Featured - Security Ticks

Christie’s Confirms Data Breach After Ransomware Group Claims Attack

data breach, Data Breaches, Featured, Ransomware / SecurityTicks

Christie’s Confirms Data Breach After Ransomware Group Claims Attack 2024-05-28 at 15:47 By Eduard Kovacs Auction house Christie’s has confirmed suffering a data breach following a ransomware attack launched earlier this month. The post Christie’s Confirms Data Breach After Ransomware Group Claims Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

React to this headline:

Christie’s Confirms Data Breach After Ransomware Group Claims Attack Read More »

Google Patches Fourth Chrome Zero-Day in Two Weeks

Chrome, CVE-2024-5274, Featured, Vulnerabilities, vulnerability, Zero-Day / SecurityTicks

Google Patches Fourth Chrome Zero-Day in Two Weeks 2024-05-24 at 12:16 By Ionut Arghire Exploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly engine. The post Google Patches Fourth Chrome Zero-Day in Two Weeks appeared first on SecurityWeek. This article is an

React to this headline:

Google Patches Fourth Chrome Zero-Day in Two Weeks Read More »

Beware – Your Customer Chatbot is Almost Certainly Insecure: Report

AI, Artificial Intelligence, Featured / SecurityTicks

Beware – Your Customer Chatbot is Almost Certainly Insecure: Report 2024-05-22 at 13:32 By Kevin Townsend As chatbots become more adventurous, the dangers will increase. The post Beware – Your Customer Chatbot is Almost Certainly Insecure: Report appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Beware – Your Customer Chatbot is Almost Certainly Insecure: Report Read More »

CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw

CISA KEV, exploited, Featured, Government, healthcare, Vulnerabilities / SecurityTicks

CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw 2024-05-21 at 14:31 By Eduard Kovacs CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog. The post CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw Read More »

User Outcry as Slack Scrapes Customer Data for AI Model Training

AI/ML, Artificial Intelligence, Data Protection, Featured, generative AI, Privacy, Privacy & Compliance, Slack / SecurityTicks

User Outcry as Slack Scrapes Customer Data for AI Model Training 2024-05-17 at 20:46 By Ryan Naraine Slack reveals it has been training AI/ML models on customer data, including messages, files and usage information. It’s opt-in by default. The post User Outcry as Slack Scrapes Customer Data for AI Model Training appeared first on SecurityWeek.

React to this headline:

User Outcry as Slack Scrapes Customer Data for AI Model Training Read More »

Microsoft Quick Assist Tool Abused for Ransomware Delivery

Black Basta, Featured, Malware & Threats, Ransomware / SecurityTicks

Microsoft Quick Assist Tool Abused for Ransomware Delivery 2024-05-17 at 14:46 By Ionut Arghire The Black Basta group abuses remote connection tool Quick Assist in vishing attacks leading to ransomware deployment. The post Microsoft Quick Assist Tool Abused for Ransomware Delivery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Microsoft Quick Assist Tool Abused for Ransomware Delivery Read More »

Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities

CVE-2024-30040, CVE-2024-30044, CVE-2024-30051, Featured, Malware & Threats, Microsoft, Patch Tuesday, Ransomware, Vulnerabilities / SecurityTicks

Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities 2024-05-14 at 22:47 By Ryan Naraine Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attention. The post Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities appeared first on SecurityWeek. This article

React to this headline:

Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities Read More »

Zscaler Confirms Only Isolated Test Server Was Hacked

data breach, Data Breaches, Featured, IntelBroker, Zscaler / SecurityTicks

Zscaler Confirms Only Isolated Test Server Was Hacked 2024-05-14 at 11:47 By Eduard Kovacs Zscaler has completed its investigation into the recent hacking claims and found that only an isolated test environment was compromised. The post Zscaler Confirms Only Isolated Test Server Was Hacked appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Zscaler Confirms Only Isolated Test Server Was Hacked Read More »

NATO Draws a Cyber Red Line in Tensions With Russia

APT28, cyberwar, Cyberwarfare, Featured, NATO, Russia / SecurityTicks

NATO Draws a Cyber Red Line in Tensions With Russia 2024-05-13 at 17:46 By Kevin Townsend Weakening liberal democracies and weakening the NATO alliance are conjoined in the hybrid war that Russia is conducting against Ukraine. The post NATO Draws a Cyber Red Line in Tensions With Russia appeared first on SecurityWeek. This article is

React to this headline:

NATO Draws a Cyber Red Line in Tensions With Russia Read More »

$2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest

China, Featured, hacking competition, Matrix CUp, Vulnerabilities / SecurityTicks

$2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest 2024-05-13 at 13:46 By Eduard Kovacs The Chinese hacking contest Matrix Cup is offering big rewards for exploits targeting OSs, smartphones, enterprise software, browsers, and security products. The post $2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest appeared first on SecurityWeek. This article

React to this headline:

$2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest Read More »

Exploited Chrome Zero-Day Patched by Google

Chrome, exploited, Featured, Vulnerabilities, Zero-Day / SecurityTicks

Exploited Chrome Zero-Day Patched by Google 2024-05-10 at 15:46 By Eduard Kovacs A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024. The post Exploited Chrome Zero-Day Patched by Google appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Exploited Chrome Zero-Day Patched by Google Read More »

Zscaler Investigates Hacking Claims After Data Offered for Sale

cybercrime, data breach, Data Breaches, Featured, Zscaler / SecurityTicks

Zscaler Investigates Hacking Claims After Data Offered for Sale 2024-05-09 at 11:01 By Eduard Kovacs Zscaler says its customer, production and corporate environments are not impacted after a notorious hacker offers to sell access. The post Zscaler Investigates Hacking Claims After Data Offered for Sale appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Zscaler Investigates Hacking Claims After Data Offered for Sale Read More »

LockBit Ransomware Mastermind Unmasked, Charged

charged, Featured, LockBit, Ransomware, Sanctions, Tracking & Law Enforcement / SecurityTicks

LockBit Ransomware Mastermind Unmasked, Charged 2024-05-07 at 21:01 By Ionut Arghire Charges and sanctions announced against Dimitry Yuryevich Khoroshev, the alleged developer and operator of LockBit ransomware. The post LockBit Ransomware Mastermind Unmasked, Charged appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this headline:

React to this headline:

LockBit Ransomware Mastermind Unmasked, Charged Read More »

MITRE Hack: China-Linked Group Breached Systems in December 2023

China, cyberespionage, espionage, Featured, Ivanti, MITRE, Nation-State, Zero-Day / SecurityTicks

MITRE Hack: China-Linked Group Breached Systems in December 2023 2024-05-07 at 11:16 By Eduard Kovacs MITRE has shared more details on the recent hack, including the new malware involved in the attack and a timeline of the attacker’s activities. The post MITRE Hack: China-Linked Group Breached Systems in December 2023 appeared first on SecurityWeek. This

React to this headline:

MITRE Hack: China-Linked Group Breached Systems in December 2023 Read More »

Microsoft Overhauls Cybersecurity Strategy After Scathing CSRB Report

CISO Strategy, cloud security, CSRB, Exchange, Featured, Government, Microsoft / SecurityTicks

Microsoft Overhauls Cybersecurity Strategy After Scathing CSRB Report 2024-05-03 at 21:17 By Ryan Naraine Microsoft security chief Charlie Bell pledges significant reforms and a strategic shift to prioritize security above all other product features. The post Microsoft Overhauls Cybersecurity Strategy After Scathing CSRB Report appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Microsoft Overhauls Cybersecurity Strategy After Scathing CSRB Report Read More »

US Says North Korean Hackers Exploiting Weak DMARC Settings

APT, DMARC, email security, Featured, Kimsuky, Malware & Threats, Nation-State, North Korea / SecurityTicks

US Says North Korean Hackers Exploiting Weak DMARC Settings 2024-05-03 at 19:16 By Ionut Arghire The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks. The post US Says North Korean Hackers Exploiting Weak DMARC Settings appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

US Says North Korean Hackers Exploiting Weak DMARC Settings Read More »

Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals

botnet, cybercrime, Featured, Malware & Threats, Russia / SecurityTicks

Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals 2024-05-03 at 17:09 By Ionut Arghire A botnet dismantled in January and used by Russia-linked APT28 consisted of more than just Ubiquiti Edge OS routers. The post Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals appeared first on SecurityWeek. This article is an

React to this headline:

Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals Read More »

Dropbox Data Breach Impacts Customer Information

data breach, Data Breaches, Dropbox, Featured / SecurityTicks

Dropbox Data Breach Impacts Customer Information 2024-05-02 at 11:31 By Eduard Kovacs Dropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords. The post Dropbox Data Breach Impacts Customer Information appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Dropbox Data Breach Impacts Customer Information Read More »

CISO Conversations: Talking Cybersecurity With LinkedIn’s Geoff Belknap and Meta’s Guy Rosen

CISO, CISO Conversations, CISO Strategy, Facebook, Featured, LinkedIn, Management & Strategy, Meta / SecurityTicks

CISO Conversations: Talking Cybersecurity With LinkedIn’s Geoff Belknap and Meta’s Guy Rosen 2024-05-01 at 15:31 By Kevin Townsend SecurityWeek interviews Geoff Belknap, CISO at LinkedIn, and Guy Rosen, CISO at Facebook parent company Meta. The post CISO Conversations: Talking Cybersecurity With LinkedIn’s Geoff Belknap and Meta’s Guy Rosen appeared first on SecurityWeek. This article is

React to this headline:

CISO Conversations: Talking Cybersecurity With LinkedIn’s Geoff Belknap and Meta’s Guy Rosen Read More »

UnitedHealth CEO Says Hackers Lurked in Network for Nine Days Before Ransomware Strike

Featured, Incident Response, Ransomware, United Healthcare / SecurityTicks

UnitedHealth CEO Says Hackers Lurked in Network for Nine Days Before Ransomware Strike 2024-05-01 at 06:01 By Ionut Arghire UnitedHealth Group’s CEO Andrew Witty shares details on the damaging cyberattack in testimony before a US Congress committee set for May 1, 2024. The post UnitedHealth CEO Says Hackers Lurked in Network for Nine Days Before

React to this headline:

UnitedHealth CEO Says Hackers Lurked in Network for Nine Days Before Ransomware Strike Read More »