Featured - Security Ticks

Iranian Hackers Lurked for 8 Months in Government Network

Featured, Iran, Nation-State / SecurityTicks

Iranian Hackers Lurked for 8 Months in Government Network 20/10/2023 at 16:31 By Ionut Arghire Iran-linked hacking group Crambus spent eight months inside a compromised network of a Middle Eastern government, Broadcom’s Symantec cybersecurity unit reports. The post Iranian Hackers Lurked for 8 Months in Government Network appeared first on SecurityWeek. This article is an […]

React to this headline:

Iranian Hackers Lurked for 8 Months in Government Network Read More »

Recent NetScaler Vulnerability Exploited as Zero-Day Since August

Citrix, exploited, Featured, Vulnerabilities, Zero-Day / SecurityTicks

Recent NetScaler Vulnerability Exploited as Zero-Day Since August 18/10/2023 at 14:01 By Ionut Arghire Mandiant says the recently patched Citrix NetScaler vulnerability CVE-2023-4966 had been exploited as zero-day since August. The post Recent NetScaler Vulnerability Exploited as Zero-Day Since August appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Recent NetScaler Vulnerability Exploited as Zero-Day Since August Read More »

Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability

Cisco, Featured, Malware & Threats, Zero-Day / SecurityTicks

Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability 18/10/2023 at 14:01 By Eduard Kovacs Tens of thousands of Cisco devices have reportedly been hacked via the exploitation of the zero-day vulnerability CVE-2023-20198. The post Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability Read More »

Cisco Devices Hacked via IOS XE Zero-Day Vulnerability

Cisco, exploited, Featured, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Devices Hacked via IOS XE Zero-Day Vulnerability 17/10/2023 at 14:16 By Eduard Kovacs Cisco is warning customers that a new IOS XE zero-day vulnerability tracked as CVE-2023-20198 is being exploited to hack devices. The post Cisco Devices Hacked via IOS XE Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Cisco Devices Hacked via IOS XE Zero-Day Vulnerability Read More »

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks

Featured, ICS, ICS/OT / SecurityTicks

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks 16/10/2023 at 15:33 By Eduard Kovacs A vulnerability affecting Milesight industrial routers, tracked as CVE-2023-4326, may have been exploited in attacks. The post Milesight Industrial Router Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks Read More »

‘HTTP/2 Rapid Reset’ Zero-Day Exploited to Launch Largest DDoS Attacks in History

DDoS, Featured, Network Security, Rapid Reset, Zero-Day / SecurityTicks

‘HTTP/2 Rapid Reset’ Zero-Day Exploited to Launch Largest DDoS Attacks in History 10/10/2023 at 17:02 By Eduard Kovacs A zero-day vulnerability named HTTP/2 Rapid Reset has been exploited to launch some of the largest DDoS attacks in history. The post ‘HTTP/2 Rapid Reset’ Zero-Day Exploited to Launch Largest DDoS Attacks in History appeared first on

React to this headline:

‘HTTP/2 Rapid Reset’ Zero-Day Exploited to Launch Largest DDoS Attacks in History Read More »

Researcher Conversations: Natalie Silvanovich From Google’s Project Zero

Featured, Google, Hacker Conversations, Vulnerabilities, vulnerability reserach / SecurityTicks

Researcher Conversations: Natalie Silvanovich From Google’s Project Zero 10/10/2023 at 15:37 By Kevin Townsend SecurityWeek continues its Hacker Conversations series in a discussion with Natalie Silvanovich, a member of of Google’s Project Zero. The post Researcher Conversations: Natalie Silvanovich From Google’s Project Zero appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Researcher Conversations: Natalie Silvanovich From Google’s Project Zero Read More »

Hackers Join In on Israel-Hamas War With Disruptive Cyberattacks

Cyberwarfare, DDoS, Featured, Hacktivism, Hamas, Israel / SecurityTicks

Hackers Join In on Israel-Hamas War With Disruptive Cyberattacks 09/10/2023 at 13:16 By Eduard Kovacs Several hacker groups have joined in on the Israel-Hamas war that started over the weekend after the militant group launched a major attack. The post Hackers Join In on Israel-Hamas War With Disruptive Cyberattacks appeared first on SecurityWeek. This article

React to this headline:

Hackers Join In on Israel-Hamas War With Disruptive Cyberattacks Read More »

CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws

Bluetooth, CISA, CISA KEV, Featured, Vulnerabilities / SecurityTicks

CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws 06/10/2023 at 13:46 By Eduard Kovacs CISA has removed from its KEV catalog five Owl Labs video conferencing flaws that require the attacker to be in Bluetooth range. The post CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws appeared first on

React to this headline:

CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws Read More »

Sony Confirms Data Stolen in Two Recent Hacker Attacks

data breach, Data Breaches, Featured, Ransomware, Sony / SecurityTicks

Sony Confirms Data Stolen in Two Recent Hacker Attacks 05/10/2023 at 14:01 By Eduard Kovacs Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. The post Sony Confirms Data Stolen in Two Recent Hacker Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Sony Confirms Data Stolen in Two Recent Hacker Attacks Read More »

Qualcomm Patches 3 Zero-Days Reported by Google

Featured, Mobile & Wireless, Qualcomm, Vulnerabilities / SecurityTicks

Qualcomm Patches 3 Zero-Days Reported by Google 04/10/2023 at 13:31 By Eduard Kovacs Qualcomm has patched more than two dozen vulnerabilities, including three zero-days that may have been exploited by spyware vendors. The post Qualcomm Patches 3 Zero-Days Reported by Google appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Qualcomm Patches 3 Zero-Days Reported by Google Read More »

Critical TorchServe Flaws Could Expose AI Infrastructure of Major Companies

AI, Artificial Intelligence, Featured, Vulnerabilities / SecurityTicks

Critical TorchServe Flaws Could Expose AI Infrastructure of Major Companies 03/10/2023 at 19:18 By Eduard Kovacs ShellTorch attack chains critical TorchServe vulnerabilities and could completely compromise the AI infrastructure of major companies. The post Critical TorchServe Flaws Could Expose AI Infrastructure of Major Companies appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Critical TorchServe Flaws Could Expose AI Infrastructure of Major Companies Read More »

Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities

Android, exploited, Featured, Mobile & Wireless, spyware, Zero-Day / SecurityTicks

Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities 03/10/2023 at 12:46 By Ionut Arghire The October 2023 security update for Android patches two vulnerabilities exploited in attacks, both likely linked to spyware vendors. The post Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Android’s October 2023 Security Updates Patch Two Exploited Vulnerabilities Read More »

Recently Patched TeamCity Vulnerability Exploited to Hack Servers

exploited, Featured, Vulnerabilities / SecurityTicks

Recently Patched TeamCity Vulnerability Exploited to Hack Servers 02/10/2023 at 13:01 By Eduard Kovacs In-the-wild exploitation of a critical vulnerability in the TeamCity CI/CD server started shortly after a patch was released by developers. The post Recently Patched TeamCity Vulnerability Exploited to Hack Servers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Recently Patched TeamCity Vulnerability Exploited to Hack Servers Read More »

National Security Agency is Starting an Artificial Intelligence Security Center

AI, artificial inteligence, Artificial Intelligence, Featured, NSA / SecurityTicks

National Security Agency is Starting an Artificial Intelligence Security Center 29/09/2023 at 18:02 By Associated Press The NSA is starting an artificial intelligence security center — a crucial mission as AI capabilities are increasingly acquired, developed and integrated into U.S. defense and intelligence systems. The post National Security Agency is Starting an Artificial Intelligence Security

React to this headline:

National Security Agency is Starting an Artificial Intelligence Security Center Read More »

Johnson Controls Hit by Ransomware

Featured, Ransomware / SecurityTicks

Johnson Controls Hit by Ransomware 29/09/2023 at 13:01 By Eduard Kovacs Johnson Controls has confirmed being hit by a disruptive cyberattack, with a ransomware group claiming to have stolen 27Tb of information from the company. The post Johnson Controls Hit by Ransomware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Johnson Controls Hit by Ransomware Read More »

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack

China, Featured, Nation-State / SecurityTicks

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack 29/09/2023 at 06:16 By AFP The US State Department said that hackers took around 60,000 emails in an attack which Microsoft has blamed on China. The post US State Department Says 60,000 Emails Taken in Alleged Chinese Hack appeared first on SecurityWeek. This article

React to this headline:

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack Read More »

Cisco Warns of IOS Software Zero-Day Exploitation Attempts

Cisco, exploited, Featured, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Warns of IOS Software Zero-Day Exploitation Attempts 28/09/2023 at 15:32 By Ionut Arghire Cisco has released patches for vulnerability in the GET VPN feature of IOS and IOS XE software that has been exploited in attacks. The post Cisco Warns of IOS Software Zero-Day Exploitation Attempts appeared first on SecurityWeek. This article is an

React to this headline:

Cisco Warns of IOS Software Zero-Day Exploitation Attempts Read More »

Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor

Chrome, exploited, Featured, Vulnerabilities, Zero-Day / SecurityTicks

Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor 28/09/2023 at 13:16 By Eduard Kovacs Google has rushed to patch a new Chrome zero-day vulnerability, tracked as CVE-2023-5217 and exploited by a spyware vendor. The post Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor appeared first on SecurityWeek. This article is an

React to this headline:

Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor Read More »

The CISO Carousel and its Effect on Enterprise Cybersecurity

CISO, CISO Strategy, Featured, Management & Strategy / SecurityTicks

The CISO Carousel and its Effect on Enterprise Cybersecurity 26/09/2023 at 14:46 By Kevin Townsend CISO churn is a hidden cybersecurity threat. Major security initiatives or implementations can take longer than the residency of a single CISO, and constant churn can leave cracks or gaps in security. The post The CISO Carousel and its Effect

React to this headline:

The CISO Carousel and its Effect on Enterprise Cybersecurity Read More »