Threat actors operating with interests aligned to Belarus and Russia have been linked to a new cyber espionage campaign that likely exploited cross-site scripting (XSS) vulnerabilities in Roundcube webmail servers to target over 80 organizations. These entities are primarily located…
Category: EN
Balancing “super app” ambitions with privacy
When Elon Musk’s ambitions to transform X into an “everything app” were divulged last year, he joined several companies known to be exploring or actively working on developing super apps, suggesting there’s clearly a niche to be filled. In fact,…
First Ever iOS Trojan Steals Facial Recognition Data
A novel, very sophisticated mobile Trojan dubbed GoldPickaxe.iOS that targets iOS users exclusively was discovered to collect facial recognition data, intercept SMS, and gather identity documents. The Asia-Pacific region includes the majority of those impacted by this harmful activity. On the other hand,…
CVE Prioritizer: Open-source tool to prioritize vulnerability patching
CVE Prioritizer is an open-source tool designed to assist in prioritizing the patching of vulnerabilities. It integrates data from CVSS, EPSS, and CISA’s KEV catalog to offer insights into the probability of exploitation and the potential effects of vulnerabilities on…
Russian-Linked Hackers Breach 80+ Organizations via Roundcube Flaws
Threat actors operating with interests aligned to Belarus and Russia have been linked to a new cyber espionage campaign that likely exploited cross-site scripting (XSS) vulnerabilities in Roundcube webmail servers to target over 80 organizations. These entities are primarily located…
Details of Ransomania and iOS Face ID Scans stolen by hackers
Ransomania, an Innovative Tool Developed by Cyberint to Combat Ransomware Threats The global menace of ransomware continues to plague companies of all sizes and industries. To effectively counter this threat, it is crucial to raise awareness among individuals and organizations…
How to defend against credential stuffing attacks
Protecting against credential stuffing attacks requires a multi-layered approach to security. Here are some effective strategies to defend against such threats: Implement Multi-Factor Authentication (MFA): Require users to provide additional forms of authentication, such as a one-time code sent to…
Inside the strategy of Salesforce’s new Chief Trust Officer
Recently, Salesforce named Brad Arkin, previously Chief Security & Trust Officer at Cisco, the company’s new Chief Trust Officer. This was the perfect opportunity to find out more about his plans. In this Help Net Security interview, Arkin discusses a…
Business Data Encryption: Protecting Sensitive Information
Today's fast-paced digital world requires businesses to implement robust encryption technologies to protect sensitive information, but how do you select the right tools and ensure employees are trained effectively? The post Business Data Encryption: Protecting Sensitive Information appeared first on…
RCE vulnerabilities fixed in SolarWinds enterprise solutions
SolarWinds has released updates for Access Rights Manager (ARM) and (Orion) Platform that fix vulnerabilities that could allow attackers to execute code on vulnerable installations. SolarWinds ARM flaws fixed SolarWinds, the company whose Orion IT administration platform has been infamously…
Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor
The Iranian-origin threat actor known as Charming Kitten has been linked to a new set of attacks aimed at Middle East policy experts with a new backdoor called BASICSTAR by creating a fake webinar portal. Charming Kitten, also called APT35, CharmingCypress, Mint…
The double-edged sword of zero trust
In an era defined by relentless cyber threats and evolving attack vectors, traditional security models are proving increasingly inadequate to safeguard sensitive information. Unlike conventional systems that often rely on perimeter defenses, zero trust adopts a more discerning philosophy, treating…
Fraudsters have found creative ways to scam some businesses
70% of businesses report that fraud losses have increased in recent years and over half of consumers feel they’re more of a fraud target than a year ago, according to Experian. To thwart fraudulent activity in 2024, businesses need to…
Cybersecurity Training for Small Businesses
Unlock the secrets to effective cybersecurity training for small businesses and discover how it can protect against cyber threats and safeguard sensitive data. The post Cybersecurity Training for Small Businesses appeared first on Security Zap. This article has been indexed…
Feds post $15 million bounty for info on ALPHV/Blackcat ransomware crew
ALSO: EncroChat crims still getting busted; ransomware takes down CO public defenders office; and crit vulns infosec in brief The US government is offering bounties up to $15 million as a reward for anyone willing to help it take out…
Does moving to the cloud mean compromising on security?
<img alt=”” height=”1024″ src=”https://images.squarespace-cdn.com/content/v1/62b4df73dccbb4238685ab2a/455f5c20-bc60-4bc9-82db-3fdfde7ecdb0/cloud.jpg?format=1000w” width=”1792″ /><figcaption class=”image-caption-wrapper”> < p class=”sqsrte-small”>Cloud security means multiple teams with a shared responsibility. The transition to cloud computing is an evolution that many organisations are still undertaking to improve efficiency, scalability, and flexibility in their…
Integrated Risk Prioritization for Lightspeed Remediation
In today’s fast-paced digital world, keeping your IT assets safe is more important than ever. Imagine having a Superhero that can spot and fix problems with your IT infrastructure within the blink of an eye. With cyber threats growing in…
Hackers Claim Data Breach at Staffing Giant Robert Half, Sell Sensitive Data
By Waqas Deja vu at Robert Half? Notorious hackers claim responsibility as the staffing giant makes headlines for yet another alleged data breach in two years. This is a post from HackRead.com Read the original post: Hackers Claim Data Breach…
Corporate Accountability: Tech Titans Address the Menace of Misleading AI in Elections
In a report issued on Friday, 20 leading technology companies pledged to take proactive steps to prevent deceptive uses of artificial intelligence from interfering with global elections, including Google, Meta, Microsoft, OpenAI, TikTok, X, Amazon and Adobe. According to…
Changing How Healthcare Works: Big News in Communication
In a pivotal transformation within the healthcare industry, a prominent shift is currently unfolding. Direct Secure Messaging (DSM) has emerged as a game-changer, modernising the way vital information is shared among healthcare providers, pharmacies, and laboratories. Traditionally, healthcare communication…