Uncategorized

Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer 13/06/2023 at 18:50 By A novel multi-stage loader called DoubleFinger has been observed delivering a cryptocurrency stealer dubbed GreetingGhoul in what’s an advanced attack targeting users in Europe, the U.S., and Latin America. “DoubleFinger is deployed on the target machine, when the victim opens a malicious PIF attachment […]

React to this headline:

Over Half of Security Leaders Lack Confidence in Protecting App Secrets, Study Reveals 13/06/2023 at 17:49 By It might come as a surprise, but secrets management has become the elephant in the AppSec room. While security vulnerabilities like Common Vulnerabilities and Exposures (CVEs) often make headlines in the cybersecurity world, secrets management remains an overlooked

React to this headline:

47% of organizations struggle with detecting and mitigating threats 13/06/2023 at 17:19 By A new study reveals 70% of IT leaders in financial services reported a significant increase in data breaches compared to previous years. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

68% of organizations expect employee churn-driven cyber issues in 2023 13/06/2023 at 16:53 By A new report shows how the tension between difficult economic conditions and the pace of technology innovation influences the growth of identity-led cybersecurity exposure. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Adversary-in-the-Middle Attack Campaign Hits Dozens of Global Organizations 13/06/2023 at 16:53 By “Dozens” of organizations across the world have been targeted as part of a broad business email compromise (BEC) campaign that involved the use of adversary-in-the-middle (AitM) techniques to carry out the attacks. “Following a successful phishing attempt, the threat actor gained initial access

React to this headline:

Honeypot Recon: Global Database Threat Landscape 13/06/2023 at 16:14 By In today’s digital era, the importance of securing databases cannot be overstated. As more and more global businesses and organizations rely on DBMS systems to store tons of sensitive information, the risk of targeted attacks and data breaches continues to increase. This article is an

React to this headline:

Rushing into generative AI is risky: How to protect data 13/06/2023 at 16:14 By There’s no doubt that generative AI will be a useful tool for businesses, but it requires careful implementation. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Two Russian Nationals Charged for Masterminding Mt. Gox Crypto Exchange Hack 13/06/2023 at 14:17 By The U.S. Department of Justice (DoJ) has charged two Russian nationals in connection with masterminding the 2014 digital heist of the now-defunct cryptocurrency exchange Mt. Gox. According to unsealed indictments released last week, Alexey Bilyuchenko, 43, and Aleksandr Verner, 29,

React to this headline:

Webinar – Mastering API Security: Understanding Your True Attack Surface 13/06/2023 at 14:17 By Believe it or not, your attack surface is expanding faster than you realize. How? APIs, of course! More formally known as application programming interfaces, API calls are growing twice as fast as HTML traffic, making APIs an ideal candidate for new

React to this headline:

Critical FortiOS and FortiProxy Vulnerability Likely Exploited – Patch Now! 13/06/2023 at 10:17 By Fortinet on Monday disclosed that a newly patched critical flaw impacting FortiOS and FortiProxy may have been “exploited in a limited number of cases” in attacks targeting government, manufacturing, and critical infrastructure sectors. The vulnerability, tracked as CVE-2023-27997 (CVSS score: 9.2), concerns a heap-based buffer overflow vulnerability in

React to this headline:

Bank fraud warnings are the most common text scam 12/06/2023 at 20:36 By According to research by the Federal Trade Commission, the most common form of text message scam reported to the FTC were false bank fraud warnings. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to

React to this headline:

OSHA updates worker safety plan for poor air quality 12/06/2023 at 18:54 By Due to wildfires in Canada causing smoke in the northeastern parts of the U.S., OSHA offered additional information to protect outdoor workers. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Arizona releases extreme heat safety guidelines 12/06/2023 at 18:20 By For security leaders whose employees spend significant amounts of time outdoors, ensuring their safety is a top priority during extreme heat. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer 12/06/2023 at 16:33 By Security researchers have warned about an “easily exploitable” flaw in the Microsoft Visual Studio installer that could be abused by a malicious actor to impersonate a legitimate publisher and distribute malicious extensions. “A threat actor could impersonate a popular publisher and

React to this headline:

Use of multi-factor authentication nearly doubles since 2020 12/06/2023 at 16:22 By A new report reveals the use of MFA has nearly doubled since 2020 and that phishing-resistant authenticators represent the best choice in terms of security for users. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React

React to this headline:

Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Undetectable 12/06/2023 at 13:19 By A fully undetectable (FUD) malware obfuscation engine named BatCloak is being used to deploy various malware strains since September 2022, while persistently evading antivirus detection. The samples grant “threat actors the ability to load numerous malware families and exploits with ease through highly

React to this headline:

Why Now? The Rise of Attack Surface Management 12/06/2023 at 13:19 By The term “attack surface management” (ASM) went from unknown to ubiquitous in the cybersecurity space over the past few years. Gartner and Forrester have both highlighted the importance of ASM recently, multiple solution providers have emerged in the space, and investment and acquisition activity have seen

React to this headline:

Password Reset Hack Exposed in Honda’s E-Commerce Platform, Dealers Data at Risk 12/06/2023 at 11:46 By Security vulnerabilities discovered in Honda’s e-commerce platform could have been exploited to gain unrestricted access to sensitive dealer information. “Broken/missing access controls made it possible to access all data on the platform, even when logged in as a test

React to this headline:

Beware: 1,000+ Fake Cryptocurrency Sites Trap Users in Bogus Rewards Scheme 12/06/2023 at 11:31 By A previously undetected cryptocurrency scam has leveraged a constellation of over 1,000 fraudulent websites to ensnare users into a bogus rewards scheme since at least January 2021. “This massive campaign has likely resulted in thousands of people being scammed worldwide,”

React to this headline:

Critical RCE Flaw Discovered in Fortinet FortiGate Firewalls – Patch Now! 12/06/2023 at 10:25 By Fortinet has released patches to address a critical security flaw in its FortiGate firewalls that could be abused by a threat actor to achieve remote code execution. The vulnerability, tracked as CVE-2023-27997, is “reachable pre-authentication, on every SSL VPN appliance,” Lexfo

React to this headline: