New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

React to this headline:

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding Read More »

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference

Featured, ICS, ICS/OT / SecurityTicks

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference 25/10/2023 at 16:31 By SecurityWeek News SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, as hundreds of industrial cybersecurity stakeholders gather for Day 2 of the annual industrial cybersecurity conference. The post Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023

React to this headline:

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference Read More »

Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops

Cisco, Featured, Malware & Threats, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops 23/10/2023 at 21:49 By Eduard Kovacs Cisco has found a second zero-day vulnerability that has been exploited in recent attacks as the number of hacked devices has started dropping. The post Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops appeared first

React to this headline:

Cisco Finds Second Zero-Day as Number of Hacked Devices Apparently Drops Read More »