HHS OCR proposed updates to the HIPAA Security Rule to boost cybersecurity for electronic protected health information (ePHI). On December 27, 2024, the United States Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) proposed updates to…
Tag: EN
Hackers Breach Cyberhaven’s Chrome Extension in Supply-Chain Attack, Exfiltrating Sensitive Data
Hackers compromised Cyberhaven’s Chrome extension in a suspected supply-chain attack, publishing a malicious update capable of stealing customer passwords and session tokens. The attack raised serious concerns about the security of widely-used browser extensions. Cyberhaven, a data-loss prevention startup, confirmed…
Russia Blocked Viber For Violating State Laws
Russia has taken yet another step towards restricting user communications within the boundaries. With the… Russia Blocked Viber For Violating State Laws on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses. This article has been…
Recent US Court Ruling Comes As A Huge Setback To The NSO Group
A recent ruling from the US court comes in as a noteworthy setback for the… Recent US Court Ruling Comes As A Huge Setback To The NSO Group on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration…
7 Years Old RCE Vulnerability Addressed In Kerio Control
A serious vulnerability existed in the Kerio Control security software that could allow code execution… 7 Years Old RCE Vulnerability Addressed In Kerio Control on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses. This article…
New Phishing Campaign Exploits Google Calendar To Evade Filters
Researchers have observed an ongoing phishing attack that exploits Google Calendar to evade security filters.… New Phishing Campaign Exploits Google Calendar To Evade Filters on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses. This article…
FTX Executives See Prison Sentences Reduced – Report
Two executives involved in the notorious crypto fraud at FTX have reportedly had their prison sentences reduced This article has been indexed from Silicon UK Read the original article: FTX Executives See Prison Sentences Reduced – Report
Beijing Denies Involvement In US Treasury Cyberattack
China’s foreign ministry slams “groundless” accusations that a China state-sponsored actor hacked US Treasury systems This article has been indexed from Silicon UK Read the original article: Beijing Denies Involvement In US Treasury Cyberattack
American Addiction Centers Cyberattack Exposes Sensitive Data of 422,424 Individuals
< p style=”text-align: justify;”>In September 2024, American Addiction Centers (AAC) experienced a significant cyberattack that exposed the personal and health-related information of 422,424 individuals. The breach involved sensitive data such as Social Security numbers and health insurance details, prompting…
Air Fryer espionage raises data security concerns
Recently, a growing conversation has emerged on tech forums regarding the potential privacy risks posed by smart gadgets, particularly the popular air fryer. Once hailed as a revolutionary kitchen appliance for health-conscious individuals, the air fryer is now at the…
Deepening Government Use of AI and E-Government Transition in Latin America: 2024 in Review
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> < div class=”field__item even”> Policies aimed at fostering digital government processes are gaining traction in Latin America, at local and regional levels. While these initiatives can streamline access to public services,…
Decentralization Reaches a Turning Point: 2024 in review
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> The steady rise of decentralized networks this year is transforming social media. Platforms like Mastodon, Bluesky, and Threads are still in their infancy but have already shown that when users are…
Logical Reasoning in Network Problems
Classic Case 1 Many software professionals lack in-depth knowledge of TCP/IP logic reasoning, which often leads to misidentifying problems as mysterious problems. Some are discouraged by the complexity of TCP/IP networking literature, while others are misled by confusing details in…
What Is Patch Tuesday? Microsoft’s Monthly Update Explained
Patch Tuesday is Microsoft’s monthly update day for fixing vulnerabilities. Learn its purpose, benefits, and how it enhances system security. This article has been indexed from Security | TechRepublic Read the original article: What Is Patch Tuesday? Microsoft’s Monthly Update…
Kids Online Safety Act Continues to Threaten Our Rights Online: 2024 in Review
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> At times this year, it seemed that Congress was going to give up its duty to protect our rights online—particularly when the Senate passed the dangerous Kids Online Safety Act (KOSA)…
New “DoubleClickjacking” Exploit Bypasses Clickjacking Protections on Major Websites
Threat hunters have disclosed a new “widespread timing-based vulnerability class” that leverages a double-click sequence to facilitate clickjacking attacks and account takeovers in almost all major websites. The technique has been codenamed DoubleClickjacking by security researcher Paulos Yibelo. “Instead of…
U.S. Treasury sanctions Russian and Iranian entities for interfering in the presidential election
The U.S. Treasury sanctioned entities for disinformation tied to Russian and Iranian intelligence before the 2024 presidential elections. The U.S. Treasury sanctioned entities for spreading disinformation linked to Russian and Iranian intelligence ahead of the 2024 presidential elections. The U.S.…
New Stealthy Malware Leveraging SSH Over TOR Attacking Ukrainian Military
Researchers recently discovered a malicious campaign targeting Ukrainian military personnel through fake “Army+” application websites, which host a malicious installer that, upon execution, extracts the legitimate application alongside the Tor browser. The installer includes a PowerShell script that indicates the…
DrayTek Devices Vulnerability Let Attackers Arbitrary Commands Remotely
The DrayTek Gateway devices, more specifically the Vigor2960 and Vigor300B models, are susceptible to a critical command injection vulnerability. Exploitable via the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint, attackers can inject arbitrary commands into the system by manipulating the session parameter within a crafted…
Eight things that should not have happened last year, but did
2024’s Tech Fail Roll Of Dishonor Opinion Happy new year! Tradition says that this is when we boldly look forward to what may happen in the 12 months to come. Do you really want to know that? Didn’t think so.……