βΌ CVE-2022-36521 βΌ
π Read
via "National Vulnerability Database".
Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts.π Read
via "National Vulnerability Database".
β Firefox 104 is out β no critical bugs, but update anyway β
π Read
via "Naked Security".
Two trust-spoofing bugs were the main culprits this month - but neither one was a zero-day.π Read
via "Naked Security".
Sophos News
Naked Security β Sophos News
π΄ 'Sliver' Emerges as Cobalt Strike Alternative for Malicious C2 π΄
π Read
via "Dark Reading".
Microsoft and others say they have observed nation-state actors, ransomware purveyors, and assorted cybercriminals pivoting to an open source attack-emulation tool in recent campaigns.π Read
via "Dark Reading".
Dark Reading
'Sliver' Emerges as Cobalt Strike Alternative for Malicious C2
Microsoft and others say they have observed nation-state actors, ransomware purveyors, and assorted cybercriminals pivoting to an open source attack-emulation tool in recent campaigns.
β Ransomware Attacks are on the Rise β
π Read
via "Threat Post".
Lockbit is by far this summerβs most prolific ransomware group, trailed by two offshoots of the Conti group.π Read
via "Threat Post".
Threat Post
Ransomware Attacks are on the Rise
Lockbit is by far this summerβs most prolific ransomware group, trailed by two offshoots of the Conti group.
π Friday Five 8/26 π
π Read
via "".
Read about why Twitter is coming under fire, how a cybersecurity organization may have gone on the offensive, possible big changes coming for software vendors, and much more in this weekβs Friday Five!
π Read
via "".
π’ Snapchat settles for $35 million in Illinois biometrics lawsuit π’
π Read
via "ITPro".
The social media giant had been accused of improperly collecting, storing facial geometry in violation of state legislationπ Read
via "ITPro".
IT PRO
Snapchat settles for $35 million in Illinois biometrics lawsuit | IT PRO
The social media giant had been accused of improperly collecting, storing facial geometry in violation of state legislation
π’ SolarWinds hackers strike again with a new βMagicWebβ authentication exploit π’
π Read
via "ITPro".
Microsoft warns MagicWeb can abuse admin credentials to hijack AD FS enterprise identity systemπ Read
via "ITPro".
ITPro
SolarWinds hackers strike again with a new βMagicWebβ authentication exploit
Microsoft warns MagicWeb can abuse admin credentials to hijack AD FS enterprise identity system
π’ PyPI packages succumb to Mailchimp phishing scam π’
π Read
via "ITPro".
The news comes after "fairly convincing" phishing emails from a Mailchimp account swindled developers into revealing credentialsπ Read
via "ITPro".
IT PRO
PyPI packages succumb to Mailchimp phishing scam | IT PRO
The news comes after "fairly convincing" phishing emails from a Mailchimp account swindled developers into revealing credentials
π’ French telco giant Altice reportedly hit by Hive ransomware attack π’
π Read
via "ITPro".
Dark web listings indicate that the French multinational was attacked in early August, but the company has made no announcementπ Read
via "ITPro".
IT PRO
French telco giant Altice reportedly hit by Hive ransomware attack | IT PRO
Dark web listings indicate that the French multinational was attacked in early August, but the company has made no announcement
π’ Companies House reveals overhaul to WebFiling accounts system π’
π Read
via "ITPro".
Businesses will be able to control those with filing permissions more easily, as the new accounts mark a new streamlining of the government's digital filing requirementsπ Read
via "ITPro".
IT PRO
Companies House reveals overhaul to WebFiling accounts system | IT PRO
Businesses will be able to control those with filing permissions more easily, as the new accounts mark a new streamlining of the government's digital filing requirements
π’ Plex confirms passwords, emails stolen in βlimitedβ data breach π’
π Read
via "ITPro".
The video streaming giant is requiring all users to reset their passwords in case the stolen hashed passwords can be crackedπ Read
via "ITPro".
IT PRO
Plex confirms passwords, emails stolen in βlimitedβ data breach | IT PRO
The video streaming giant is requiring all users to reset their passwords in case the stolen hashed passwords can be cracked
π’ Avast launches Ransomware Shield for small businesses π’
π Read
via "ITPro".
The new cyber security solution is available as part of Avast Essential, Premium, and Ultimate Business Security packagesπ Read
via "ITPro".
IT PRO
Avast launches Ransomware Shield for small businesses | IT PRO
The new cyber security solution is available as part of Avast Essential, Premium, and Ultimate Business Security packages
π’ What's the difference between antimalware and antivirus? π’
π Read
via "ITPro".
We help you navigate the worlds of antimalware and antivirusπ Read
via "ITPro".
ITPro
What's the difference between antimalware and antivirus?
We help you navigate the worlds of antimalware and antivirus
π’ LockBit hacking group to be 'more aggressive' after falling victim to large-scale DDoS attack π’
π Read
via "ITPro".
The ransomware group is currently embroiled in a battle after it leaked data belonging to cyber security company Entrustπ Read
via "ITPro".
IT PRO
LockBit hacking group to be 'more aggressive' after falling victim to large-scale DDoS attack | IT PRO
The ransomware group is currently embroiled in a battle after it leaked data belonging to cyber security company Entrust
π’ Oracle's massive advertising database operates without user consent, lawsuit claims π’
π Read
via "ITPro".
Rights organisers have accused Oracle of collecting an undue level of sensitive data to identify consumers onlineπ Read
via "ITPro".
IT PRO
Oracle's massive advertising database operates without user consent, lawsuit claims | IT PRO
Rights organisers have accused Oracle of collecting an undue level of sensitive data to identify consumers online
π’ Microsoft 365 business users targeted with new DocuSign phishing scam π’
π Read
via "ITPro".
Threat actors are using fake login forms to trick users into changing their payment detailsπ Read
via "ITPro".
ITPro
Microsoft 365 business users targeted with new DocuSign phishing scam
Threat actors are using fake login forms to trick users into changing their payment details
π’ India forced Twitter to hire a government agent, whistleblower claims π’
π Read
via "ITPro".
Former employee Peiter Zatko says the social media platform gave the agent direct unsupervised access to the companyβs systems and user dataπ Read
via "ITPro".
IT PRO
India forced Twitter to hire a government agent, whistleblower claims | IT PRO
Former employee Peiter Zatko says the social media platform gave the agent direct unsupervised access to the companyβs systems and user data
π’ CMS Distribution partners with GuardYoo for new Attack Surface Management offering π’
π Read
via "ITPro".
The hosted service has been designed to strengthen resilience against vulnerabilities without sacrificing growth, company saysπ Read
via "ITPro".
IT PRO
CMS Distribution partners with GuardYoo for new Attack Surface Management offering | IT PRO
The hosted service has been designed to strengthen resilience against vulnerabilities without sacrificing growth, company says
π’ Digital transformation giant Orion Innovation hit by LockBit ransomware, hacker group claims π’
π Read
via "ITPro".
The company has a star-studded client list that includes some of the biggest sports organisations in the world and an assortment of tech behemothsπ Read
via "ITPro".
IT PRO
Digital transformation giant Orion Innovation hit by LockBit ransomware, hacker group claims | IT PRO
The company has a star-studded client list that includes some of the biggest sports organisations in the world and an assortment of tech behemoths
π’ LastPass breach: CEO says 'no evidence' of customer data being stolen π’
π Read
via "ITPro".
The company said the incident was confined to a single developer account and its associated environmentπ Read
via "ITPro".
IT PRO
LastPass breach: CEO says 'no evidence' of customer data being stolen | IT PRO
The company said the incident was confined to a single developer account and its associated environment
π’ The pros and cons of facial recognition technology π’
π Read
via "ITPro".
Is it really worth risking user privacy in the name of efficiency and security?π Read
via "ITPro".
ITPro
The pros and cons of facial recognition technology
There are plenty of pros and cons of facial recognition technology, but is it really worth risking user privacy in the name of efficiency and security?
π1