Category: Uncategorized
-
Cybersecurity M&A Roundup for First Half of June 2024 Eduard Kovacs
Roundup of the cybersecurity-related merger and acquisition (M&A) deals announced in the first half of June 2024. The post Cybersecurity M&A Roundup for First Half of June 2024 appeared first on SecurityWeek. Read More
-
Amtrak Says Guest Rewards Accounts Hacked in Credential Stuffing Attacks Ionut Arghire
National passenger railroad company Amtrak is notifying customers that hackers have breached their Guest Rewards Accounts. The post Amtrak Says Guest Rewards Accounts Hacked in Credential Stuffing Attacks appeared first on SecurityWeek. Read More
-
US, Allies Publish Guidance on Securing Network Access Ionut Arghire
Government agencies in the US, New Zealand, and Canada have published new guidance on improving network security. The post US, Allies Publish Guidance on Securing Network Access appeared first on SecurityWeek. Read More
-
New Case Study: Unmanaged GTM Tags Become a Security Nightmare [email protected] (The Hacker News)
Are your tags really safe with Google Tag Manager? If you’ve been thinking that using GTM means that your tracking tags and pixels are safely managed, then it might be time to think again. In this article we look at how a big-ticket seller that does business on every continent came unstuck when it forgot…
-
CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch Eduard Kovacs
CISA has notified RAD after finding a PoC exploit targeting a high-severity vulnerability in an outdated industrial switch. The post CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch appeared first on SecurityWeek. Read More
-
New Threat Actor ‘Void Arachne’ Targets Chinese Users with Malicious VPN Installers [email protected] (The Hacker News)
Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer (MSI) files for virtual private networks (VPNs) to deliver a command-and-control (C&C) framework called Winos 4.0. “The campaign also promotes compromised MSI files embedded with nudifiers and deepfake pornography-generating software, as well asRead More
-
Warning: Markopolo’s Scam Targeting Crypto Users via Fake Meeting Software [email protected] (The Hacker News)
A threat actor who goes by alias markopolo has been identified as behind a large-scale cross-platform scam that targets digital currency users on social media with information stealer malware and carries out cryptocurrency theft. The attack chains involve the use of a purported virtual meeting software named Vortax (and 23 other apps) that are used…
-
The Perilous Role of the CISO: Navigating Modern Minefields Jennifer Leggio
As organizations grapple with the implications of cybersecurity on their bottom line and reputation, the question of whether the CISO role is worth the inherent risks looms large. The post The Perilous Role of the CISO: Navigating Modern Minefields appeared first on SecurityWeek. Read More
-
Chrome 126 Update Patches Vulnerability Exploited at Hacking Competition Ionut Arghire
Google has released a Chrome 126 security update with six fixes, including four for externally reported high-severity flaws. The post Chrome 126 Update Patches Vulnerability Exploited at Hacking Competition appeared first on SecurityWeek. Read More
-
AMD Investigating Breach Claims After Hacker Offers to Sell Data Eduard Kovacs
AMD has launched an investigation after a notorious hacker announced selling sensitive data allegedly belonging to the company. The post AMD Investigating Breach Claims After Hacker Offers to Sell Data appeared first on SecurityWeek. Read More