Category: Uncategorized
-
Pro-Russian Hackers Exploiting Recent WinRAR Vulnerability in New Campaign [email protected] (The Hacker News)
Pro-Russian hacking groups have exploited a recently disclosed security vulnerability in the WinRAR archiving utility as part of a phishing campaign designed to harvest credentials from compromised systems. “The attack involves the use of malicious archive files that exploit the recently discovered vulnerability affecting the WinRAR compression software versions prior to 6.23 and traced asRead…
-
Google Authenticator synchronization raises MFA concerns
Post ContentRead More
-
Academics Devise Cyber Intrusion Detection System for Unmanned Robots Ionut Arghire
Australian AI researchers teach an unmanned military robot’s operating system to identify MitM cyberattacks. The post Academics Devise Cyber Intrusion Detection System for Unmanned Robots appeared first on SecurityWeek. Read More
-
SpyNote: Beware of This Android Trojan that Records Audio and Phone Calls [email protected] (The Hacker News)
The Android banking trojan known as SpyNote has been dissected to reveal its diverse information-gathering features. Typically spread via SMS phishing campaigns, attack chains involving the spyware trick potential victims into installing the app by clicking on the embedded link, according to F-Secure. Besides requesting invasive permissions to access call logs, camera, SMS messages, and externalRead More
-
Microsoft Improving Windows Authentication, Disabling NTLM Ionut Arghire
Microsoft is adding new features to the Kerberos protocol, to eliminate the use of NTLM for Windows authentication. The post Microsoft Improving Windows Authentication, Disabling NTLM appeared first on SecurityWeek. Read More
-
The Fast Evolution of SaaS Security from 2020 to 2024 (Told Through Video) [email protected] (The Hacker News)
SaaS Security’s roots are in configuration management. An astounding 35% of all security breaches begin with security settings that were misconfigured. In the past 3 years, the initial access vectors to SaaS data have widened beyond misconfiguration management. “SaaS Security on Tap” is a new video series that takes place in Eliana V’s bar making…
-
Equifax Fined $13.5 Million Over 2017 Data Breach Ionut Arghire
UK’s financial watchdog FCA imposes a £11 million (approximately $13.5 million) fine to Equifax over the 2017 data breach. The post Equifax Fined $13.5 Million Over 2017 Data Breach appeared first on SecurityWeek. Read More
-
Milesight Industrial Router Vulnerability Possibly Exploited in Attacks Eduard Kovacs
A vulnerability affecting Milesight industrial routers, tracked as CVE-2023-4326, may have been exploited in attacks. The post Milesight Industrial Router Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek. Read More
-
Spyware Caught Masquerading as Israeli Rocket Alert Applications Ionut Arghire
A threat actor targets Israelis with spyware masquerading as an Android application for receiving rocket alerts. The post Spyware Caught Masquerading as Israeli Rocket Alert Applications appeared first on SecurityWeek. Read More
-
EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits Eduard Kovacs
Environmental Protection Agency (EPA) withdraws recent water sector cybersecurity rules due to lawsuits by states and water associations. The post EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits appeared first on SecurityWeek. Read More