Uncategorized

Brute-forcing ButterflyMX Virtual Keys and Hacking Time Limits 15/06/2023 at 16:18 By Recently, I discovered two vulnerabilities in the ButterflyMX system which were responsibly disclosed to the vendor. The vendor has mitigated the highest-risk vulnerability, which enabled unauthorized attackers to gain access to buildings equipped with the ButterflyMX Access Control System. This article is an […]

Securing healthcare data in the era of AI 15/06/2023 at 16:18 By As the healthcare industry embraces the transformative power of AI, it is crucial for healthcare security leaders to understand the associated data security risks. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI’s evolving role in strengthening enterprise cybersecurity efforts 15/06/2023 at 16:18 By AI is a crucial component of modern cybersecurity measures, as it increases process efficiency, reduces operational costs and resolves issues related to scaling. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Warning: GravityRAT Android Trojan Steals WhatsApp Backups and Deletes Files 15/06/2023 at 16:18 By An updated version of an Android remote access trojan dubbed GravityRAT has been found masquerading as messaging apps BingeChat and Chatico as part of a narrowly targeted campaign since June 2022. “Notable in the newly discovered campaign, GravityRAT can exfiltrate WhatsApp backups and

New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries 15/06/2023 at 15:15 By In what’s a new kind of software supply chain attack aimed at open source projects, it has emerged that threat actors could seize control of expired Amazon S3 buckets to serve rogue binaries without altering the modules themselves. “Malicious

New Research: 6% of Employees Paste Sensitive Data into GenAI tools as ChatGPT 15/06/2023 at 15:15 By The revolutionary technology of GenAI tools, such as ChatGPT, has brought significant risks to organizations’ sensitive data. But what do we really know about this risk? A new research by Browser Security company LayerX sheds light on the scope and

Josh Lemos appointed as GitLab Chief Information Security Officer 15/06/2023 at 15:04 By GitLab Inc., has recently announced the appointment of Josh Lemos as Chief Information Security Officer (CISO). This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Report Reveals Shuckworm’s Long-Running Intrusions on Ukrainian Organizations 15/06/2023 at 14:31 By The Russian threat actor known as Shuckworm has continued its cyber assault spree against Ukrainian entities in a bid to steal sensitive information from compromised environments. Targets of the recent intrusions, which began in February/March 2023, include security services, military, and government organizations, Symantec said in

Microsoft Warns of New Russian State-Sponsored Hacker Group with Destructive Intent 15/06/2023 at 12:16 By Microsoft on Wednesday took the lid off a “novel and distinct Russian threat actor,” which it said is linked to the General Staff Main Intelligence Directorate (GRU) and has a “relatively low success rate.” The tech giant’s Threat Intelligence team,

LockBit Ransomware Extorts $91 Million from U.S. Companies 15/06/2023 at 08:33 By The threat actors behind the LockBit ransomware-as-a-service (RaaS) scheme have extorted $91 million following hundreds of attacks against numerous U.S. organizations since 2020. That’s according to a joint bulletin published by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), the Multi-State Information

42% of IT professionals aren’t fully prepared for AI 14/06/2023 at 23:07 By According to a survey, 42% if IT leaders believe existing IT infrastructure is not fully prepared for the demands of AI, despite widespread adoption. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

42% if IT professionals aren’t fully prepared for AI 14/06/2023 at 21:33 By According to a survey, 42% if IT leaders believe existing IT infrastructure is not fully prepared for the demands of AI, despite widespread adoption. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Managing MDM threats to protect an organization 14/06/2023 at 20:12 By This episode of The Security Podcasts focuses on MDM threats and features AJ Nash, VP and Distinguished Fellow of Intelligence at ZeroFox.   This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Lack of trust reported as top security challenge 14/06/2023 at 20:12 By Security leader’s trust in an organization and their employees’ ability to prevent a cyberattack was analyzed in a recent report by Kroll.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Chinese Hackers Exploit VMware Zero-Day to Backdoor Windows and Linux Systems 14/06/2023 at 20:12 By The Chinese state-sponsored group known as UNC3886 has been found to exploit a zero-day flaw in VMware ESXi hosts to backdoor Windows and Linux systems. The VMware Tools authentication bypass vulnerability, tracked as CVE-2023-20867 (CVSS score: 3.9), “enabled the execution of privileged commands across

Severe Vulnerabilities Reported in Microsoft Azure Bastion and Container Registry 14/06/2023 at 17:05 By Two “dangerous” security vulnerabilities have been disclosed in Microsoft Azure Bastion and Azure Container Registry that could have been exploited to carry out cross-site scripting (XSS) attacks. “The vulnerabilities allowed unauthorized access to the victim’s session within the compromised Azure service

Why is runtime security back in vogue? 14/06/2023 at 16:18 By Containers have revolutionized the software development process however, the “shift-left security” focus creates risk for firms that neglect security during runtime. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Hoxhunt names Petri Kuivala as Chief Information Security Officer Advisor 14/06/2023 at 15:17 By Hoxhunt has announced the appointment of Petri Kuivala as Chief Information Security Officer (CISO) Advisor.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

ICS Patch Tuesday: Siemens Addresses Over 180 Third-Party Component Vulnerabilities 14/06/2023 at 14:34 By Eduard Kovacs ICS Patch Tuesday: Siemens and Schneider Electric have published more than a dozen advisories addressing over 200 vulnerabilities. The post ICS Patch Tuesday: Siemens Addresses Over 180 Third-Party Component Vulnerabilities appeared first on SecurityWeek. This article is an excerpt

Where from, Where to — The Evolution of Network Security 14/06/2023 at 14:34 By For the better part of the 90s and early aughts, the sysadmin handbook said, “Filter your incoming traffic, not everyone is nice out there” (later coined by Gandalf as “You shall not pass”). So CIOs started to supercharge their network fences