Featured

Mysterious Apple SoC Feature Exploited to Hack Kaspersky Employee iPhones

exploit, Featured, iOS, Mobile & Wireless, Operation Triangulation /

Mysterious Apple SoC Feature Exploited to Hack Kaspersky Employee iPhones 2023-12-28 at 14:01 By Ionut Arghire iOS zero-click attack targeting Kaspersky iPhones bypassed hardware-based security protections to take over devices. The post Mysterious Apple SoC Feature Exploited to Hack Kaspersky Employee iPhones appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed […]

Mysterious Apple SoC Feature Exploited to Hack Kaspersky Employee iPhones Read More »

Chinese Hackers Deliver Malware to Barracuda Email Security Appliances via New Zero-Day

Barracuda, email security, Featured, Malware & Threats, Zero-Day /

Chinese Hackers Deliver Malware to Barracuda Email Security Appliances via New Zero-Day 2023-12-27 at 13:16 By Eduard Kovacs Chinese hackers exploited a zero-day tracked as CVE-2023-7102 to deliver malware to Barracuda Email Security Gateway (ESG) appliances. The post Chinese Hackers Deliver Malware to Barracuda Email Security Appliances via New Zero-Day appeared first on SecurityWeek. This

Chinese Hackers Deliver Malware to Barracuda Email Security Appliances via New Zero-Day Read More »

Google Rushes to Patch Eighth Chrome Zero-Day This Year

Chrome, Featured, Vulnerabilities, Zero-Day /

Google Rushes to Patch Eighth Chrome Zero-Day This Year 21/12/2023 at 13:48 By Ionut Arghire Google warns of in-the-wild exploitation of CVE-2023-7024, a new Chrome vulnerability, the eighth documented this year. The post Google Rushes to Patch Eighth Chrome Zero-Day This Year appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

Google Rushes to Patch Eighth Chrome Zero-Day This Year Read More »

BlackCat Strikes Back: Ransomware Gang “Unseizes” Website, Vows No Limits on Targets

Featured, Ransomware, takedown, Tracking & Law Enforcement /

BlackCat Strikes Back: Ransomware Gang “Unseizes” Website, Vows No Limits on Targets 20/12/2023 at 18:32 By Eduard Kovacs The BlackCat/Alphv ransomware group is dealing with the government operation that resulted in website seizures and a decryption tool. The post BlackCat Strikes Back: Ransomware Gang “Unseizes” Website, Vows No Limits on Targets appeared first on SecurityWeek.

BlackCat Strikes Back: Ransomware Gang “Unseizes” Website, Vows No Limits on Targets Read More »

VF Corp Disrupted by Cyberattack, Online Operations Impacted

cyberattack, Data Breaches, Featured, Ransomware, VF Corp /

VF Corp Disrupted by Cyberattack, Online Operations Impacted 18/12/2023 at 19:17 By Ryan Naraine VF Corporation (NYSE: VFC), which owns and operates some of the biggest apparel and footwear brands, has been hit by a ransomware attack that included the theft of sensitive corporate and personal data. The post VF Corp Disrupted by Cyberattack, Online

VF Corp Disrupted by Cyberattack, Online Operations Impacted Read More »

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet 

Black Lotus Labs, Featured, Fortinet, Nation-State, Netgear, Network Security, Volt Typhoon /

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet  13/12/2023 at 20:31 By Ryan Naraine Malware hunters have set eyes on an impossible to kill botnet packed with end-of-life SOHO routers and connects it to a Chinese APT targeting US critical infrastructure. The post Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet 

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet  Read More »

Cyberattack Cripples Ukraine’s Largest Telcom Operator

Cyberwarfare, Featured, Kyivstar, Russia, Ukraine /

Cyberattack Cripples Ukraine’s Largest Telcom Operator 13/12/2023 at 01:31 By SecurityWeek News Kyivstar, the largest mobile network operator in Ukraine, was hit by a massive cyberattack on Tuesday, disrupting mobile and internet communications for millions of citizens. The post Cyberattack Cripples Ukraine’s Largest Telcom Operator appeared first on SecurityWeek. This article is an excerpt from

Cyberattack Cripples Ukraine’s Largest Telcom Operator Read More »

Apple Sets Trap to Catch iMessage Impersonators

Featured, iMessage, iOS 17.2, macOS 14.2, Mobile & Wireless, Nation-State, nso group, Zero-Day /

Apple Sets Trap to Catch iMessage Impersonators 12/12/2023 at 20:33 By Ryan Naraine New iMessage Contact Key Verification feature in Apple’s iOS and macOS platforms help catch impersonators on its iMessage service. The post Apple Sets Trap to Catch iMessage Impersonators appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

Apple Sets Trap to Catch iMessage Impersonators Read More »

Law Enforcement Reportedly Behind Takedown of BlackCat/Alphv Ransomware Website

blackcat, Featured, Ransomware, takedown, Tracking & Law Enforcement /

Law Enforcement Reportedly Behind Takedown of BlackCat/Alphv Ransomware Website 11/12/2023 at 14:01 By Eduard Kovacs The leak website of the notorious BlackCat/Alphv ransomware group has been offline for days and law enforcement is reportedly behind the takedown. The post Law Enforcement Reportedly Behind Takedown of BlackCat/Alphv Ransomware Website appeared first on SecurityWeek. This article is

Law Enforcement Reportedly Behind Takedown of BlackCat/Alphv Ransomware Website Read More »

Europe Reaches a Deal on the World’s First Comprehensive AI Rules

AI, Artificial Intelligence, Featured, Government, Regulations /

Europe Reaches a Deal on the World’s First Comprehensive AI Rules 09/12/2023 at 23:04 By Associated Press Researchers have warned that powerful AI models could be used to supercharge online disinformation, cyberattacks or creation of bioweapons. The post Europe Reaches a Deal on the World’s First Comprehensive AI Rules appeared first on SecurityWeek. This article

Europe Reaches a Deal on the World’s First Comprehensive AI Rules Read More »

Cyberattack on Irish Utility Cuts Off Water Supply for Two Days

Featured, ICS, ICS/OT, Ireland, Water /

Cyberattack on Irish Utility Cuts Off Water Supply for Two Days 08/12/2023 at 14:46 By Eduard Kovacs Hackers launched a cyberattack on an Irish water utility, causing disruption and leaving people without water for two days.  The post Cyberattack on Irish Utility Cuts Off Water Supply for Two Days appeared first on SecurityWeek. This article

Cyberattack on Irish Utility Cuts Off Water Supply for Two Days Read More »

Microsoft Hires New CISO in Major Security Shakeup

CISO, CISO Strategy, cloud security, CSRB, Featured, Management & Strategy, Microsoft /

Microsoft Hires New CISO in Major Security Shakeup 06/12/2023 at 20:31 By Ryan Naraine Microsoft announced a major shakeup of its security hierarchy, removing the CISO and Deputy CISO and handing the reins to a recent hire who previously served as CTO and President at Bridgewater. The post Microsoft Hires New CISO in Major Security

Microsoft Hires New CISO in Major Security Shakeup Read More »

21 Vulnerabilities in Sierra Wireless Routers Could Expose Critical Infrastructure to Attacks

Featured, ICS/OT, IoT Security, Mobile & Wireless, OT, routers, vulnerability /

21 Vulnerabilities in Sierra Wireless Routers Could Expose Critical Infrastructure to Attacks 06/12/2023 at 14:17 By Eduard Kovacs Forescout has found 21 vulnerabilities in Sierra Wireless OT/IoT routers that could expose critical infrastructure organizations to remote attacks.  The post 21 Vulnerabilities in Sierra Wireless Routers Could Expose Critical Infrastructure to Attacks appeared first on SecurityWeek.

21 Vulnerabilities in Sierra Wireless Routers Could Expose Critical Infrastructure to Attacks Read More »

Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery 

building, Featured, ICS, ICS/OT /

Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery  05/12/2023 at 17:32 By Ionut Arghire The details of 10 unpatched Loytec building automation product vulnerabilities have been disclosed two years after their discovery. The post Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery  appeared first on SecurityWeek. This article is an excerpt

Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery  Read More »

ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government

Cyber Av3ngers, Cyberwarfare, Featured, ICS, ICS/OT, Iran, OT, Water /

ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government 04/12/2023 at 16:16 By Eduard Kovacs Security agencies say the Cyber Av3ngers group targeting ICS at multiple water facilities is affiliated with the Iranian government. The post ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government appeared first

ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government Read More »

Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say

Featured, ICS, ICS/OT, SCADA /

Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say 03/12/2023 at 07:01 By Associated Press The Municipal Water Authority of Aliquippa was just one of multiple organizations breached in the U.S. by Iran-linked “Cyber Av3ngers” hackers The post Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say appeared first on SecurityWeek.

Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say Read More »

Congressmen Ask DOJ to Investigate Water Utility Hack, Warning It Could Happen Anywhere

Featured, ICS, ICS/OT, OT, SCADA, Water /

Congressmen Ask DOJ to Investigate Water Utility Hack, Warning It Could Happen Anywhere 01/12/2023 at 21:32 By Associated Press Members of Congress asked the U.S. Justice Department to investigate how foreign hackers breached a water authority near Pittsburgh, prompting CISA to warn other water and sewage-treatment utilities that they may be vulnerable. The post Congressmen

Congressmen Ask DOJ to Investigate Water Utility Hack, Warning It Could Happen Anywhere Read More »

Apple Patches WebKit Flaws Exploited on Older iPhones

apple, CVE-2023-42916, CVE-2023-42917, Endpoint Security, Featured, iOS, macOS, Malware & Threats, Vulnerabilities /

Apple Patches WebKit Flaws Exploited on Older iPhones 30/11/2023 at 23:02 By Ryan Naraine Apple’s security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1. The post Apple Patches WebKit Flaws Exploited on Older iPhones appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Apple Patches WebKit Flaws Exploited on Older iPhones Read More »

Qlik Sense Vulnerabilities Exploited in Ransomware Attacks

exploited, Featured, Qlik, Ransomware /

Qlik Sense Vulnerabilities Exploited in Ransomware Attacks 30/11/2023 at 17:46 By Eduard Kovacs Qlik Sense vulnerabilities CVE-2023-41266, CVE-2023-41265 and CVE-2023-48365 exploited for initial access in Cactus ransomware attacks.  The post Qlik Sense Vulnerabilities Exploited in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

Qlik Sense Vulnerabilities Exploited in Ransomware Attacks Read More »

Scroll to Top