Featured - Security Ticks

Five Eyes Report: New Russian Malware Targeting Ukrainian Military Android Devices

Android trojan, Cyberwarfare, Featured, Five Eyes, Malware, Mobile & Wireless, Russia, Ukraine / SecurityTicks

Five Eyes Report: New Russian Malware Targeting Ukrainian Military Android Devices 31/08/2023 at 15:46 By Eduard Kovacs Five Eyes report details ‘Infamous Chisel’ malware used by Russian state-sponsored hackers to target the Ukrainian military’s Android devices. The post Five Eyes Report: New Russian Malware Targeting Ukrainian Military Android Devices appeared first on SecurityWeek. This article

React to this headline:

Five Eyes Report: New Russian Malware Targeting Ukrainian Military Android Devices Read More »

BGP Flaw Can Be Exploited for Prolonged Internet Outages

Featured, Network Security / SecurityTicks

BGP Flaw Can Be Exploited for Prolonged Internet Outages 30/08/2023 at 15:31 By Eduard Kovacs Serious flaw affecting major BGP implementations can be exploited to cause prolonged internet outages, but several vendors have not patched it. The post BGP Flaw Can Be Exploited for Prolonged Internet Outages appeared first on SecurityWeek. This article is an

React to this headline:

BGP Flaw Can Be Exploited for Prolonged Internet Outages Read More »

3 Cryptocurrency Firms Suffer Data Breach After Kroll SIM Swapping Attack

Cryptocurrency, data breach, Data Breaches, Featured, Kroll / SecurityTicks

3 Cryptocurrency Firms Suffer Data Breach After Kroll SIM Swapping Attack 28/08/2023 at 12:15 By Eduard Kovacs Three bankrupt cryptocurrency companies — FTX, BlockFi and Genesis — suffered data breaches following a SIM swapping attack at Kroll. The post 3 Cryptocurrency Firms Suffer Data Breach After Kroll SIM Swapping Attack appeared first on SecurityWeek. This

React to this headline:

3 Cryptocurrency Firms Suffer Data Breach After Kroll SIM Swapping Attack Read More »

Smart Cities: Utopian Dream, Security Nightmare, or Political Gimmick?

Featured, ICS/OT, IoT, IoT Security, Smart City, XIoT / SecurityTicks

Smart Cities: Utopian Dream, Security Nightmare, or Political Gimmick? 23/08/2023 at 19:18 By Kevin Townsend As smart cities evolve with more and more integrated connected services, cybersecurity concerns will increase dramatically. The post Smart Cities: Utopian Dream, Security Nightmare, or Political Gimmick? appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Smart Cities: Utopian Dream, Security Nightmare, or Political Gimmick? Read More »

Cybersecurity Companies Report Surge in Ransomware Attacks

Featured, Ransomware / SecurityTicks

Cybersecurity Companies Report Surge in Ransomware Attacks 23/08/2023 at 19:18 By Eduard Kovacs Cybersecurity companies have released a dozen ransomware reports in recent weeks and most of them show a surge in attacks. The post Cybersecurity Companies Report Surge in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Cybersecurity Companies Report Surge in Ransomware Attacks Read More »

Exploitation of Ivanti Sentry Zero-Day Confirmed

exploited, Featured, Ivanti, Vulnerabilities, Zero-Day / SecurityTicks

Exploitation of Ivanti Sentry Zero-Day Confirmed 23/08/2023 at 12:17 By Eduard Kovacs While initially it was unclear if the Ivanti Sentry vulnerability CVE-2023-38035 has been exploited, the vendor and CISA have now confirmed it. The post Exploitation of Ivanti Sentry Zero-Day Confirmed appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Exploitation of Ivanti Sentry Zero-Day Confirmed Read More »

CISA Warns of Another Exploited Adobe ColdFusion Vulnerability

ColdFusion, exploited, Featured, Malware & Threats, Vulnerabilities / SecurityTicks

CISA Warns of Another Exploited Adobe ColdFusion Vulnerability 22/08/2023 at 13:47 By Eduard Kovacs CISA warns that CVE-2023-26359, an Adobe ColdFusion vulnerability patched in March, has been exploited in the wild. The post CISA Warns of Another Exploited Adobe ColdFusion Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

CISA Warns of Another Exploited Adobe ColdFusion Vulnerability Read More »

Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning

Citrix, exploited, Featured, Vulnerabilities / SecurityTicks

Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning 17/08/2023 at 12:18 By Eduard Kovacs Exploitation of a Citrix ShareFile vulnerability tracked as CVE-2023-24489 has spiked as CISA added it to its ‘must patch’ catalog. The post Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning appeared first on SecurityWeek. This article is

React to this headline:

Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning Read More »

CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership

CISO, CISO Conversations, cloud security, Featured / SecurityTicks

CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership 15/08/2023 at 16:31 By Kevin Townsend SecurityWeek talks to Billy Spears, CISO at Teradata (a multi-cloud analytics provider), and Lea Kissner, CISO at cloud security firm Lacework. The post CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership appeared first on SecurityWeek.

React to this headline:

CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership Read More »

Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking

ATM, Endpoint Security, Featured, Vulnerabilities, vulnerability / SecurityTicks

Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking 14/08/2023 at 13:46 By Eduard Kovacs Several vulnerabilities discovered in Iagona ScrutisWeb ATM fleet monitoring software could be exploited to remotely hack ATMs. The post Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking Read More »

Black Hat USA 2023 – Announcements Summary

Black Hat, Featured / SecurityTicks

Black Hat USA 2023 – Announcements Summary 11/08/2023 at 15:16 By Eduard Kovacs Hundreds of companies and organizations showcased their products and services this week at the 2023 edition of the Black Hat conference in Las Vegas. The post Black Hat USA 2023 – Announcements Summary appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Black Hat USA 2023 – Announcements Summary Read More »

CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio

.NET, CISA, Featured, Microsoft, Vulnerabilities, Zero-Day / SecurityTicks

CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio 10/08/2023 at 12:33 By Eduard Kovacs CISA has added CVE-2023-38180, a zero-day vulnerability affecting .NET and Visual Studio, to its Known Exploited Vulnerabilities Catalog. The post CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio Read More »

Downfall: New Intel CPU Attack Exposing Sensitive Information

CPU, Endpoint Security, Featured, Intel, Vulnerabilities / SecurityTicks

Downfall: New Intel CPU Attack Exposing Sensitive Information 09/08/2023 at 09:32 By Eduard Kovacs Google researcher discloses the details of an Intel CPU attack method named Downfall that may be remotely exploitable. The post Downfall: New Intel CPU Attack Exposing Sensitive Information appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Downfall: New Intel CPU Attack Exposing Sensitive Information Read More »

Black Hat Preview: The Business of Cyber Takes Center Stage

Black Hat, Featured / SecurityTicks

Black Hat Preview: The Business of Cyber Takes Center Stage 08/08/2023 at 14:46 By Ryan Naraine The cybersecurity industry heads to Las Vegas this week for Black Hat in a state of economic contraction, confusion and excitement. Can the promise of AI overcome the hype cycle to truly solve security problems? The post Black Hat

React to this headline:

Black Hat Preview: The Business of Cyber Takes Center Stage Read More »

North Korean Hackers Targeted Russian Missile Developer

Cyberwarfare, Featured, North Korea, Russia / SecurityTicks

North Korean Hackers Targeted Russian Missile Developer 07/08/2023 at 20:01 By Eduard Kovacs A sanctioned Russian missile maker appears to have been targeted by two important North Korean hacking groups. The post North Korean Hackers Targeted Russian Missile Developer appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

North Korean Hackers Targeted Russian Missile Developer Read More »

Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities

Featured, Government, Vulnerabilities, vulnerability / SecurityTicks

Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities 04/08/2023 at 12:31 By Ionut Arghire Five Eyes government agencies have published a list of the software vulnerabilities that were most frequently exploited in malicious attacks in 2022. The post Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities appeared first on SecurityWeek. This

React to this headline:

Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities Read More »

Salesforce Email Service Zero-Day Exploited in Phishing Campaign

email security, Featured, phishing, Salesforce / SecurityTicks

Salesforce Email Service Zero-Day Exploited in Phishing Campaign 03/08/2023 at 12:47 By Eduard Kovacs Threat actors have exploited a Salesforce email service zero-day vulnerability and abused Meta features in a sophisticated phishing campaign. The post Salesforce Email Service Zero-Day Exploited in Phishing Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Salesforce Email Service Zero-Day Exploited in Phishing Campaign Read More »

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App

cloud security, Featured, Nation-State / SecurityTicks

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App 03/08/2023 at 01:01 By Ryan Naraine Microsoft says a Russian government-linked hacking group is using its Microsoft Teams chat app to phish for credentials at targeted organizations. The post Microsoft Catches Russian Government Hackers Phishing with Teams Chat App appeared first on SecurityWeek. This article

React to this headline:

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App Read More »

Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack

CPU, Endpoint Security, Featured, side-channel attack / SecurityTicks

Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack 01/08/2023 at 20:15 By Eduard Kovacs A new power side-channel attack named Collide+Power can allow an attacker to obtain sensitive information and it works against nearly any modern CPU. The post Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack appeared first

React to this headline:

Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack Read More »