Noteworthy stories that might have slipped under the radar: FAA improving cyber rules for airplanes, NGate Android malware used to steal cash from ATMs, abusing Slack AI to steal data. The post In Other News: FAA Improving Cyber Rules, Android…
Tag: SecurityWeek RSS Feed
Hacker Tried to Dodge Child Support by Breaking Into Registry to Fake His Death, Prosecutors Say
Kentucky man attempted to fake his death to avoid paying child support obligations by hacking into state registries and falsifying official records. The post Hacker Tried to Dodge Child Support by Breaking Into Registry to Fake His Death, Prosecutors Say…
FBI Exposing Sensitive Data via Improper Handling of Storage Devices: Audit
Audit finds weaknesses in FBI’s inventory management and disposition procedures for drives containing sensitive information. The post FBI Exposing Sensitive Data via Improper Handling of Storage Devices: Audit appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…
SolarWinds Leaks Credentials in Hotfix for Exploited Web Help Desk Flaw
SolarWinds has issued a Web Help Desk hotfix to remove hardcoded credentials from last week’s hotfix for a critical-severity vulnerability. The post SolarWinds Leaks Credentials in Hotfix for Exploited Web Help Desk Flaw appeared first on SecurityWeek. This article has…
Oil Giant Halliburton Confirms Cyber Incident, Details Scarce
US oil giant Halliburton confirmed its computer systems were hit by a cyberattack that affected operations at its Houston offices. The post Oil Giant Halliburton Confirms Cyber Incident, Details Scarce appeared first on SecurityWeek. This article has been indexed from…
China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches
Hackers gained access to the switch using valid administrator credentials, and then ‘jailbroke’ from the application level into the OS level. The post China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches appeared first on SecurityWeek.…
Two Years On, Log4Shell Vulnerability Still Being Exploited to Deploy Malware
More than two years after the Log4j crisis, organizations are still being hit by crypto-currency miners and backdoor scripts. The post Two Years On, Log4Shell Vulnerability Still Being Exploited to Deploy Malware appeared first on SecurityWeek. This article has been…
Understanding the ‘Morphology’ of Ransomware: A Deeper Dive
Ransomware isn’t just about malware. It’s about brands, trust, and the shifting allegiances of cybercriminals. The post Understanding the ‘Morphology’ of Ransomware: A Deeper Dive appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original…
Atlassian Patches Vulnerabilities in Bamboo, Confluence, Crowd, Jira
Atlassian has released patches for nine high-severity vulnerabilities in Bamboo, Confluence, Crowd, and Jira products. The post Atlassian Patches Vulnerabilities in Bamboo, Confluence, Crowd, Jira appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the…
Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites
A critical vulnerability in the Litespeed Cache WordPress plugin can allow attackers to hack websites by creating an admin user. The post Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites appeared first on SecurityWeek. This article…
Critical Authentication Flaw Haunts GitHub Enterprise Server
GitHub patches a trio of security defects in the GitHub Enterprise Server product and recommends urgent patching for corporate users. The post Critical Authentication Flaw Haunts GitHub Enterprise Server appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Arden Claims Service Reports Data Breach, 139,000 Affected
Personal information for about 39,000 individuals was stolen in October 2023 from class action settlement administrator Arden Claims Service. The post Arden Claims Service Reports Data Breach, 139,000 Affected appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue
As many as 15,000 applications using AWS Application Load Balancer (ALB) could be exposed to ALBeast attacks. The post Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue appeared first on SecurityWeek. This article has been…
Google Cloud Unveils New Security Services and Capabilities
Several security-related enhancements have been announced at the 2024 Google Cloud Security Summit. The post Google Cloud Unveils New Security Services and Capabilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article:…
Cyberattack Disrupts Microchip Technology Manufacturing Facilities
Microchip Technology has disclosed a cyberattack impacting operations at some of its manufacturing facilities. The post Cyberattack Disrupts Microchip Technology Manufacturing Facilities appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original article: Cyberattack…
Darktrace Co-founder Mike Lynch Presumed Dead After Superyacht Sinks
Mike Lynch, co-founder of Darktrace and Autonomy, is among six people presumed dead after the superyacht, Bayesian, sank off the coast of Sicily early Monday. The post Darktrace Co-founder Mike Lynch Presumed Dead After Superyacht Sinks appeared first on SecurityWeek.…
Major Backdoor in Millions of RFID Cards Allows Instant Cloning
Backdoor in millions of contactless cards made by Shanghai Fudan Microelectronics allows instantaneous cloning of RFID smart cards used to open office doors and hotel rooms around the world. The post Major Backdoor in Millions of RFID Cards Allows Instant…
Critical Flaw in Donation Plugin Exposed 100,000 WordPress Sites to Takeover
A critical vulnerability in the GiveWP WordPress plugin could be exploited for remote code execution and arbitrary file deletion. The post Critical Flaw in Donation Plugin Exposed 100,000 WordPress Sites to Takeover appeared first on SecurityWeek. This article has been…
Fabric Cryptography Raises $33 Million for VPU Chip
Fabric Cryptography has raised $33 million in Series A funding to create the Verifiable Processing Unit (VPU), a new chip for cryptography. The post Fabric Cryptography Raises $33 Million for VPU Chip appeared first on SecurityWeek. This article has been…
How Exceptional CISOs Are Igniting the Security Fire in Their Development Team
For years, many CISOs have struggled to influence their development cohort on the importance of putting security first. The post How Exceptional CISOs Are Igniting the Security Fire in Their Development Team appeared first on SecurityWeek. This article has been…