Uncategorized

Researchers Uncover Powerful Backdoor and Custom Implant in Year-Long Cyber Campaign 15/05/2023 at 17:47 By Government, aviation, education, and telecom sectors located in South and Southeast Asia have come under the radar of a new hacking group as part of a highly-targeted campaign that commenced in mid-2022 and continued into the first quarter of 2023. […]

React to this headline:

Financial sector has highest password reuse rate 15/05/2023 at 17:00 By Employee exposure was measured in a report that observed a 62% password reuse rate among Fortune 1000 employees who have been exposed more than once.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Former Ubiquiti Employee Gets 6 Years in Jail for $2 Million Crypto Extortion Case 15/05/2023 at 12:11 By A former employee of Ubiquiti has been sentenced to six years in jail after he pleaded guilty to posing as an anonymous hacker and a whistleblower in an attempt to extort almost $2 million worth of cryptocurrency while working

React to this headline:

CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware 15/05/2023 at 12:11 By Poorly managed Microsoft SQL (MS SQL) servers are the target of a new campaign that’s designed to propagate a category of malware called CLR SqlShell that ultimately facilitates the deployment of cryptocurrency miners and ransomware. “Similar to web shell, which can

React to this headline:

Mapping the pathway to volunteer leadership 15/05/2023 at 08:13 By Volunteer leadership opportunities for security professionals are important. This column addresses how to approach and obtain these opportunities. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Intelligence and business risk integration in corporate security 15/05/2023 at 08:13 By Intelligence-related activities found within today’s global security programs aids in the protection of people, physical assets, finances and intellectual property. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages 13/05/2023 at 10:45 By A new phishing-as-a-service (PhaaS or PaaS) platform named Greatness has been leveraged by cybercriminals to target business users of the Microsoft 365 cloud service since at least mid-2022, effectively lowering the bar to entry for phishing attacks. “Greatness, for now, is only focused on

React to this headline:

XWorm Malware Exploits Follina Vulnerability in New Wave of Attacks 13/05/2023 at 02:35 By Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver the XWorm malware on targeted systems. Securonix, which is tracking the activity cluster under the name MEME#4CHAN, said some of the attacks have primarily targeted manufacturing

React to this headline:

Andrew Rallis hired as Executive VP and Chief Risk Officer 12/05/2023 at 22:14 By Andrew Rallis was hired as Executive VP & Chief Risk Officer for Lincoln Financial Group. Rallis has more than 40 years of risk management experience. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React

React to this headline:

Rural hospital cybersecurity legislation introduced to Senate 12/05/2023 at 19:44 By New legislation addresses the need for skilled cybersecurity professionals and digital security enhancement protocols in rural healthcare settings. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

OSHA rules USPS wrongfully terminates employee for reporting an injury 12/05/2023 at 19:44 By Following an OSHA investigation, a Tacoma federal court determined that USPS wrongfully retaliated against an employee for reporting an injury. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Netgear Routers’ Flaws Expose Users to Malware, Remote Attacks, and Surveillance 12/05/2023 at 18:01 By As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution. “Successful exploits could allow attackers to monitor users’ internet activity, hijack internet connections, and redirect

React to this headline:

Manual processes dominate TPRM as security incidents increase 12/05/2023 at 17:02 By A new study shows 48% of companies still depend on spreadsheets, while 41% report experiencing an impactful third-party breach in the last year. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Top 3 ways to boost employee safety 12/05/2023 at 17:02 By From severe weather to workplace violence and civil unrest to an uncertain economy, employees are taking note of today’s increasingly dangerous world. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Managing false threats to schools to prepare for real emergencies 12/05/2023 at 17:02 By As school districts grapple with the threat of mass shootings, they are also dealing with a record number of false active shooter reports in U.S. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React

React to this headline:

How to mitigate the risk of a physical security breach 12/05/2023 at 17:02 By Security leaders should create risk management plans to ensure property remains protected and their employees feel safe within the workplace.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

New Variant of Linux Backdoor BPFDoor Uncovered After Years of Staying Under the Radar 12/05/2023 at 17:02 By A previously undocumented and mostly undetected variant of a Linux backdoor called BPFDoor has been spotted in the wild, cybersecurity firm Deep Instinct said in a technical report published this week. “BPFDoor retains its reputation as an extremely stealthy and

React to this headline:

Solving Your Teams Secure Collaboration Challenges 12/05/2023 at 14:48 By In today’s interconnected world, where organisations regularly exchange sensitive information with customers, partners and employees, secure collaboration has become increasingly vital. However, collaboration can pose a security risk if not managed properly. To ensure that collaboration remains secure, organisations need to take steps to protect

React to this headline:

Bl00dy Ransomware Gang Strikes Education Sector with Critical PaperCut Vulnerability 12/05/2023 at 12:25 By U.S. cybersecurity and intelligence agencies have warned of attacks carried out by a threat actor known as the Bl00dy Ransomware Gang that attempt to exploit vulnerable PaperCut servers against the education facilities sector in the country. The attacks took place in early May

React to this headline:

Severe Security Flaw Exposes Over a Million WordPress Sites to Hijack 12/05/2023 at 09:20 By A security vulnerability has been disclosed in the popular WordPress plugin Essential Addons for Elementor that could be potentially exploited to achieve elevated privileges on affected sites. The issue, tracked as CVE-2023-32243, has been addressed by the plugin maintainers in version 5.7.2

React to this headline: