Category: Uncategorized
-
Permit.io Raises $8 Million for Authorization Platform Ionut Arghire
Tel Aviv startup raises $8 million in Series A funding to help developers add secure access approval flows to applications. The post Permit.io Raises $8 Million for Authorization Platform appeared first on SecurityWeek. Read More
-
Ex-Employee’s Admin Credentials Used in US Gov Agency Hack Ionut Arghire
A threat actor employed the administrative credentials of a former employee to hack a US government organization. The post Ex-Employee’s Admin Credentials Used in US Gov Agency Hack appeared first on SecurityWeek. Read More
-
EU Watchdog Urged to Reject Meta ‘Pay for Privacy’ Scheme AFP
Civil rights groups called on an EU watchdog to rule against Facebook owner Meta’s scheme to let Europeans pay to opt out of data tracking, which they say violates EU law. The post EU Watchdog Urged to Reject Meta ‘Pay for Privacy’ Scheme appeared first on SecurityWeek. Read More
-
In Other News: US Hacks Iranian Spy Ship, Rhysida Ransomware Decryption, NIST Guidance SecurityWeek News
Noteworthy stories that might have slipped under the radar: US hacks Iranian military vessel used for spying, Rhysida ransomware free decryption tool, NIST guidance. The post In Other News: US Hacks Iranian Spy Ship, Rhysida Ransomware Decryption, NIST Guidance appeared first on SecurityWeek. Read More
-
Mysterious ‘MMS Fingerprint’ Hack Used by Spyware Firm NSO Group Revealed Kevin Townsend
The existence of a previously unknown infection technique used by spyware firm NSO Group is suggested by a single line in a contract between NSO and the telecom regulator of Ghana. The post Mysterious ‘MMS Fingerprint’ Hack Used by Spyware Firm NSO Group Revealed appeared first on SecurityWeek. Read More
-
RustDoor macOS Backdoor Targets Cryptocurrency Firms with Fake Job Offers [email protected] (The Hacker News)
Several companies operating in the cryptocurrency sector are the target of a newly discovered Apple macOS backdoor codenamed RustDoor. RustDoor was first documented by Bitdefender last week, describing it as a Rust-based malware capable of harvesting and uploading files, as well as gathering information about the infected machines. It’s distributed by masquerading itself as a VisualRead More
-
Eight Vulnerabilities Disclosed in the AI Development Supply Chain Kevin Townsend
Details of eight vulnerabilities found in the open source supply chain used to develop in-house AI and ML models have been disclosed. All have CVE numbers, one has critical severity, and seven have high severity. The post Eight Vulnerabilities Disclosed in the AI Development Supply Chain appeared first on SecurityWeek. Read More
-
Vulnerabilities in CUSG CMS Exposed Credit Unions to Attacks Ionut Arghire
Three vulnerabilities in CU Solutions Group CMS exposed 275 credit unions to credential theft, account takeover. The post Vulnerabilities in CUSG CMS Exposed Credit Unions to Attacks appeared first on SecurityWeek. Read More
-
CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks Eduard Kovacs
CISA has added CVE-2020-3259, an old Cisco ASA vulnerability exploited by ransomware, to its KEV catalog. The post CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks appeared first on SecurityWeek. Read More
-
Why We Must Democratize Cybersecurity [email protected] (The Hacker News)
With breaches making the headlines on an almost weekly basis, the cybersecurity challenges we face are becoming visible not only to large enterprises, who have built security capabilities over the years, but also to small to medium businesses and the broader public. While this is creating greater awareness among smaller businesses of the need to…