Cisco on Tuesday unveiled an open source proof-of-concept tool designed to improve visibility into backplane traffic in industrial organizations. A backplane is a piece of hardware that connects various modules and components together. In operational technology (OT) environments, for instance, backp…
Category: Cyber Security News
On March 5, a technical failure resulted in widespread login issues across Meta’s Facebook, Instagram, Threads, and Messenger platforms.Meta’s head of communications, Andy Stone, confirmed the issues on X, formerly known as Twitter, and stated that the company “resolved the issue as quickly as possi…
By examining common social engineering tactics and four of the most devious threat groups, organizations can better defend themselves.
In the dynamic realm of technology, a luminary is ascending—Phind-70B. This transformative force in coding combines speed, intelligence, and a resolute challenge to GPT-4 Turbo, promising to redefine the coding paradigm. Rooted in the robust CodeLlama-70B foundation and fortified with an additional…
The utility’s software bill of materials (SBOM) experiment aims to establish stronger supply chain security – and tighter defenses against potential cyberattacks.
SecurityWeek will host the Artificial Intelligence (AI) Risk Summit June 25-26, 2024, at the Ritz-Carlton in Half Moon Bay, CA. Hosted at the stunning Ritz-Carlton, Half Moon Bay, just 20 miles from San Francisco International Airport (SFO), this event will host some of the brightest minds in t…
Hackers stage Epic hackA group announced earlier this week that they had successfully breached Epic Games and taken 189GB of data, including user information. They are now retracting their statements, claiming that they staged the whole event to deceive real hackers.The group, which goes by the onli…
The Bank of England released news this week that the value of notes in circulation has increased by nearly 16 percent since last year as it announced the opening of a new exhibition on the future of money (who could resist a tour through the history of payment methods?) A curator at the Bank of…
Security updates announced for Android on Monday resolve 38 vulnerabilities, including two critical-severity issues in the System component. Impacting Android 12, 12L, 13, and 14, and tracked as CVE-2024-0039 and CVE-2024-23717, the two critical flaws could lead to remote code execution and elevatio…
Hackers are targeting misconfigured servers running Apache Hadoop YARN, Docker, Confluence, or Redis with new Golang-based malware that automates the discovery and compromise of the hosts. […]
The Alphv/BlackCat gang on Monday announced that it’s shutting down the ransomware operation and that it has already found a buyer for the malware’s source code. The announcement comes roughly three months after the ransomware-as-a-service (RaaS) survived a law enforcement takedown effort that force…
The US cybersecurity agency CISA on Tuesday added flaws impacting Pixel phones and Sunhillo software to its Known Exploited Vulnerabilities (KEV) catalog. The exploited Pixel vulnerability is tracked as CVE-2023-21237. When it patched the flaw in June 2023, Google warned that it had been aware…
Every Google Workspace administrator knows how quickly Google Drive becomes a messy sprawl of loosely shared confidential information. This isn’t anyone’s fault; it’s inevitable as your productivity suite is purposefully designed to enable real-time collaboration – both internally and externally.
For Security & Risk Management teams, the untenable risk of any Google Drive footprint
Overview On February 13th, 2024, Microsoft announced a Windows Kernel Elevation of Privilege Vulnerability CVE-2024-21338 patch. The vulnerability occurs at certain IOCTL of “appid.sys” known as AppLocker‘s driver, one of the Windows feature. The threat actor can read and write on a random kernel me…
The U.S. Department of Treasury’s Office of Foreign Assets Control (OFAC) sanctioned two individuals and five entities associated with the Intellexa Alliance for their role in “developing, operating, and distributing” commercial spyware designed to target government officials, journalists, and policy experts in the country.
“The proliferation of commercial spyware poses distinct and growing