Category: Uncategorized
-
21 New Mac Malware Families Emerged in 2023 Eduard Kovacs
A total of 21 new malware families targeting macOS systems were discovered in 2023, a 50% increase compared to 2022. The post 21 New Mac Malware Families Emerged in 2023 appeared first on SecurityWeek. Read More
-
5 Ways to Reduce SaaS Security Risks [email protected] (The Hacker News)
As technology adoption has shifted to be employee-led, just in time, and from any location or device, IT and security teams have found themselves contending with an ever-sprawling SaaS attack surface, much of which is often unknown or unmanaged. This greatly increases the risk of identity-based threats, and according to a recent report from CrowdStrike,…
-
SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails [email protected] (The Hacker News)
A new exploitation technique called Simple Mail Transfer Protocol (SMTP) smuggling can be weaponized by threat actors to send spoofed emails with fake sender addresses while bypassing security measures. “Threat actors could abuse vulnerable SMTP servers worldwide to send malicious emails from arbitrary email addresses, allowing targeted phishing attacks,” Timo Longin, a senior securityRead More
-
Xerox Confirms Data Breach at US Subsidiary Following Ransomware Attack Ionut Arghire
Xerox says personal information was stolen in a cyberattack at US subsidiary Xerox Business Solutions. The post Xerox Confirms Data Breach at US Subsidiary Following Ransomware Attack appeared first on SecurityWeek. Read More
-
SonicWall acquires Banyan to boost zero-trust, SSE offerings
Post ContentRead More
-
DOJ Slams XCast with $10 Million Fine Over Massive Illegal Robocall Operation [email protected] (The Hacker News)
The U.S. Department of Justice (DoJ) on Tuesday said it reached a settlement with VoIP service provider XCast over allegations that it facilitated illegal telemarketing campaigns since at least January 2018, in contravention of the Telemarketing Sales Rule (TSR). In addition to prohibiting the company from violating the law, the stipulated order requires it to…
-
States and Congress Wrestle With Cybersecurity After Iran Attacks Small Town Water Utilities Associated Press
The hacking of a municipal water plant is prompting new warnings from U.S. security officials at a time when governments are wrestling with how to harden water utilities against cyberattacks. The post States and Congress Wrestle With Cybersecurity After Iran Attacks Small Town Water Utilities appeared first on SecurityWeek. Read More
-
Are Security Appliances fit for Purpose in a Decentralized Workplace? Etay Maor
Security appliances are amongst the most riskiest enterprise devices and are a often method for threat actors to infiltrate a business. The post Are Security Appliances fit for Purpose in a Decentralized Workplace? appeared first on SecurityWeek. Read More
-
Free Decryptor Released for Black Basta Ransomware Ionut Arghire
A vulnerability in Black Basta ransomware’s encryption algorithm allows researchers to create a free decryptor. The post Free Decryptor Released for Black Basta Ransomware appeared first on SecurityWeek. Read More
-
New DLL Search Order Hijacking Technique Targets WinSxS folder Ionut Arghire
Attackers can abuse a new DLL search order hijacking technique to execute code in applications within the WinSxS folder. The post New DLL Search Order Hijacking Technique Targets WinSxS folder appeared first on SecurityWeek. Read More