Year: 2023

Daily Vulnerability Trends: Sat Oct 21 2023

October 21, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-20198Cisco is aware of active exploitation of a previously unknown vulnerability in...

Fake Corsair job offers on LinkedIn push DarkGate malware

October 21, 2023

A threat actor is using fake LinkedIn posts and direct messages about a Facebook Ads specialist position at hardware maker Corsair...

Kwik Trip finally confirms cyberattack was behind ongoing outage

October 21, 2023

Two weeks into an ongoing IT outage, Kwik Trip finally confirmed that it's investigating a cyberattack impacting the convenience store...

Cisco discloses new IOS XE zero-day exploited to deploy malware implant

October 21, 2023

Cisco disclosed a new high-severity zero-day (CVE-2023-20273) today, actively exploited to deploy malicious implants on IOS XE devices compromised using...

Okta says its support system was breached using stolen credentials

October 21, 2023

Update October 20, 16:15 EDT: Added BeyondTrust incident details. Update October 20, 18:59 EDT: Added Cloudflare incident details. Okta says attackers accessed...

Critical RCE flaws found in SolarWinds access audit solution

October 21, 2023

Security researchers found three critical remote code execution vulnerabilities in the SolarWinds Access Rights Manager (ARM) product that remote attackers could...

Ragnar Locker ransomware developer arrested in France

October 21, 2023

Law enforcement agencies arrested a malware developer linked with the Ragnar Locker ransomware gang and seized the group's dark web...

US Charge Man with Running Stolen Credentials Marketplace

October 21, 2023

A man has been extradited from the UK to the US for allegedly operating a website that sold access to...

Hacker Group GhostSec Unveils New Generation Ransomware Implant

October 21, 2023

Dark web watchdog SOCRadar has revealed that GhostSec, a self-described "vigilante" group that has recently turned to financially motivated cyber...

DarkGate Malware Campaigns Linked to Vietnam-Based Cybercriminals

October 21, 2023

Vietnam-based cybercriminals are believed to be behind to attacks using DarkGate malware, which have targeted organizations in the UK, US...

QR Codes Used in 22% of Phishing Attacks

October 21, 2023

The Hoxhunt Challenge has unveiled alarming trends in employee susceptibility to phishing attacks, emphasizing the critical role of engagement in...

Valve Enhances Steam Security With SMS Verification

October 21, 2023

Valve is bolstering the security of its Steamworks platform by introducing SMS verification for developers, aiming to prevent future incidents...

ENISA Warns of Rising AI Manipulation Ahead of Upcoming European Elections

October 21, 2023

The use of AI chatbots and AI-enabled manipulation of information by malicious actors is a key threat ahead of the...

Sphero – 832,255 breached accounts

October 21, 2023

HIBP In September 2023, over 1M rows of data from the educational robots company Sphero was posted to a popular...