Wednesday, July 31, 2024

OneBlood hit by cyberattack - WPEC

OneBlood hit by cyberattack  WPEC


http://dlvr.it/TBL0Z1

Black Hat USA 2024, BSidesLV and DEF CON 32: Your Hacker Summer Camp guide - SC Media

Black Hat USA 2024, BSidesLV and DEF CON 32: Your Hacker Summer Camp guide  SC Media


http://dlvr.it/TBL0QP

SecurityScorecard releases Cyber Risk Landscape of the Global Aviation Industry report - SecurityInfoWatch

SecurityScorecard releases Cyber Risk Landscape of the Global Aviation Industry report  SecurityInfoWatch


http://dlvr.it/TBL0Gh

A Key Piece to Mastering Zero Trust? Mobility - FedTech Magazine

A Key Piece to Mastering Zero Trust? Mobility  FedTech Magazine


http://dlvr.it/TBKVZQ

Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

Meta, the parent company of Facebook, Instagram, and WhatsApp, agreed to a record $1.4 billion settlement with the U.S. state of Texas over allegations that it illegally collected biometric data of millions of users without their permission, marking one of the largest penalties levied by regulators against the tech giant.
"This historic settlement demonstrates our commitment to standing up to


http://dlvr.it/TBJm8R

Tuesday, July 30, 2024

Mastercard Ghana Fintech Forum Advocates Cybersecurity and Contactless Payments to Drive Fintech Growth - Fintech Finance

Mastercard Ghana Fintech Forum Advocates Cybersecurity and Contactless Payments to Drive Fintech Growth  Fintech Finance


http://dlvr.it/TBHVFP

New tech, personnel will help CISA with coming rush of cyber incident reports - Nextgov/FCW

New tech, personnel will help CISA with coming rush of cyber incident reports  Nextgov/FCW


http://dlvr.it/TBHV92

RichmondCC Substation graduate branching out into cyber security - The Richmond Observer

RichmondCC Substation graduate branching out into cyber security  The Richmond Observer


http://dlvr.it/TBHV2C

Cybersecurity Firm Tenable Is Exploring a Potential Sale - Bloomberg

Cybersecurity Firm Tenable Is Exploring a Potential Sale  Bloomberg


http://dlvr.it/TBH0hK

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by "several" ransomware groups to gain elevated permissions and deploy file-encrypting malware.
The attacks involve the exploitation of CVE-2024-37085 (CVSS score: 6.8), an Active Directory integration authentication bypass that allows an attacker to obtain administrative access to the host.
"A


http://dlvr.it/TBGFn1

Monday, July 29, 2024

Cyber ransom payments will need to be disclosed by businesses under new laws - ABC News

Cyber ransom payments will need to be disclosed by businesses under new laws  ABC News


http://dlvr.it/TBDyw0

DHS adopts AI pilot programs, widens efforts to leverage AI to secure nation’s critical infrastructure - IndustrialCyber

DHS adopts AI pilot programs, widens efforts to leverage AI to secure nation’s critical infrastructure  IndustrialCyber


http://dlvr.it/TBDykk

CrowdStrike Outage Could Cost Cyber Insurers $1.5 Billion - BankInfoSecurity.com

CrowdStrike Outage Could Cost Cyber Insurers $1.5 Billion  BankInfoSecurity.com


http://dlvr.it/TBDycT

Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

Cybersecurity company Acronis is warning that a now-patched critical security flaw impacting its Cyber Infrastructure (ACI) product has been exploited in the wild.
The vulnerability, tracked as CVE-2023-45249 (CVSS score: 9.8), concerns a case of remote code execution that stems from the use of default passwords.
The flaw impacts the following versions of Acronis Cyber Infrastructure (ACI) -

&


http://dlvr.it/TBDVXM

Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

The remote access trojan known as Gh0st RAT has been observed being delivered by an "evasive dropper" called Gh0stGambit as part of a drive-by download scheme targeting Chinese-speaking Windows users.
These infections stem from a fake website ("chrome-web[.]com") serving malicious installer packages masquerading as Google's Chrome browser, indicating that users searching for the software on the


http://dlvr.it/TBCmSg

Saturday, July 27, 2024

Business owners urged to take precautions after woman loses $10,000 to hackers who posted malicious advertising on her Facebook account - ABC News

Business owners urged to take precautions after woman loses $10,000 to hackers who posted malicious advertising on her Facebook account  ABC News


http://dlvr.it/TB8gJP

Better Cybersecurity Stock: CrowdStrike vs. Palo Alto Networks - Yahoo Finance

Better Cybersecurity Stock: CrowdStrike vs. Palo Alto Networks  Yahoo Finance


http://dlvr.it/TB8gBJ

Global Cyber Security Managed Services Market Size, Share And Growth Analysis For 2024-2033 - EIN News

Global Cyber Security Managed Services Market Size, Share And Growth Analysis For 2024-2033  EIN News


http://dlvr.it/TB8g0g

CrowdStrike’s cyber blunder could be warning of worse to come - The Atlanta Journal Constitution

CrowdStrike’s cyber blunder could be warning of worse to come   The Atlanta Journal Constitution


http://dlvr.it/TB8T0P

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims.
The package, named "lr-utils-lib," attracted a total of 59 downloads before it was taken down. It was uploaded to the registry in early June 2024.
"The malware uses a


http://dlvr.it/TB7z1B

Friday, July 26, 2024

Columbus won't explain critical cyber service outage hampering 311 for days - The Columbus Dispatch

Columbus won't explain critical cyber service outage hampering 311 for days  The Columbus Dispatch


http://dlvr.it/TB6t50

Foreign interference, terrorism, cyber-attacks: Paris Olympics face unprecedented security risks - FRANCE 24 English

Foreign interference, terrorism, cyber-attacks: Paris Olympics face unprecedented security risks  FRANCE 24 English


http://dlvr.it/TB6dHH

The Importance Of a Routine Smart Contract Audit In Blockchain Security - hackernoon.com

The Importance Of a Routine Smart Contract Audit In Blockchain Security  hackernoon.com


http://dlvr.it/TB6K2h

CrowdStrike Warns of New Phishing Scam Targeting German Customers

CrowdStrike is alerting about an unfamiliar threat actor attempting to capitalize on the Falcon Sensor update fiasco to distribute dubious installers targeting German customers as part of a highly targeted campaign.
The cybersecurity company said it identified what it described as an unattributed spear-phishing attempt on July 24, 2024, distributing an inauthentic CrowdStrike Crash Reporter


http://dlvr.it/TB5x7T

Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk

Progress Software is urging users to update their Telerik Report Server instances following the discovery of a critical security flaw that could result in remote code execution.
The vulnerability, tracked as CVE-2024-6327 (CVSS score: 9.9), impacts Report Server version 2024 Q2 (10.1.24.514) and earlier.
"In Progress Telerik Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code


http://dlvr.it/TB5wkQ

Thursday, July 25, 2024

Join Our Webinar: Zero Trust and IAM – Building a Secure Future - Security Boulevard

Join Our Webinar: Zero Trust and IAM – Building a Secure Future  Security Boulevard


http://dlvr.it/TB4VDC

Cyber security measures 'cost SMEs £60,000 a year' - CIR Magazine

Cyber security measures 'cost SMEs £60,000 a year'  CIR Magazine


http://dlvr.it/TB4F6j

North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

A North Korea-linked threat actor known for its cyber espionage operations has gradually expanded into financially-motivated attacks that involve the deployment of ransomware, setting it apart from other nation-state hacking groups linked to the country.
Google-owned Mandiant is tracking the activity cluster under a new moniker APT45, which overlaps with names such as Andariel, Nickel Hyatt,


http://dlvr.it/TB3wCp

CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software

The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name Domain (BIND) 9 Domain Name System (DNS) software suite that could be exploited to trigger a denial-of-service (DoS) condition.
"A cyber threat actor could exploit one of these vulnerabilities to cause a denial-of-service condition," the U.S. Cybersecurity and


http://dlvr.it/TB3W8g

New Chrome Feature Scans Password-Protected Files for Malicious Content

Google said it's adding new security warnings when downloading potentially suspicious and malicious files via its Chrome web browser.
"We have replaced our previous warning messages with more detailed ones that convey more nuance about the nature of the danger and can help users make more informed decisions," Jasika Bawa, Lily Chen, and Daniel Rubery from the Chrome Security team said.
To that


http://dlvr.it/TB3Vsq

Thursday, July 4, 2024

Palomar Health Medical Group employees frustrated over cybersecurity incident fallout - NBC San Diego

Palomar Health Medical Group employees frustrated over cybersecurity incident fallout  NBC San Diego


http://dlvr.it/T98yMN

Brazil Halts Meta's AI Data Processing Amid Privacy Concerns

Brazil's data protection authority, Autoridade Nacional de Proteção de Dados (ANPD), has temporarily banned Meta from processing users' personal data to train the company's artificial intelligence (AI) algorithms.
The ANPD said it found "evidence of processing of personal data based on inadequate legal hypothesis, lack of transparency, limitation of the rights of data subjects, and risks to


http://dlvr.it/T98Z66

Wednesday, July 3, 2024

LexisNexis Risk Solutions Brings Cloud Hosting to the Australian Market - Australia Cyber Security Magazine

LexisNexis Risk Solutions Brings Cloud Hosting to the Australian Market  Australia Cyber Security Magazine


http://dlvr.it/T97WDH

Florida health department data captured in cyberattack, hackers claim - Tampa Bay Times

Florida health department data captured in cyberattack, hackers claim  Tampa Bay Times


http://dlvr.it/T97W7K

Cambridge University Press & Assessment hit by cyberattack - Times Higher Education

Cambridge University Press & Assessment hit by cyberattack  Times Higher Education


http://dlvr.it/T96qKV

RSA security conference video roundup: 2024 perspectives - TechTarget

RSA security conference video roundup: 2024 perspectives  TechTarget


http://dlvr.it/T96TwL

FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

The loader-as-a-service (LaaS) known as FakeBat has become one of the most widespread loader malware families distributed using the drive-by download technique this year, findings from Sekoia reveal.
"FakeBat primarily aims to download and execute the next-stage payload, such as IcedID, Lumma, RedLine, SmokeLoader, SectopRAT, and Ursnif," the company said in a Tuesday analysis.
Drive-by attacks


http://dlvr.it/T965Xv

Tuesday, July 2, 2024

Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

Cybersecurity researchers have discovered an attack campaign that targets various Israeli entities with publicly-available frameworks like Donut and Sliver.
The campaign, believed to be highly targeted in nature, "leverage target-specific infrastructure and custom WordPress websites as a payload delivery mechanism, but affect a variety of entities across unrelated verticals, and rely on


http://dlvr.it/T9544Y

South Korean ERP Vendor's Server Hacked to Spread Xctdoor Malware

An unnamed South Korean enterprise resource planning (ERP) vendor's product update server has been found to be compromised to deliver a Go-based backdoor dubbed Xctdoor.
The AhnLab Security Intelligence Center (ASEC), which identified the attack in May 2024, did not attribute it to a known threat actor or group, but noted that the tactics overlap with that of Andariel, a sub-cluster within the


http://dlvr.it/T953w5

NIST selects Post-Quantum for National Cybersecurity Center of Excellence Quantum Migration Project - SecurityInfoWatch

NIST selects Post-Quantum for National Cybersecurity Center of Excellence Quantum Migration Project  SecurityInfoWatch


http://dlvr.it/T94PLH

Cybersecurity needs AI as much as AI needs cybersecurity - Techzine Europe

Cybersecurity needs AI as much as AI needs cybersecurity  Techzine Europe http://dlvr.it/TDY1dr