Category: Uncategorized
-
Intel Sued Over ‘Downfall’ CPU Vulnerability Eduard Kovacs
A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall. The post Intel Sued Over ‘Downfall’ CPU Vulnerability appeared first on SecurityWeek. Read More
-
France, UK Seek Greater Regulation of Commercial Spyware AFP
France and the UK are calling for greater regulation of commercial surveillance software in the wake of recent Pegasus and Predator spyware scandals. The post France, UK Seek Greater Regulation of Commercial Spyware appeared first on SecurityWeek. Read More
-
Russian Hackers Sandworm Cause Power Outage in Ukraine Amidst Missile Strikes [email protected] (The Hacker News)
The notorious Russian hackers known as Sandworm targeted an electrical substation in Ukraine last year, causing a brief power outage in October 2022. The findings come from Google’s Mandiant, which described the hack as a “multi-event cyber attack” leveraging a novel technique for impacting industrial control systems (ICS). “The actor first used OT-level living-off-the-land (LotL) techniques toRead…
-
US Government Issues Guidance on SBOM Consumption Ionut Arghire
CISA, NSA, and ODNI issue new guidance on managing open source software and SBOMs to maintain awareness on software security. The post US Government Issues Guidance on SBOM Consumption appeared first on SecurityWeek. Read More
-
1.3 Million Maine Residents Impacted by MOVEit Hack Ionut Arghire
The State of Maine says the personal information of 1.3 million individuals was compromised in the MOVEit attack. The post 1.3 Million Maine Residents Impacted by MOVEit Hack appeared first on SecurityWeek. Read More
-
Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say Associated Press
A ransomware attack on China’s biggest bank, the Industrial and Commercial Bank of China Financial Services, disrupts Treasury market trades. The post Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say appeared first on SecurityWeek. Read More
-
The New 80/20 Rule for SecOps: Customize Where it Matters, Automate the Rest [email protected] (The Hacker News)
There is a seemingly never-ending quest to find the right security tools that offer the right capabilities for your organization. SOC teams tend to spend about a third of their day on events that don’t pose any threat to their organization, and this has accelerated the adoption of automated solutions to take the place of (or augment)…
-
Alert: ‘Effluence’ Backdoor Persists Despite Patching Atlassian Confluence Servers [email protected] (The Hacker News)
Cybersecurity researchers have discovered a stealthy backdoor named Effluence that’s deployed following the successful exploitation of a recently disclosed security flaw in Atlassian Confluence Data Center and Server. “The malware acts as a persistent backdoor and is not remediated by applying patches to Confluence,” Aon’s Stroz Friedberg Incident Response Services said in an analysis publishedRead More
-
Iran-Linked Imperial Kitten Cyber Group Targeting Middle East’s Tech Sectors [email protected] (The Hacker News)
A group with links to Iran targeted transportation, logistics, and technology sectors in the Middle East, including Israel, in October 2023 amid a surge in Iranian cyber activity since the onset of the Israel-Hamas war. The attacks have been attributed by CrowdStrike to a threat actor it tracks under the name Imperial Kitten, and which is…
-
Stealthy Kamran Spyware Targeting Urdu-speaking Users in Gilgit-Baltistan [email protected] (The Hacker News)
Urdu-speaking readers of a regional news website that caters to the Gilgit-Baltistan region have likely emerged as a target of a watering hole attack designed to deliver a previously undocumented Android spyware dubbed Kamran. The campaign, ESET has discovered, leverages Hunza News (urdu.hunzanews[.]net), which, when opened on a mobile device, prompts visitors of the Urdu version to…