Uncategorized

Ohio children’s hospital cited by OSHA for workplace violence 29/05/2023 at 17:10 By A federal investigation found that a children’s hospital in Columbus, Ohio, failed to protect employees from workplace violence and serious injuries.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AceCryptor: Cybercriminals’ Powerful Weapon, Detected in 240K+ Attacks 29/05/2023 at 16:30 By A crypter (alternatively spelled cryptor) malware dubbed AceCryptor has been used to pack numerous strains of malware since 2016. Slovak cybersecurity firm ESET said it identified over 240,000 detections of the crypter in its telemetry in 2021 and 2022. This amounts to more than 10,000 hits per

3 Challenges in Building a Continuous Threat Exposure Management (CTEM) Program and How to Beat Them 29/05/2023 at 16:30 By If you’re a cybersecurity professional, you’re likely familiar with the sea of acronyms our industry is obsessed with. From CNAPP, to CWPP, to CIEM and all of the myriad others, there seems to be a

Cybercriminals are winning: How companies can turn the tide 29/05/2023 at 15:29 By At no time in history have organizations spent as much money as they are right now on cybersecurity to prevent bad things from happening. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New GobRAT Remote Access Trojan Targeting Linux Routers in Japan 29/05/2023 at 13:05 By Linux routers in Japan are the target of a new Golang remote access trojan (RAT) called GobRAT. “Initially, the attacker targets a router whose WEBUI is open to the public, executes scripts possibly by using vulnerabilities, and finally infects the GobRAT,” the

Don’t Click That ZIP File! Phishers Weaponizing .ZIP Domains to Trick Victims 29/05/2023 at 12:41 By A new phishing technique called “file archiver in the browser” can be leveraged to “emulate” a file archiver software in a web browser when a victim visits a .ZIP domain. “With this phishing attack, you simulate a file archiver

PyPI Implements Mandatory Two-Factor Authentication for Project Owners 29/05/2023 at 08:48 By The Python Package Index (PyPI) announced last week that every account that maintains a project on the official third-party software repository will be required to turn on two-factor authentication (2FA) by the end of the year. “Between now and the end of the

Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking 27/05/2023 at 12:03 By A critical security vulnerability has been disclosed in the Open Authorization (OAuth) implementation of the application development framework Expo.io. The shortcoming, assigned the CVE identifier CVE-2023-28131, has a severity rating of 9.6 on the CVSS scoring system. API security firm Salt Labs said the issue

New Stealthy Bandit Stealer Targeting Web Browsers and Cryptocurrency Wallets 27/05/2023 at 12:03 By A new stealthy information stealer malware called Bandit Stealer has caught the attention of cybersecurity researchers for its ability to target numerous web browsers and cryptocurrency wallets.  “It has the potential to expand to other platforms as Bandit Stealer was developed

New York Attorney General seeks fine over Sport Warehouse data breach 26/05/2023 at 22:15 By Online sporting goods retailer Sports Warehouse must pay the state of New York 300,000 in penalties for a data breach affecting 2.5 million consumers. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Four additional states cite Dollar Tree with workplace hazards 26/05/2023 at 21:36 By Nine Dollar Tree locations in four states have received workplace safety violations from OSHA. Hazards include blocked exits and chemical exposure. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Severe Flaw in Google Cloud’s Cloud SQL Service Exposed Confidential Data 26/05/2023 at 20:04 By A new security flaw has been disclosed in the Google Cloud Platform’s (GCP) Cloud SQL service that could be potentially exploited to obtain access to confidential data. “The vulnerability could have enabled a malicious actor to escalate from a basic

San Antonio updates security radio system 26/05/2023 at 19:03 By The Alamo Area Regional Radio System was completed for public service security. All agencies are now on the same system without needing patches. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Advisory warning issued for PRC state-sponsored cyber activity 26/05/2023 at 19:03 By The NSA and Central Security Service released a threat advisory which highlights a cluster of activity being attributed to a China state-sponsored threat group. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Why are ID fraud numbers still rising? 26/05/2023 at 16:38 By Increasing ID scams are raising the question of why technological advancements such as biometric authentication have not solved the problem. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Strengthening concert fan safety with video analytics 26/05/2023 at 16:38 By The responsibility of protecting performers, staff and visitors demands layers of planning and responsiveness driven by intelligent video solutions. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Protecting critical infrastructure with radar 26/05/2023 at 16:38 By Utility organizations, like other critical infrastructure sites, are faced with ever-present challenges to protect facilities, people and assets. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Predator Android Spyware: Researchers Sound the Alarm on Alarming Capabilities 26/05/2023 at 16:12 By Security researchers have shared a deep dive into the commercial Android spyware called Predator, which is marketed by the Israeli company Intellexa (previously Cytrox). Predator was first documented by Google’s Threat Analysis Group (TAG) in May 2022 as part of attacks leveraging five

5 Must-Know Facts about 5G Network Security and Its Cloud Benefits 26/05/2023 at 15:16 By 5G is a game changer for mobile connectivity, including mobile connectivity to the cloud. The technology provides high speed and low latency when connecting smartphones and IoT devices to cloud infrastructure. 5G networks are a critical part of all infrastructure

New COSMICENERGY Malware Exploits ICS Protocol to Sabotage Power Grids 26/05/2023 at 10:38 By A new strain of malicious software that’s engineered to penetrate and disrupt critical systems in industrial environments has been unearthed. Google-owned threat intelligence firm Mandiant dubbed the malware COSMICENERGY, adding it was uploaded to a public malware scanning utility in December 2021