♟️ Patch Tuesday, May 2024 Edition ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Microsoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two "zeroday" vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches available for macOS and Adobe users, and for the Chrome Web browser, which just patched its own zeroday flaw.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
Patch Tuesday, May 2024 Edition
Microsoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two "zero-day" vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches…
🚀 ESET APT Activity Report Q4 2023–Q1 2024 🚀
📖 Read more.
🔗 Via "ESET - WeLiveSecurity"
----------
👁️ Seen on @cibsecurity
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2023 and Q1 2024.📖 Read more.
🔗 Via "ESET - WeLiveSecurity"
----------
👁️ Seen on @cibsecurity
Welivesecurity
ESET APT Activity Report Q4 2023–Q1 2024
This report summarizes notable activities of selected advanced persistent threat (APT) groups that were documented by ESET researchers from October 2023 until the end of March 2024.
🚀 Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain 🚀
📖 Read more.
🔗 Via "ESET - WeLiveSecurity"
----------
👁️ Seen on @cibsecurity
One of the most advanced serverside malware campaigns is still growing, with hundreds of thousands of compromised servers, and it has diversified to include credit card and cryptocurrency theft.📖 Read more.
🔗 Via "ESET - WeLiveSecurity"
----------
👁️ Seen on @cibsecurity
Welivesecurity
Ebury is alive but unseen: 400k Linux servers compromised for cryptotheft and financial gain
One of the most advanced server-side malware campaigns is still growing, with hundreds of thousands of compromised servers, and it has diversified to include credit card and cryptocurrency theft.
🖋️ Dutch Court Sentences Tornado Cash Co-Founder to 5 Years in Prison for Money Laundering 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A Dutch court on Tuesday sentenced one of the cofounders of the nowsanctioned Tornado Cash cryptocurrency mixer service to 5 years and 4 months in prison. While the name of the defendant was redacted in the verdict, it's known that Alexey Pertsev, a 31yearold Russian national, has been awaiting trial in the Netherlands on money laundering charges.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
👍1
🖋️ Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Microsoft has addressed a total of 61 new security flaws in its software as part of its Patch Tuesday updates for May 2024, including two zerodays which have been actively exploited in the wild. Of the 61 flaws, one is rated Critical, 59 are rated Important, and one is rated Moderate in severity. This is in addition to 30 vulnerabilities.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 A Third of CISOs Have Been Dismissed “Out of Hand” By the Board 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Trend Micro research claims CISOs are often ignored or dismissed as nagging by their board.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
A Third of CISOs Have Been Dismissed “Out of Hand” by the Board
Trend Micro research claims CISOs are often ignored or dismissed as “nagging” by their board
📔 Microsoft Fixes Three Zero-Days in May Patch Tuesday 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Microsoft has released patches for three zeroday vulnerabilities including two actively exploited in the wild.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Microsoft Fixes Three Zero-Days in May Patch Tuesday
Microsoft has released patches for three zero-day vulnerabilities including two actively exploited in the wild
👽 Massive Data Breach Hits Helsinki Education Sector 👽
📖 Read more.
🔗 Via "BE3SEC"
----------
👁️ Seen on @cibsecurity
A significant data breach has rocked the City of Helsinki, with its education and training departments falling victim to a cyberattack of unprecedented scale for the municipal sector. While the perpetrators and their motives remain unknown, the breach has exposed sensitive personal data of tens of thousands of individuals, including.📖 Read more.
🔗 Via "BE3SEC"
----------
👁️ Seen on @cibsecurity
Be4Sec
Massive Data Breach Hits Helsinki Education Sector
A significant data breach has rocked the City of Helsinki, with its education and training departments falling victim to a cyberattack of unprecedented scale for the municipal sector. While the per…
❤1
📔 Current Market Forces Disincentivizing Cybersecurity, Says NCSC CTO 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
NCSC CTO argues current market rewards prioritize cost over security, hindering the development of secure technology.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Current Market Forces Disincentivizing Cybersecurity, Says NCSC CTO
NCSC CTO argues current market rewards prioritize cost over security, hindering the development of secure technology
📢 What you need to know about the new NCSC ransomware guidance 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The new ransomware guidance from the NCSC has been developed in collaboration with major insurance bodies, and warns against paying up in the event of an attack.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
What you need to know about the new NCSC ransomware guidance
The new ransomware guidance from the NCSC has been developed in collaboration with major insurance bodies, and warns against paying up in the event of an attack
🦿 How to Set Up & Use a VPN on Android (A Step-by-Step Guide) 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Trying to configure or set up a VPN on your Android? Learn how to get started with our stepbystep guide.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
How to Set up & Use a VPN on Android
Trying to configure or set up a VPN on your Android? Learn how to get started with our step-by-step guide.
🖋️ Ebury Botnet Malware Compromises 400,000 Linux Servers Over Past 14 Years 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A malware botnet called Ebury is estimated to have compromised 400,000 Linux servers since 2009, out of which more than 100,000 were still compromised as of late 2023. The findings come from Slovak cybersecurity firm ESET, which characterized it as one of the most advanced serverside malware campaigns for financial gain. "Ebury actors have been pursuing monetization activities ...,.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ It's Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
While cloud adoption has been top of mind for many IT professionals for nearly a decade, its only in recent months, with industry changes and announcements from key players, that many recognize the time to make the move is now. It may feel like a daunting task, but tools exist to help you move your virtual machines VMs to a public cloud provider like Microsoft Azure.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Santander Customer Data Compromised Following Third-Party Breach 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Santander has warned that customer and employee data has been breached following unauthorized access to a database held by a thirdparty provider.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Santander Customer Data Compromised Following Third-Party Breach
Santander has warned that customer and employee data has been breached following unauthorized access to a database held by a third-party provider
📢 Security leaders report pressure from boards to downplay cyber risks 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Senior cyber security professionals said they are feeling pressure from boards to downplay the severity of cyber risks, but how can CISOs respond?.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Security leaders report pressure from boards to downplay cyber risks
Senior cyber security professionals said they are feeling pressure from boards to downplay the severity of cyber risks, but how can CISOs respond?
📢 Westcon-Comstor and Vector AI expand European distribution agreement 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The specialist distributor is looking to drive adoption of Vectras AIdriven security platform in the UK, Ireland, and Nordic countries.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ChannelPro
Westcon-Comstor and Vectra AI expand European distribution agreement
The specialist distributor is looking to drive adoption of Vectra’s AI-driven security platform in the UK, Ireland, and Nordic countries
🖋️ (Cyber) Risk = Probability of Occurrence x Damage 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Heres How to Enhance Your Cyber Resilience with CVSS In late 2023, the Common Vulnerability Scoring System CVSS v4.0 was unveiled, succeeding the eightyearold CVSS v3.0, with the aim to enhance vulnerability assessment for both industry and the public. This latest version introduces additional metrics like safety and automation to address criticism of lacking granularity.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Google Expands Synthetic Content Watermarking Tool to AI-Generated Text 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Google DeepMinds SynthID can now be used to watermark AIgenerated images, audio, text and video.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Google Expands Synthetic Content Watermarking Tool to AI-Generated Text
Google DeepMind’s SynthID can now be used to watermark AI-generated images, audio, text and video
🧠 New cybersecurity sheets from CISA and NSA: An overview 🧠
📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
The Cybersecurity and Infrastructure Security Agency CISA and National Security Agency NSA have recently released new CSI Cybersecurity Information sheets aimed at providing information and guidelines to organizations on how to effectively secure their cloud environments. This new release includes a total of five CSI sheets, covering various aspects of cloud security such as threat The post New cybersecurity sheets from CISA and NSA An overview appeared first on Security Intelligence.📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
Security Intelligence
New cybersecurity sheets from CISA and NSA: An overview
New CISA and NSA cybersecurity information sheets have released more guidance to help organizations secure their critical cloud environments.
🧨 How To Spot A Fake Facebook Account 🧨
📖 Read more.
🔗 Via "McAfee"
----------
👁️ Seen on @cibsecurity
How do you manage your Facebook friends? Do you keep your list really tight and only include active pals? Or... The post How To Spot A Fake Facebook Account appeared first on McAfee Blog.📖 Read more.
🔗 Via "McAfee"
----------
👁️ Seen on @cibsecurity
McAfee Blog
How To Spot A Fake Facebook Account | McAfee Blog
How do you manage your Facebook friends? Do you keep your list really tight and only include ‘active’ pals? Or do you accept everyone you’ve ever laid
🖋️ Turla Group Deploys LunarWeb and LunarMail Backdoors in Diplomatic Missions 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
An unnamed European Ministry of Foreign Affairs MFA and its three diplomatic missions in the Middle East were targeted by two previously undocumented backdoors tracked as LunarWeb and LunarMail. ESET, which identified the activity, attributed it with medium confidence to the Russiaaligned cyberespionage group Turla aka Iron Hunter, Pensive Ursa, Secret Blizzard, Snake, Uroburos, and Venomous.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity