Dr. Sreedhara Panicker Somanath, chairman of the Indian Space Research Organization, emphasized the importance of cybersecurity for the entire system during the recent inauguration of a cybersecurity training center. This article has been indexed from Cyware News – Latest Cyber…
Category: Cyware News – Latest Cyber News
Microsoft Fixes Windows Smart App Control Zero-Day Exploited Since 2018
Threat actors have been using this flaw, now labeled as CVE-2024-38217, to bypass Smart App Control and MotW security features to run potentially dangerous applications without warnings. This article has been indexed from Cyware News – Latest Cyber News Read…
Cybersecurity is a Fundamental Component of Patient Care and Safety
A multipronged cybersecurity approach is necessary for the healthcare sector, involving technology investments, staff training, and collaboration between stakeholders to develop industry-wide standards and best practices. This article has been indexed from Cyware News – Latest Cyber News Read the…
Cyber Staffing Shortages Remain CISOs’ Biggest Challenge
A recent report by Command Zero highlights the struggles CISOs and their teams are dealing with, including navigating the skills gap in the cyber field and operating commonly used tools effectively. This article has been indexed from Cyware News –…
Kali Linux 2024.3 Released: 11 New Tools, Qualcomm Snapdragon SDM845 SoC Support
Kali Linux 2024. 3 has been released with 11 new tools and added support for Qualcomm Snapdragon SDM845 SoC devices. This release emphasizes behind-the-scenes updates and optimization. This article has been indexed from Cyware News – Latest Cyber News Read…
New RansomHub Attack Uses TDSSKiller and LaZagne, Disables EDR
The RansomHub ransomware gang has been found using Kaspersky’s TDSSKiller tool to disable EDR software on target systems, allowing for credential harvesting with LaZagne. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
New PIXHELL Acoustic Attack Leaks Secrets From LCD Screen Noise
New acoustic attack named ‘PIXHELL’ can leak secrets from air-gapped systems through LCD monitors without speakers. Malware modulates pixel patterns to induce noise in the 0-22 kHz range, allowing data exfiltration up to 2 meters at 20 bps. This article…
Microsoft Discloses Four Zero-Days in September Update
Microsoft recently revealed four zero-day vulnerabilities in its September update, part of the Patch Tuesday release containing 79 vulnerabilities, making it the fourth-largest release of the year. This article has been indexed from Cyware News – Latest Cyber News Read…
Exploiting CI/CD Pipelines for Fun and Profit
On September 8, 2024, a significant exploit chain was discovered, starting from a publicly exposed . git directory, leading to a full server takeover. The vulnerabilities stem from websites exposing their . git folders. This article has been indexed from…
ToneShell Backdoor Targets IISS Defence Summit Attendees in Latest Espionage Campaign
The ToneShell backdoor, attributed to the Mustang Panda cyber espionage group, has resurfaced in a new attack targeting attendees of the 2024 IISS Defence Summit in Prague. This article has been indexed from Cyware News – Latest Cyber News Read…
Tech Stack Uniformity has Become a Systemic Vulnerability
By recognizing the importance of diversity in technology stacks and incorporating it into security protocols and incident response plans, companies can proactively protect their infrastructure and reduce the likelihood of catastrophic events. This article has been indexed from Cyware News…
DoJ Distributes $18.5 Million to Western Union Fraud Victims
The U.S. Department of Justice has distributed $18. 5m to about 3000 victims of fraud facilitated by Western Union. This is part of the second phase of the Western Union Remission program, which aims to fully compensate victims. This article…
Security Budgets Continue Modest Growth, but Staff Hiring Slows Considerably, Research Finds
Security budgets are seeing modest growth in 2024, with an 8% increase compared to a 6% growth in 2023. However, hiring of security staff has significantly slowed down, according to a report by IANS Research and Artico Search. This article…
AI Cybersecurity Needs to be as Multi-Layered as the System it’s Protecting
LLMs can be manipulated to generate harmful outputs through malicious prompts, posing risks to enterprises. To counter these attacks, companies must focus on the design, development, deployment, and operation of their AI systems. This article has been indexed from Cyware…
Quad7 Botnet Targets More SOHO and VPN Routers, Media Servers
Quad7 botnet is expanding its reach by targeting additional SOHO devices with custom malware for Zyxel VPN appliances, Ruckus wireless routers, and Axentra media servers, in addition to previously reported TP-Link and ASUS routers. This article has been indexed from…
CISA adds SonicWall SonicOS, ImageMagick, and Linux Kernel Bugs to its Known Exploited Vulnerabilities catalog
. The ImageMagick vulnerability (CVE-2016-3714) could allow remote code execution through crafted images. Linux Kernel flaw (CVE-2017-1000253) enables privilege escalation for unpatched systems. This article has been indexed from Cyware News – Latest Cyber News Read the original article: CISA…
DHS Cyber Review Board Will Announce Next Investigation ‘Soon’
The DHS Cyber Safety Review Board, led by Homeland Security officials, is preparing to announce its next investigation soon, as hinted by DHS undersecretary Rob Silvers. Silvers mentioned criteria for incident review but did not reveal details. This article has…
Chinese ‘Crimson Palace’ Espionage Campaign Keeps Hacking Southeast Asian Governments
A sophisticated trio of Chinese cyberespionage groups known as Cluster Alpha, Cluster Bravo, and Cluster Charlie are behind the Crimson Palace espionage campaign targeting government organizations in Southeast Asia. This article has been indexed from Cyware News – Latest Cyber…
Siemens Issues Critical Security Advisory for User Management Component (UMC)
Siemens has issued a critical security advisory for its User Management Component (UMC), revealing a heap-based buffer overflow vulnerability (CVE-2024-33698) with a 9. 3 CVSS score. This article has been indexed from Cyware News – Latest Cyber News Read the…
OpenZiti: Secure, Open-Source Networking for Your Applications
OpenZiti is an open-source networking project that embeds zero-trust principles directly into applications, offering features like strong identity, mTLS, E2EE, private DNS, and smart routing. This article has been indexed from Cyware News – Latest Cyber News Read the original…