Featured

Beyond the Hype: Questioning FUD in Cybersecurity Marketing

cybercrime, Featured, FUD /

Beyond the Hype: Questioning FUD in Cybersecurity Marketing 2024-02-14 at 14:17 By Kevin Townsend Could cybersecurity professionals benefit from FUD awareness training in the same way that users benefit from phishing awareness training? The post Beyond the Hype: Questioning FUD in Cybersecurity Marketing appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

Beyond the Hype: Questioning FUD in Cybersecurity Marketing Read More »

Hunter-Killer Malware Tactic Growing: Stealthy, Persistent and Aggressive

ATT&CK, Featured, Malware & Threats, MITRE, Pincus, Ransomware /

Hunter-Killer Malware Tactic Growing: Stealthy, Persistent and Aggressive 2024-02-13 at 07:31 By Kevin Townsend A malware tactic dubbed ‘hunter-killer’ is growing, based on an analysis of more than 600,000 malware samples. This may become the standard approach for advanced attacks. The post Hunter-Killer Malware Tactic Growing: Stealthy, Persistent and Aggressive appeared first on SecurityWeek. This

Hunter-Killer Malware Tactic Growing: Stealthy, Persistent and Aggressive Read More »

Warzone RAT Shut Down by Law Enforcement, Two Arrested

arrested, cybercrime, Featured, RAT, takedown, Tracking & Law Enforcement /

Warzone RAT Shut Down by Law Enforcement, Two Arrested 2024-02-12 at 13:01 By Eduard Kovacs Warzone RAT dismantled in international law enforcement operation that also involved arrests of suspects in Malta and Nigeria. The post Warzone RAT Shut Down by Law Enforcement, Two Arrested appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Warzone RAT Shut Down by Law Enforcement, Two Arrested Read More »

Exploitation of Another Ivanti VPN Vulnerability Observed

exploited, Featured, Ivanti, PoC, Vulnerabilities /

Exploitation of Another Ivanti VPN Vulnerability Observed 2024-02-12 at 13:01 By Ionut Arghire Organizations urged to hunt for potential compromise as exploitation of a recent Ivanti enterprise VPN vulnerability begins. The post Exploitation of Another Ivanti VPN Vulnerability Observed appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

Exploitation of Another Ivanti VPN Vulnerability Observed Read More »

Fortinet Warns of New FortiOS Zero-Day

exploited, Featured, Fortinet, Vulnerabilities, Zero-Day /

Fortinet Warns of New FortiOS Zero-Day 2024-02-09 at 13:46 By Eduard Kovacs Fortinet patches CVE-2024-21762, a critical remote code execution vulnerability that may have been exploited in the wild. The post Fortinet Warns of New FortiOS Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

Fortinet Warns of New FortiOS Zero-Day Read More »

Were 3 Million Toothbrushes Really Used for a DDoS Attack?

botnet, DDoS, Featured, IoT Security /

Were 3 Million Toothbrushes Really Used for a DDoS Attack? 2024-02-08 at 13:46 By Eduard Kovacs Three million electric toothbrushes were reportedly used for disruptive DDoS attacks, but cybersecurity experts questioned the claims. The post Were 3 Million Toothbrushes Really Used for a DDoS Attack? appeared first on SecurityWeek. This article is an excerpt from

Were 3 Million Toothbrushes Really Used for a DDoS Attack? Read More »

Google Links Over 60 Zero-Days to Commercial Spyware Vendors

Featured, Google, Government, spyware, Tracking & Law Enforcement, Zero-Day /

Google Links Over 60 Zero-Days to Commercial Spyware Vendors 2024-02-06 at 13:16 By Eduard Kovacs More than 60 of the Adobe, Google, Android, Microsoft, Mozilla and Apple zero-days that have come to light since 2016 attributed to spyware vendors.  The post Google Links Over 60 Zero-Days to Commercial Spyware Vendors appeared first on SecurityWeek. This

Google Links Over 60 Zero-Days to Commercial Spyware Vendors Read More »

AnyDesk Revokes Passwords, Certificates in Response to Hack

AnyDesk, Featured, supply chain, Supply Chain Security /

AnyDesk Revokes Passwords, Certificates in Response to Hack 2024-02-05 at 13:01 By Eduard Kovacs AnyDesk is revoking certificates and passwords in response to a recently discovered security breach impacting production systems. The post AnyDesk Revokes Passwords, Certificates in Response to Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

AnyDesk Revokes Passwords, Certificates in Response to Hack Read More »

General Timothy Haugh Takes Lead of NSA and Cyber Command

Cybercom, Cyberwarfare, Featured, Government, NSA /

General Timothy Haugh Takes Lead of NSA and Cyber Command 2024-02-05 at 01:49 By Mike Lennon General Timothy D. Haugh assumed command of NSA and USCYBERCOM on February 2, 2024, taking over the role from General Paul M. Nakasone. The post General Timothy Haugh Takes Lead of NSA and Cyber Command appeared first on SecurityWeek.

General Timothy Haugh Takes Lead of NSA and Cyber Command Read More »

Cloudflare Hacked by Suspected State-Sponsored Threat Actor 

Cloudflare, Featured, Nation-State /

Cloudflare Hacked by Suspected State-Sponsored Threat Actor  2024-02-02 at 13:46 By Ionut Arghire A nation-state threat actor accessed internal Cloudflare systems using credentials stolen during the Okta hack. The post Cloudflare Hacked by Suspected State-Sponsored Threat Actor  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

Cloudflare Hacked by Suspected State-Sponsored Threat Actor  Read More »

US Says it Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans

China, Cyberwarfare, Featured, Volt Typhoon /

US Says it Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans 2024-02-01 at 04:31 By Associated Press Chinese government hackers are busily targeting water treatment plants, the electrical grid, transportation systems and other critical infrastructure inside the United States, FBI Director Chris Wray told lawmakers. The post US Says

US Says it Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans Read More »

After Delays, Ivanti Patches Zero-Days and Confirms New Exploit

CISA KEV, CVE-2023-46805, CVE-2024-21887, CVE-2024-21893, Featured, Ivanti, Malware & Threats, Vulnerabilities /

After Delays, Ivanti Patches Zero-Days and Confirms New Exploit 2024-01-31 at 19:47 By Ryan Naraine Ivanti documents a brand-new zero-day and belatedly ships patches; Mandiant is reporting “broad exploitation activity.” The post After Delays, Ivanti Patches Zero-Days and Confirms New Exploit appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

After Delays, Ivanti Patches Zero-Days and Confirms New Exploit Read More »

Schneider Electric Division Responding to Ransomware Attack, Data Breach 

Featured, Ransomware, Schneider Electric /

Schneider Electric Division Responding to Ransomware Attack, Data Breach  2024-01-30 at 14:39 By Eduard Kovacs Schneider Electric’s Sustainability Business division disrupted as a result of a ransomware attack and data breach.  The post Schneider Electric Division Responding to Ransomware Attack, Data Breach  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

Schneider Electric Division Responding to Ransomware Attack, Data Breach  Read More »

Hackers Earn $1.3M for Tesla, EV Charger, Infotainment Exploits at Pwn2Own Automotive

car hacking, Featured, IoT Security, Pwn2Own, Vulnerabilities /

Hackers Earn $1.3M for Tesla, EV Charger, Infotainment Exploits at Pwn2Own Automotive 2024-01-26 at 11:05 By Eduard Kovacs Participants have earned more than $1.3 million for hacking Teslas, EV chargers and infotainment systems at Pwn2Own Automotive. The post Hackers Earn $1.3M for Tesla, EV Charger, Infotainment Exploits at Pwn2Own Automotive appeared first on SecurityWeek. This

Hackers Earn $1.3M for Tesla, EV Charger, Infotainment Exploits at Pwn2Own Automotive Read More »

HPE Says Russian Government Hackers Had Access to Emails for 6 Months

APT29, Email, email security, Featured, HPE, Nation-State, Russia /

HPE Says Russian Government Hackers Had Access to Emails for 6 Months 2024-01-25 at 12:16 By Eduard Kovacs HPE told the SEC that Russian state-sponsored threat group Midnight Blizzard had access to an email system for several months. The post HPE Says Russian Government Hackers Had Access to Emails for 6 Months appeared first on

HPE Says Russian Government Hackers Had Access to Emails for 6 Months Read More »

Cybercrime’s Silent Operator: The Unraveling of VexTrio’s Malicious Network Empire

cybercrime, Featured /

Cybercrime’s Silent Operator: The Unraveling of VexTrio’s Malicious Network Empire 2024-01-24 at 00:31 By Kevin Townsend VexTrio is a traffic direction system (TDS) with more than 60 affiliates feeding an unknown number of malicious campaigns. The post Cybercrime’s Silent Operator: The Unraveling of VexTrio’s Malicious Network Empire appeared first on SecurityWeek. This article is an

Cybercrime’s Silent Operator: The Unraveling of VexTrio’s Malicious Network Empire Read More »

Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure

Atlassian, Confluence, exploited, Featured, Vulnerabilities, vulnerability /

Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure 2024-01-22 at 18:16 By Eduard Kovacs The Atlassian Confluence vulnerability CVE-2023-22527 is being exploited in the wild just days after it was disclosed.  The post Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure Read More »

Microsoft Says Russian Gov Hackers Stole Email Data from Senior Execs

APT29, Data Breaches, Featured, Microsoft, Nation-State, Nobelium, Russia /

Microsoft Says Russian Gov Hackers Stole Email Data from Senior Execs 2024-01-20 at 01:17 By Ryan Naraine A Russian government-backed hacking team broke into Microsoft’s corporate network and stole emails and attachments from senior executives. The post Microsoft Says Russian Gov Hackers Stole Email Data from Senior Execs appeared first on SecurityWeek. This article is

Microsoft Says Russian Gov Hackers Stole Email Data from Senior Execs Read More »

VMware vCenter Server Vulnerability Exploited in Wild 

exploited, Featured, VMWare, Vulnerabilities /

VMware vCenter Server Vulnerability Exploited in Wild  2024-01-19 at 13:16 By Eduard Kovacs VMware warns customers that CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, is being exploited in the wild.  The post VMware vCenter Server Vulnerability Exploited in Wild  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

VMware vCenter Server Vulnerability Exploited in Wild  Read More »

Scroll to Top