Category: Uncategorized
-
New BLUFFS Bluetooth Attack Methods Can Have Large-Scale Impact: Researcher Ionut Arghire
An academic researcher demonstrates BLUFFS, six novel attacks targeting Bluetooth sessions’ forward and future secrecy. The post New BLUFFS Bluetooth Attack Methods Can Have Large-Scale Impact: Researcher appeared first on SecurityWeek. Read More
-
Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S. [email protected] (The Hacker News)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) revealed that it’s responding to a cyber attack that involved the active exploitation of Unitronics programmable logic controllers (PLCs) to target the Municipal Water Authority of Aliquippa in western Pennsylvania. The attack has been attributed to an Iranian-backed hacktivist collective known as Cyber Av3ngers. “Cyber threatRead More
-
CISA Warns of Unitronics PLC Exploitation Following Water Utility Hack Eduard Kovacs
After hackers compromised ICS at a US water utility, CISA issued a warning over the exploitation of the targeted Unitronics PLC. The post CISA Warns of Unitronics PLC Exploitation Following Water Utility Hack appeared first on SecurityWeek. Read More
-
Google Patches Seventh Chrome Zero-Day of 2023 Ionut Arghire
The latest Chrome security update addresses the seventh exploited zero-day vulnerability documented in the browser in 2023. The post Google Patches Seventh Chrome Zero-Day of 2023 appeared first on SecurityWeek. Read More
-
Five Cybersecurity Predictions for 2024 Torsten George
Cybersecurity predictions for 2024 to help security professionals in prioritizing efforts to navigate the ever-changing threat landscape. The post Five Cybersecurity Predictions for 2024 appeared first on SecurityWeek. Read More
-
Google Will Start Deleting ‘Inactive’ Accounts in December. Here’s What You Need to Know Associated Press
The easiest way to keep your Google account active (and thus prevent it from being deleted) is to sign in at least once every two years. The post Google Will Start Deleting ‘Inactive’ Accounts in December. Here’s What You Need to Know appeared first on SecurityWeek. Read More
-
200+ Malicious Apps on Iranian Android Store Installed by Millions of Banking Users [email protected] (The Hacker News)
An Android malware campaign targeting Iranian banks has expanded its capabilities and incorporated additional evasion tactics to fly under the radar. That’s according to a new report from Zimperium, which discovered more than 200 malicious apps associated with the malicious operation, with the threat actor also observed carrying out phishing attacks against the targeted financial…
-
Discover Why Proactive Web Security Outsmarts Traditional Antivirus Solutions [email protected] (The Hacker News)
In a rapidly evolving digital landscape, it’s crucial to reevaluate how we secure web environments. Traditional antivirus-approach solutions have their merits, but they’re reactive. A new report delves into the reasons for embracing proactive web security solutions, ensuring you stay ahead of emerging threats. To learn more, download the full report here. The New Paradigm If…
-
Okta Discloses Broader Impact Linked to October 2023 Support System Breach [email protected] (The Hacker News)
Identity services provider Okta has disclosed that it detected “additional threat actor activity” in connection with the October 2023 breach of its support case management system. “The threat actor downloaded the names and email addresses of all Okta customer support system users,” the company said in a statement shared with The Hacker News. “All Okta Workforce Identity…
-
DJVU Ransomware’s Latest Variant ‘Xaro’ Disguised as Cracked Software [email protected] (The Hacker News)
A variant of a ransomware strain known as DJVU has been observed to be distributed in the form of cracked software. “While this attack pattern is not new, incidents involving a DJVU variant that appends the .xaro extension to affected files and demanding ransom for a decryptor have been observed infecting systems alongside a host…