Cisco Talos has disclosed the details of apparently unpatched vulnerabilities in MC Technologies industrial routers and the GoCast BGP tool. The post Cisco Says Flaws in Industrial Routers, BGP Tool Remain Unpatched 8 Months After Disclosure appeared first on SecurityWeek.…
Tag: securityweek
Microsoft Rolls Out Default NTLM Relay Attack Mitigations
Microsoft has rolled out new default security protections that mitigate NTLM relaying attacks across on-premises Exchange, AD CS, and LDAP services. The post Microsoft Rolls Out Default NTLM Relay Attack Mitigations appeared first on SecurityWeek. This article has been indexed…
$50 Million Radiant Capital Heist Blamed on North Korean Hackers
Radiant Capital says a North Korean threat actor stole $50 million in assets in a sophisticated October attack. The post $50 Million Radiant Capital Heist Blamed on North Korean Hackers appeared first on SecurityWeek. This article has been indexed from…
Critical OpenWrt Flaw Exposes Firmware Update Server to Exploitation
The CVE-2024-54143 vulnerability affects the OpenWrt sysupgrade server and exposes users to risks of installing malicious firmware images. The post Critical OpenWrt Flaw Exposes Firmware Update Server to Exploitation appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
Medical Device Maker Artivion Scrambling to Restore Systems After Ransomware Attack
Medical devices manufacturer Artivion says a ransomware attack caused disruptions to order and shipping processes. The post Medical Device Maker Artivion Scrambling to Restore Systems After Ransomware Attack appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
QNAP Patches Vulnerabilities Exploited at Pwn2Own
QNAP has released patches for multiple high-severity QTS and QuTS Hero vulnerabilities disclosed at the Pwn2Own Ireland 2024 hacking contest. The post QNAP Patches Vulnerabilities Exploited at Pwn2Own appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
Deloitte Responds After Ransomware Group Claims Data Theft
Deloitte has issued a response after the Brain Cipher ransomware group claimed to have stolen over 1 Tb of information belonging to the company. The post Deloitte Responds After Ransomware Group Claims Data Theft appeared first on SecurityWeek. This article…
Eight Suspected Phishers Arrested in Belgium, Netherlands
Belgian and Dutch authorities arrested eight individuals for their alleged involvement in phishing, online scams, and money laundering operations. The post Eight Suspected Phishers Arrested in Belgium, Netherlands appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
The EU Makes an Urgent TikTok Inquiry on Russia’s Role in Romanian Election Turmoil
EU sent TikTok an urgent request for more information about Romanian intelligence files suggesting that Russia coordinated influencers to promote a candidate who became the surprise front-runner in presidential election. The post The EU Makes an Urgent TikTok Inquiry on…
Industry Moves for the week of December 9, 2024 – SecurityWeek
Explore industry moves and significant changes in the industry for the week of December 9, 2024. Stay updated with the latest industry trends and shifts. This article has been indexed from SecurityWeek Read the original article: Industry Moves for the…
Anna Jaques Hospital Data Breach Impacts 316,000 People
Anna Jaques Hospital says the personal information of over 316,000 individuals was compromised in a year-old data breach. The post Anna Jaques Hospital Data Breach Impacts 316,000 People appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
In Other News: Cloudflare Abuse, UK and EU Cybersecurity Reports, FBI Gen-AI Alert
Noteworthy stories that might have slipped under the radar: ENISA and NCSC release cybersecurity reports, abuse of Cloudflare services, FBI warns of gen-AI enabling fraud. The post In Other News: Cloudflare Abuse, UK and EU Cybersecurity Reports, FBI Gen-AI Alert…
SonicWall Patches 6 Vulnerabilities in Secure Access Gateway
SonicWall has released patches for multiple high-severity flaws in the SMA100 SSL-VPN secure access gateway. The post SonicWall Patches 6 Vulnerabilities in Secure Access Gateway appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article:…
Google Open Sources Security Patch Validation Tool for Android
Google has announced the open source availability of Vanir, a patch validation tool for Android platform developers. The post Google Open Sources Security Patch Validation Tool for Android appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
Recently Charged Scattered Spider Suspect Did Poor Job at Covering Tracks
A California teen suspected of being a Scattered Spider member left a long trail of evidence and even used an FBI service to launder money. The post Recently Charged Scattered Spider Suspect Did Poor Job at Covering Tracks appeared first…
Critical Vulnerability Discovered in SailPoint IdentityIQ
A critical directory traversal vulnerability in the SailPoint IdentityIQ IAM platform exposes restricted files to attackers. The post Critical Vulnerability Discovered in SailPoint IdentityIQ appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Critical…
I-O Data Confirms Zero-Day Attacks on Routers, Full Patches Pending
Japanese device maker confirms zero-day router exploitation and warn that full patches won’t be available for a few weeks. The post I-O Data Confirms Zero-Day Attacks on Routers, Full Patches Pending appeared first on SecurityWeek. This article has been indexed…
Watch Now: Cyber AI & Automation Summit- All Sessions Available On Demand
SecurityWeek’s Cyber AI & Automation Summit took place on December 4th, as an online event. The post Watch Now: Cyber AI & Automation Summit- All Sessions Available On Demand appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
‘DroidBot’ Android Trojan Targets Banking, Cryptocurrency Applications
The newly discovered DroidBot Android trojan targets 77 banks, cryptocurrency exchanges, and national organizations. The post ‘DroidBot’ Android Trojan Targets Banking, Cryptocurrency Applications appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: ‘DroidBot’ Android…
Bootloader Vulnerability Impacts Over 100 Cisco Switches
More than 100 Cisco products are affected by an NX-OS vulnerability that allows attackers to bypass image signature verification. The post Bootloader Vulnerability Impacts Over 100 Cisco Switches appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…