Threat actors are offering access to corporate networks via unauthorized Fortinet VPN access
Cyble observed Initial Access Brokers (IABs) offering access to enterprise networks compromised via a critical flaw in Fortinet products. Researchers at...
News
Data Exfiltration Prevention with SASE
Data exposure from SaaS and cloud applications is an increasing risk factor facing businesses today. Discover how SASE capabilities can...
Industry 4.0: CNC Machine Security Risks Part 1
This three-part blog series explores the risks associated with CNC machines If you like the site, please consider joining the...
Cyber Crime: INTERPOL Uses Trend Threat Intelligence
INTERPOL recently conducted operation African Surge to take down malicious infrastructure across the African continent and requested the help of...
US-CERT Bulletin (SB22-332):Vulnerability Summary for the Week of November 21, 2022
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...
CISA adds Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities Catalog
CISA added a critical flaw impacting Oracle Fusion Middleware, tracked as CVE-2021-35587, to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity...
Tips for Gamifying Your Cybersecurity Awareness Training Program
In today’s technological world, educating people about cybersecurity awareness is an absolute necessity. According to one report, 82% of data...
Irish data protection commission fines Meta over 2021 data-scraping leak
Irish data protection commission (DPC) fined Meta for not protecting Facebook’s users’ data from scraping. Meta has been fined €265 million...
Privacy predictions 2023
Our last edition of privacy predictions focused on a few important trends where business and government interests intersect, with regulators...
Consumer cyberthreats: predictions for 2023
The consumer threat landscape constantly changes. Although the main types of threats (phishing, scams, malware, etc.) remain the same, lures...
How a Unified Security Platform Protects the Cloud
Massive growth in cloud use has increased the enterprise attack surface. Addressing the risks with specialized point solutions is unwieldy,...
A flaw in some Acer laptops can be used to bypass security features
ESET announced the discovery of a vulnerability impacting Acer laptops that can allow an attacker to deactivate UEFI Secure Boot....
Experts found a vulnerability in AWS AppSync
Amazon Web Services (AWS) fixed a cross-tenant vulnerability that could have allowed attackers to gain unauthorized access to resources. Amazon...
RansomBoggs Ransomware hit several Ukrainian entities, experts attribute it to Russia
Several Ukrainian organizations were hit by Russia-based RansomBoggs Ransomware in the last week, ESET reports. Researchers from ESET observed multiple...
Security Affairs newsletter Round 395
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...
US FCC bans the import of electronic equipment from Chinese firms
The U.S. Federal Communications Commission announced it will completely ban the import of electronic equipment from Huawei, ZTE, Hytera, Hikvision,...
Data from 5.4M Twitter users obtained from multiple threat actors and combined with data from other breaches
The massive data breach suffered by Twitter that exposed emails and phone numbers of its customers may have impacted more...
Who tracked internet users in 2021–2022
Every time you go online, someone is watching over you. The services you use, the websites you visit, the apps...
Devices from Dell, HP, and Lenovo used outdated OpenSSL versions
Researchers discovered that devices from Dell, HP, and Lenovo are still using outdated versions of the OpenSSL cryptographic library. Binarly researchers discovered...
Google fixed the eighth actively exploited #Chrome #zeroday this year
Google on Thursday released security updates to address a new zero-day vulnerability, tracked as CVE-2022-4135, impacting the Chrome web browser....
Experts investigate WhatsApp data leak: 500M user records for sale
Cybernews investigated a data sample available for sale containing up-to-date mobile phone numbers of nearly 500 million WhatsApp users. Original...
An international police operation dismantled the spoofing service iSpoof
An international law enforcement operation has dismantled an online phone number spoofing service called iSpoof. An international law enforcement operation that...
UK urges to disconnect Chinese security cameras in government buildings
The British government banned the installation of Chinese-linked security cameras at sensitive facilities due to security risks. Reuters reports that...
RansomExx Ransomware upgrades to Rust programming language
RansomExx ransomware is the last ransomware in order of time to have a version totally written in the Rust programming...
