Category: Uncategorized
-
670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis Eduard Kovacs
CISA disclosed 670 ICS vulnerabilities in the first half of 2023, but roughly one-third have no patches or mitigations from the vendor. The post 670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis appeared first on SecurityWeek. Read More
-
New Version of Rilide Data Theft Malware Adapts to Chrome Extension Manifest V3 [email protected] (The Hacker News)
Cybersecurity researchers have discovered a new version of malware called Rilide that targets Chromium-based web browsers to steal sensitive data and steal cryptocurrency. “It exhibits a higher level of sophistication through modular design, code obfuscation, adoption to the Chrome Extension Manifest V3, and additional features such as the ability to exfiltrate stolen data to a Telegram channelRead More
-
Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber Attack [email protected] (The Hacker News)
Hundreds of Citrix NetScaler ADC and Gateway servers have been breached by malicious actors to deploy web shells, according to the Shadowserver Foundation. The non-profit said the attacks take advantage of CVE-2023-3519, a critical code injection vulnerability that could lead to unauthenticated remote code execution. The flaw, patched by Citrix last month, carries a CVSS score of 9.8.…
-
Dozens of RCE Vulnerabilities Impact Milesight Industrial Router Ionut Arghire
Cisco Talos researchers warn of dozens of critical- and high-severity vulnerabilities in the Milesight UR32L industrial router leading to code execution. The post Dozens of RCE Vulnerabilities Impact Milesight Industrial Router appeared first on SecurityWeek. Read More
-
Risk & Repeat: Microsoft takes heat over Storm-0588 attacks
Post ContentRead More
-
These Are the Top Five Cloud Security Risks, Qualys Says Kevin Townsend
Cloud security specialist Qualys has provided its view of the top five cloud security risks, drawing insights and data from its own platform and third parties. The post These Are the Top Five Cloud Security Risks, Qualys Says appeared first on SecurityWeek. Read More
-
Decommissioned Medical Infusion Pumps Expose Wi-Fi Configuration Data Ionut Arghire
Medical infusion pumps available via secondary market sources contain Wi-Fi configuration settings from the original organization. The post Decommissioned Medical Infusion Pumps Expose Wi-Fi Configuration Data appeared first on SecurityWeek. Read More
-
A Penetration Testing Buyer’s Guide for IT Security Teams [email protected] (The Hacker News)
The frequency and complexity of cyber threats are constantly evolving. At the same time, organizations are now collecting sensitive data that, if compromised, could result in severe financial and reputational damage. According to Cybersecurity Ventures, the cost of cybercrime is predicted to hit $8 trillion in 2023 and will grow to $10.5 trillion by 2025. There…
-
Microsoft Flags Growing Cybersecurity Concerns for Major Sporting Events [email protected] (The Hacker News)
Microsoft is warning of the threat malicious cyber actors pose to stadium operations, warning that the cyber risk surface of live sporting events is “rapidly expanding.” “Information on athletic performance, competitive advantage, and personal information is a lucrative target,” the company said in a Cyber Signals report shared with The Hacker News. “Sports teams, major…
-
Cybersecurity M&A Roundup: 42 Deals Announced in July 2023 Eduard Kovacs
Forty-two cybersecurity-related merger and acquisition (M&A) deals were announced in July 2023. The post Cybersecurity M&A Roundup: 42 Deals Announced in July 2023 appeared first on SecurityWeek. Read More