Article Summary : 🔹 APT29, a Russian hacking group linked to SVR, is targeting political parties in Germany with phishing attacks. 🔹 The group is using a backdoor malware named WineLoader to gain remote access to compromised devices. 🔹 WineLoader has been used in previous attacks by APT29 and featur…
Category: Cyber Security News
Article Summary: 🔍 Discover how cybersecurity researchers uncover vulnerabilities in Zephyr OS, a real-time operating system used in IoT and embedded devices. 🛡️ Learn about the risks of IP address spoofing and denial-of-service attacks and the importance of maintaining strong security measures in c…
Article Summary : 🔹 BlueFlag Security platform redefines software development lifecycle security with a focus on identity security. 🔹 $11.5 million seed funding round announced to develop BlueFlag’s SDLC security and governance platform. 🔹 BlueFlag addresses the critical threat vector of developer i…
Article Summary: 🔒 The CISA One Industrial Control Systems Advisory highlights concerns regarding the WebAccess/SCADA system vulnerability. 🛡️ SQL Injection, a popular cyberattack technique, poses risks of unauthorized access and data manipulation. 🌐 The advisory offers crucial updates on security i…
Article Summary : 🔒 Finite State raises $20 million in growth round led by Energy Impact Partners to address cybersecurity challenges and advance innovative solutions for securing connected devices and critical infrastructure. 🚀 Investment empowers Finite State to accelerate product development effo…
Article Summary : 👤 President Joe Biden nominated Michael Sulmeyer to be assistant secretary of defense for cyber policy at the Pentagon, the first individual to hold the position. 🛡 Sulmeyer currently serves as the principal cyber advisor to the secretary of the Army, advising on cyber readiness an…
Summary: 🏆 Pwn2Own Vancouver 2024 concluded with security researchers earning $1,132,500 by demonstrating 29 zero-day vulnerabilities. 🎯 Various categories were targeted, including web browsers, cloud-native/container, virtualization, and automotive systems. 💰 The total prize pool exceeded $1.3 mill…
**Summary:** 🔒 Greensboro College faces a class action lawsuit following a data breach affecting over 52,000 individuals. 🛡️ Hedgecock alleges that the college failed to safeguard personal information adequately. 📆 The breach occurred in August 2023 due to a ransomware attack. 📋 The exposed data inc…
**Summary:** — 🔍 Threat actors are targeting enterprise software and network infrastructure vulnerabilities at a higher rate, according to Recorded Future’s annual threat analysis report. 📈 The number of high-risk vulnerabilities exploited in attacks against enterprise software and network infrast…
Anti-Phishing, DMARC , Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime Proofpoint Researchers Say Beware of Phishing Emails, Embedded Links in PDFs Prajeet Nair (@prajeetspeaks) • March 23, 2024 Image: Shutterstock Iran-aligned threat actor TA450 is using fake s…
Mozilla has released security updates to fix two zero-day vulnerabilities in the Firefox web browser exploited during the Pwn2Own Vancouver 2024 hacking competition. Manfred Paul (@_manfp) earned a $100,000 award and 10 Master of Pwn points after exploiting an out-of-bounds (OOB) write flaw (CVE-202…
An Illinois county on the border with Iowa is the latest local government in the U.S. to fall victim to a ransomware attack. Henry County has been dealing with a wide-ranging cyberattack since March 18, Mat Schnepple, director of the Emergency Management (OEM) office in Henry County, confirmed to Re…
Researchers disclosed vulnerabilities today that impact 3 million Saflok electronic RFID locks deployed in 13,000 hotels and homes worldwide, allowing the researchers to easily unlock any door in a hotel by forging a pair of keycards. The series of security flaws, dubbed “Unsaflok,” was discove…
The US government has published new distributed denial-of-service (DDoS) attack guidance for public sector entities to help prevent disruption to critical services.The document is designed to serve as a comprehensive resource to address the specific needs and challenges faced by federal, state and l…
Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet’s FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks. Tracked as CVE-2023-48788, this security flaw is an SQL injection in the DB2 Administrat…