Uncategorized

Untrained users are biggest flaw in organizations’ cyber defense layer 20/06/2023 at 21:33 By A recent report reveals that 33.1% of employees are likely to click on a suspicious link or comply with a fraudulent request.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Vulnerable information is discovered within minutes by cybercriminals 20/06/2023 at 18:40 By Cybercriminal habits were analyzed in a recent report by Orca Security that reveals that attackers typically find exposed secrets in two minutes. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

55% of employees solely use mobile device for work while traveling 20/06/2023 at 17:36 By Bring your own device (BYOD) policies have become difficult for IT teams to monitor, especially during increased travel in summer months. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Illinois hospital attributes closure to ransomware attack 20/06/2023 at 16:10 By In what seems to be the first announcement of its kind, two rural healthcare facilities closed last week citing a ransomware attack as part of the reasons why. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Security culture is only as strong as the weakest link 20/06/2023 at 16:10 By Bad actors target an organization’s most vulnerable touch points to gain access to sensitive data. And too often, these weak links are the organization’s employees. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Honeypot Recon: MSSQL Server – Database Threat Overview 22’/23’ 20/06/2023 at 15:58 By In this article, we’ll reveal botnet behavior before and after a successful attack. These bots have one job: to install malicious software that can mine digital coins or create backdoors into systems. This article is an excerpt from SpiderLabs Blog from Trustwave

Zyxel Releases Urgent Security Updates for Critical Vulnerability in NAS Devices 20/06/2023 at 15:57 By Zyxel has rolled out security updates to address a critical security flaw in its network-attached storage (NAS) devices that could result in the execution of arbitrary commands on affected systems. Tracked as CVE-2023-27992 (CVSS score: 9.8), the issue has been described as

Security leaders discuss the spread of MOVEIt vulnerability 20/06/2023 at 15:18 By It has been several weeks since the MOVEit vulnerability began making headlines, but the span of organizations and governmental entities being affected by related data breaches have continued to grow.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View

Experts Uncover Year-Long Cyber Attack on IT Firm Utilizing Custom Malware RDStealer 20/06/2023 at 15:18 By A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang called RDStealer. “The operation was active for more than a year with the end goal of compromising credentials and

SaaS in the Real World: How Global Food Chains Can Secure Their Digital Dish 20/06/2023 at 15:18 By The Quick Serve Restaurant (QSR) industry is built on consistency and shared resources. National chains like McDonald’s and regional ones like Cracker Barrel grow faster by reusing the same business model, decor, and menu, with little change

ASUS Releases Patches to Fix Critical Security Bugs Impacting Multiple Router Models 20/06/2023 at 12:49 By Taiwanese company ASUS on Monday released firmware updates to address, among other issues, nine security bugs impacting a wide range of router models. Of the nine security flaws, two are rated Critical and six are rated High in severity. One vulnerability

Over 100,000 Stolen ChatGPT Account Credentials Sold on Dark Web Marketplaces 20/06/2023 at 11:31 By Over 100,000 compromised OpenAI ChatGPT account credentials have found their way on illicit dark web marketplaces between June 2022 and May 2023, with India alone accounting for 12,632 stolen credentials. The credentials were discovered within information stealer logs made available

Rogue Android Apps Target Pakistani Individuals in Sophisticated Espionage Campaign 20/06/2023 at 08:16 By Individuals in the Pakistan region have been targeted using two rogue Android apps available on the Google Play Store as part of a new targeted campaign. Cybersecurity firm Cyfirma attributed the campaign with moderate confidence to a threat actor known as DoNot

Louisiana Office of Motor Vehicles suffers data breach 19/06/2023 at 21:17 By The Office of Motor Vehicles (OMV) in Louisiana suffered a MOVEit data breach. MOVEit is a third party data transfer service used to send large files. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

White House offers support to fight Canadian wildfires 19/06/2023 at 20:12 By In response to smoke coming into the U.S. from Canadian wildfires, the White House is providing technology support to Canada’s firefighting efforts. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

TSA opens training academy in Las Vegas 19/06/2023 at 18:40 By The TSA Academy West has been launched in Las Vegas. The curriculum includes threat detection and resolution and screening of personal property. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Mystic Stealer Malware Targets 40 Web Browsers and 70 Browser Extensions 19/06/2023 at 18:40 By A new information-stealing malware called Mystic Stealer has been found to steal data from about 40 different web browsers and over 70 web browser extensions. First advertised on April 25, 2023, for $150 per month, the malware also targets cryptocurrency wallets,

Howell named Georgia Tech interim VP for Information Technology, CIO 19/06/2023 at 17:17 By Leo Howell, CISO at Georgia Tech, has been selected interim Vice President for Information Technology and Chief Information Officer for the Institute.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Researchers Discover New Sophisticated Toolkit Targeting Apple macOS Systems 19/06/2023 at 16:46 By Cybersecurity researchers have uncovered a set of malicious artifacts that they say is part of a sophisticated toolkit targeting Apple macOS systems. “As of now, these samples are still largely undetected and very little information is available about any of them,” Bitdefender

The importance of security hygiene 19/06/2023 at 16:13 By Cyber attackers know most organizations have visibility gaps, which is why it is important for security leaders to know as much of the attack surface and their assets as possible. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source