Featured - Security Ticks

Vulnerability in R Programming Language Could Fuel Supply Chain Attacks

CVE-2024-27322, Featured, Vulnerabilities, vulnerability / SecurityTicks

Vulnerability in R Programming Language Could Fuel Supply Chain Attacks 2024-04-30 at 17:16 By Ionut Arghire A vulnerability (CVE-2024-27322) in the R programming language implementation can be exploited to execute arbitrary and be used as part of a supply chain attack. The post Vulnerability in R Programming Language Could Fuel Supply Chain Attacks appeared first […]

React to this headline:

Vulnerability in R Programming Language Could Fuel Supply Chain Attacks Read More »

Okta Warns of Credential Stuffing Attacks Using Tor, Residential Proxies

credential stuffing, Featured, Identity & Access, Network Security, Tor / SecurityTicks

Okta Warns of Credential Stuffing Attacks Using Tor, Residential Proxies 2024-04-29 at 14:32 By Ionut Arghire Okta warned of a spike in credential stuffing attacks using anonymizing services such as Tor, DataImpulse, Luminati, and NSocks. The post Okta Warns of Credential Stuffing Attacks Using Tor, Residential Proxies appeared first on SecurityWeek. This article is an

React to this headline:

Okta Warns of Credential Stuffing Attacks Using Tor, Residential Proxies Read More »

Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services

Data Protection, Featured, piracy, PlayReady, Streaming, Vulnerabilities / SecurityTicks

Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services 2024-04-23 at 14:01 By Eduard Kovacs Microsoft PlayReady vulnerabilities that could allow rogue subscribers to illegally download movies from popular streaming services. The post Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services Read More »

MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days

Featured, MITRE, Nation-State / SecurityTicks

MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days 2024-04-22 at 13:16 By Eduard Kovacs MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability. The post MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days Read More »

Frontier Communications Shuts Down Systems Following Cyberattack

cyberattack, cybercrime, Featured, Ransomware / SecurityTicks

Frontier Communications Shuts Down Systems Following Cyberattack 2024-04-19 at 15:16 By Ionut Arghire Telecom giant Frontier shuts down systems to contain a cyberattack that led to personal information compromise. The post Frontier Communications Shuts Down Systems Following Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Frontier Communications Shuts Down Systems Following Cyberattack Read More »

Phishing Platform LabHost Shut Down by Law Enforcement

cybercrime, Featured, phishing, takedown / SecurityTicks

Phishing Platform LabHost Shut Down by Law Enforcement 2024-04-18 at 14:46 By Eduard Kovacs LabHost, a major phishing-as-a-service platform, has been shut down as part of a major law enforcement operation. The post Phishing Platform LabHost Shut Down by Law Enforcement appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Phishing Platform LabHost Shut Down by Law Enforcement Read More »

Oracle Patches 230 Vulnerabilities With April 2024 CPU

Featured, Oracle, Vulnerabilities / SecurityTicks

Oracle Patches 230 Vulnerabilities With April 2024 CPU 2024-04-17 at 14:31 By Ionut Arghire Oracle releases 441 new security patches to address 230 vulnerabilities as part of its April 2024 Critical Patch Update. The post Oracle Patches 230 Vulnerabilities With April 2024 CPU appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Oracle Patches 230 Vulnerabilities With April 2024 CPU Read More »

Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt

Delinea, Featured, Vulnerabilities, vulnerability / SecurityTicks

Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt 2024-04-16 at 13:46 By Eduard Kovacs PAM company Delinea over the weekend rushed to patch a critical authentication bypass vulnerability after it apparently ignored the researcher who found the flaw. The post Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt appeared

React to this headline:

Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt Read More »

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge

exploited, Featured, Malware & Threats, Nation-State, Palo Alto Networks, Zero-Day / SecurityTicks

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge 2024-04-15 at 14:00 By Eduard Kovacs Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The post Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge appeared

React to this headline:

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge Read More »

Palo Alto Networks Warns of Exploited Firewall Vulnerability

exploited, Featured, firewall, Palo Alto Networks, Vulnerabilities / SecurityTicks

Palo Alto Networks Warns of Exploited Firewall Vulnerability 2024-04-12 at 14:31 By Ionut Arghire Palo Alto Networks warns of limited exploitation of a critical command injection vulnerability leading to code execution on firewalls. The post Palo Alto Networks Warns of Exploited Firewall Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Palo Alto Networks Warns of Exploited Firewall Vulnerability Read More »

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft

CISA, Data Breaches, Featured, Incident Response, Microsoft, Midnight Blizzard, Nation-State, Nobelium, Russia / SecurityTicks

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft 2024-04-11 at 23:46 By Ryan Naraine The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts “presents a grave and unacceptable risk to federal agencies.” The post US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft

React to this headline:

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft Read More »

Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks

AWS, cloud security, DDoS, Featured, Network Security / SecurityTicks

Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks 2024-04-11 at 17:46 By Kevin Townsend SecurityWeek speaks to Tom Scholl, VP and distinguished engineer at AWS, on how the organization tackles IP Spoofing and DDoS attacks. The post Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks appeared first on SecurityWeek. This article is an

React to this headline:

Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks Read More »

Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices

D-Link, exploited, Featured, IoT Security, NAS / SecurityTicks

Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices 2024-04-09 at 13:16 By Eduard Kovacs Unpatched D-Link NAS device vulnerability CVE-2024-3273, potentially affecting many devices, is being exploited in the wild. The post Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices Read More »

Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits

exploit, Featured, Vulnerabilities / SecurityTicks

Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits 2024-04-08 at 15:46 By Ionut Arghire Crowdfense has announced a $30 million exploit acquisition program covering Android, iOS, Chrome, and Safari zero-days. The post Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits Read More »

Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think

Featured, Privacy / SecurityTicks

Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think 2024-04-06 at 15:46 By Associated Press Incognito modes generally do not prevent the websites you visit from seeing your location, via your IP address, or stop your internet service provider from logging your activities. The post Browsing in Incognito Mode Doesn’t Protect

React to this headline:

Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think Read More »

Acuity Responds to US Government Data Theft Claims, Says Hackers Obtained Old Info

Data Breaches, Data leak, Featured, Government / SecurityTicks

Acuity Responds to US Government Data Theft Claims, Says Hackers Obtained Old Info 2024-04-05 at 14:16 By Eduard Kovacs Acuity, the tech firm from which hackers claimed to have stolen State Department and other government data, confirms hack, but says stolen info is old. The post Acuity Responds to US Government Data Theft Claims, Says

React to this headline:

Acuity Responds to US Government Data Theft Claims, Says Hackers Obtained Old Info Read More »

CVE and NVD – A Weak and Fractured Source of Vulnerability Truth

CVE, Featured, MITRE, NVD, Vulnerabilities / SecurityTicks

CVE and NVD – A Weak and Fractured Source of Vulnerability Truth 2024-04-03 at 17:17 By Kevin Townsend MITRE is unable to compile a list of all new vulnerabilities, and NIST is unable to subsequently, and consequently, provide an enriched database of all vulnerabilities. What went wrong, and what can be done? The post CVE

React to this headline:

CVE and NVD – A Weak and Fractured Source of Vulnerability Truth Read More »

Scathing Federal Report Rips Microsoft for Shoddy Security, Insincerity in Response to Chinese Hack

cloud security, Data Breaches, Featured, Incident Response / SecurityTicks

Scathing Federal Report Rips Microsoft for Shoddy Security, Insincerity in Response to Chinese Hack 2024-04-03 at 16:16 By Associated Press Cyber Safety Review Board, said “a cascade of errors” by Microsoft let state-backed Chinese cyber operators break into email accounts of senior U.S. officials. The post Scathing Federal Report Rips Microsoft for Shoddy Security, Insincerity

React to this headline:

Scathing Federal Report Rips Microsoft for Shoddy Security, Insincerity in Response to Chinese Hack Read More »

Google Patches Exploited Pixel Vulnerabilities

Android, exploited, Featured, Mobile & Wireless, Pixel / SecurityTicks

Google Patches Exploited Pixel Vulnerabilities 2024-04-03 at 13:31 By Ionut Arghire Google patches 28 vulnerabilities in Android and 25 bugs in Pixel devices, including two flaws exploited in the wild. The post Google Patches Exploited Pixel Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Google Patches Exploited Pixel Vulnerabilities Read More »

OWASP Data Breach Caused by Server Misconfiguration

data breach, Data Breaches, Featured, OWASP / SecurityTicks

OWASP Data Breach Caused by Server Misconfiguration 2024-04-02 at 14:16 By Ionut Arghire The OWASP Foundation says a wiki misconfiguration exposed resumes filed over a decade ago by aspiring members. The post OWASP Data Breach Caused by Server Misconfiguration appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

OWASP Data Breach Caused by Server Misconfiguration Read More »