@cyber-security ..
zdroje:
#bleepingcomputer.com
#blog.google-TAG
#csirt.cz
#cyberscoop.com
#darkreading.com
#googleprojectzero.blogspot.com
#kratkespravy.sk
#krebsonsecurity.com
#linuxsecurity.com
#nakedsecurity.sophos.com
#nukib.cz
#scmagazine.com
#security.googleblog.com
#securityaffairs.co
#securityweek.com
#thehackernews.com
#therecord.media
#threatpost.com
#tripwire.com-state-of-security
bleepingcomputer.com
- The Week in Ransomware - April 19th 2024 - Attacks Ramp Up
- CrushFTP warns users to patch exploited zero-day “immediately”
- HelloKitty ransomware rebrands, releases CD Projekt and Cisco data
- MITRE says state hackers breached its network via Ivanti zero-days
- United Nations agency investigates ransomware attack, data theft
- 22,500 Palo Alto firewalls "possibly vulnerable" to ongoing attacks
- Fake cheat lures gamers into spreading infostealer malware
- Frontier Communications shuts down systems after cyberattack
- 840-bed hospital in France postpones procedures after cyberattack
- FBI: Akira ransomware raked in $42 million from 250+ victims
- Google ad impersonates Whales Market to push wallet drainer malware
- Microsoft Office LTSC 2024 preview available for Windows, Mac
blog.google-TAG
- A review of zero-day in-the-wild exploits in 2023
- TAG Bulletin: Q1 2024
- Tool of First Resort: Israel-Hamas War in Cyber
- Buying Spying: How the commercial surveillance industry works and what can be done about it
- TAG Bulletin: Q4 2023
- Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware
- Zimbra 0-day used to target international government organizations
- Government-backed actors exploiting WinRAR vulnerability
- TAG Bulletin: Q3 2023
- 0-days exploited by commercial surveillance vendor in Egypt
- Active North Korean campaign targeting security researchers
- TAG Bulletin: Q2 2023
csirt.cz
- Postřehy z bezpečnosti: optimalizací do koše
- Postřehy z bezpečnosti: přesměrujte svůj deepfake
- Postřehy z bezpečnosti: aktivně zneužívané zranitelnosti Apache
- Postřehy z bezpečnosti: výrobce vlaků blokoval opravy umělými chybami
- Postřehy z bezpečnosti: reklamy Google opět zneužity k šíření malware
- Postřehy z bezpečnosti: stáhni soubor a něco si přej
- Priviledge escalation zranitelnost v ld.so - glibc 2.35, glibc 2.34
- Postřehy z bezpečnosti: phishingová kampaň přes Facebook Messenger
- V Junos OS byla objevena chyba umožňující provést vzdáleně DoS útok
- Postřehy z bezpečnosti: rukověť školního administrátora
cyberscoop.com
- FBI director warns of China’s preparations for disruptive infrastructure attacks
- Treasury official: Small financial institutions have ‘growth to do’ in using AI against threats
- ‘Large volume’ of data stolen from UN agency after ransomware attack
- House passes bill to limit personal data purchases by law enforcement, intelligence agencies
- Mandiant: Notorious Russian hacking unit linked to breach of Texas water facility
- After a sleepy primary season, Russia enters 2024 U.S. election fray
- With a mysterious surveillance target identified, calls for Congress to change course
- Decade-old malware haunts Ukrainian police
- Ex-White House cyber official says ransomware payment ban is a ways off
- Congress rails against UnitedHealth Group after ransomware attack
darkreading.com
- CISO Corner: Breaking Staff Burnout, GPT-4 Exploits, Rebalancing NIST
- Miggo Launches Application Detection and Response (ADR) Solution
- FBI Director Wray Issues Dire Warning on China's Cybersecurity Threat
- UNDP, City of Copenhagen Targeted in Data-Extortion Cyberattack
- Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam
- Rethinking How You Work With Detection and Response Metrics
- AI Lowers Barrier for Cyber-Adversary Manipulation in 2024 Election
- 'MagicDot' Windows Weakness Allows Unprivileged Rootkit Activity
- Cyberattack Takes Frontier Communications Offline
- Evil XDR: Researcher Turns Palo Alto Software Into Perfect Malware
- Cisco's Complex Road to Deliver on Its Hypershield Promise
- Cisco Warns of Massive Surge in Password-Spraying Attacks on VPNs
googleprojectzero.blogspot.com
- The Windows Registry Adventure #2: A brief history of the feature
- The Windows Registry Adventure #1: Introduction and research results
- First handset with MTE on the market
- An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit
- Analyzing a Modern In-the-wild Android Exploit
- MTE As Implemented, Part 1: Implementation Testing
- MTE As Implemented, Part 3: The Kernel
- MTE As Implemented, Part 2: Mitigation Case Studies
- Summary: MTE As Implemented
- Release of a Technical Report into Intel Trust Domain Extensions
- Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems
- Exploiting null-dereferences in the Linux kernel
kratkespravy.sk
- Zo sveta IT bezpečnosti, 3/2024
- Zo sveta IT bezpečnosti, 2/2024
- Zo sveta IT bezpečnosti, 1/2024
- Zo sveta IT bezpečnosti, 12/2023
- Zo sveta IT bezpečnosti, 11/2023
- Zo sveta IT bezpečnosti, 10/2023
- Zo sveta IT bezpečnosti, 9/2023
- Zo sveta IT bezpečnosti, 8/2023
- Zo sveta IT bezpečnosti, 7/2023
- Zo sveta IT bezpečnosti, 6/2023
krebsonsecurity.com
- Who Stole 3.6M Tax Records from South Carolina?
- Crickets from Chirp Systems in Smart Lock Key Leak
- Why CISA is Warning CISOs About a Breach at Sisense
- Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers
- April’s Patch Tuesday Brings Record Number of Fixes
- Fake Lawsuit Threat Exposes Privnote Phishing Sites
- ‘The Manipulaters’ Improve Phishing, Still Fail at Opsec
- Thread Hijacking: Phishes That Prey on Your Curiosity
- Recent ‘MFA Bombing’ Attacks Targeting Apple Users
- Mozilla Drops Onerep After CEO Admits to Running People-Search Networks
linuxsecurity.com
- Protect Your Linux Web Apps and Meet Compliance Standards
- Strategies for Improving Linux Security Through Cross-Browser Compatibility Testing
- Akira Ransomware Gang Targets Linux Servers, Extorts $42 Million
- Linux Kernel 'Make-Me-Root' Flaw Threatens Popular Distros [Updated]
- Fedora 38: python-aiohttp 2024-5dc487ee89 Security Advisory Updates
- Fedora 38: uxplay 2024-5dc487ee89 Security Advisory Updates
- Fedora 38: python-django3 2024-84fbbbb914 Security Advisory Updates
- Fedora 38: nghttp2 2024-ec22e51ec2 Security Advisory Updates
- Fedora 39: glibc 2024-9be1b94714 Security Advisory Updates
- Fedora 39: python-aiohttp 2024-f83b123d63 Security Advisory Updates
nakedsecurity.sophos.com
-
[kanál neteče]
nukib.cz
- Vydali jsme přehled kybernetických incidentů pohledem NÚKIB za březen 2024
- S ochranou kritické infrastruktury pomohou i peníze z Evropské unie
- Zástupci NÚKIB se zúčastnili cvičení Czech Cybertron 2024 a otevření kybernetického polygonu ve Dvoře Králové nad Labem
- Zástupkyně NÚKIB se podílely na organizaci kyberbezpečnostního cvičení v Albánii
- Legislativní rada vlády jednala o návrhu nového zákona o kybernetické bezpečnosti
- Upozornění na kompromitaci routerů Ubiquity Edge OS aktérem sponzorovaným ruským státem
- Upozorňujeme na dvě kritické zranitelnosti v operačním systému FortiOS
- Upozorňujeme na hrozbu Terrapin útoku mířícího na SSH protokol
- NÚKIB upozorňuje na hrozbu spojenou s aplikací WeChat společnosti Tencent
- Upozorňujeme na zranitelnost CVE-2023-20273 v Cisco IOS XE (CVSS 7.2)
- Doporučení v oblasti kryptografických prostředků verze 3.0
- Doporučení k používání protokolu TLP ke sdílení chráněných informací
scmagazine.com
-
[kanál neteče]
security.googleblog.com
-
[kanál neteče]
securityaffairs.co
- MITRE revealed that nation-state actors breached its systems via Ivanti zero-days
- FBI chief says China is preparing to attack US critical infrastructure
- United Nations Development Programme (UNDP) investigates data breach
- FIN7 targeted a large U.S. carmaker with phishing attacks
- Law enforcement operation dismantled phishing-as-a-service platform LabHost
- Previously unknown Kapeka backdoor linked to Russian Sandworm APT
- Cisco warns of a command injection escalation flaw in its IMC. PoC publicly available
- Linux variant of Cerber ransomware targets Atlassian servers
- Ivanti fixed two critical flaws in its Avalanche MDM
- Researchers released exploit code for actively exploited Palo Alto PAN-OS bug
securityweek.com
- BreachRx Raises $6.5M to Revamp Incident Response Reporting Systems
- Threat-Intelligence Startup VulnCheck Closes $8M Seed Financing
- In Other News: OSS Backdooring Attempts, Botnet Operator Charged, Automotive Firm Attack
- First Major Attempts to Regulate AI Face Headwinds From All Sides
- US Government Releases Guidance on Securing Election Infrastructure
- Akira Ransomware Made Over $42 Million in One Year: Agencies
- Frontier Communications Shuts Down Systems Following Cyberattack
- OpenMetadata Vulnerabilities Exploited to Abuse Kubernetes Clusters for Cryptomining
- SAP Applications Increasingly in Attacker Crosshairs, Report Shows
- Watch Now: Ransomware Resilience & Recovery Summit Sessions Now on Demand
thehackernews.com
- Palo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under Attack
- Critical Update: CrushFTP Zero-Day Flaw Exploited in Targeted Attacks
- BlackTech Targets Tech, Research, and Gov Sectors New 'Deuterbear' Tool
- How Attackers Can Own a Business Without Touching the Endpoint
- Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers
- Hackers Target Middle East Governments with Evasive "CR4T" Backdoor
- OfflRouter Malware Evades Detection in Ukraine for Almost a Decade
- FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor
- Recover from Ransomware in 5 Minutes—We will Teach You How!
- New Android Trojan 'SoumniBot' Evades Detection with Clever Tricks
- How to Conduct Advanced Static Analysis in a Malware Sandbox
- Global Police Operation Disrupts 'LabHost' Phishing Service, Over 30 Arrested Worldwide
therecord.media
- Renewal of surveillance law clears Congress minutes after deadline
- Researchers find dozens of fake E-ZPass toll websites after FBI warning
- MITRE was breached through Ivanti zero-day vulnerabilities
- DC city agency says LockBit claims tied to third-party attack
- Ukrainian sentenced to 15 years in prison for spreading Russian propaganda
threatpost.com
- Student Loan Breach Exposes 2.5M Records
- Watering Hole Attacks Push ScanBox Keylogger
- Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
- Ransomware Attacks are on the Rise
- Cybercriminals Are Selling Access to Chinese Surveillance Cameras
- Twitter Whistleblower Complaint: The TL;DR Version
- Firewall Bug Under Active Attack Triggers CISA Warning
- Fake Reservation Links Prey on Weary Travelers
- iPhone Users Urged to Update to Patch 2 Zero-Days
- Google Patches Chrome’s Fifth Zero-Day of the Year
tripwire.com-state-of-security
- 37 Arrested as Police Smash LabHost International Fraud Network
- Supply Chain Cybersecurity – the importance of everyone
- Navigating AI and Cybersecurity: Insights from the World Economic Forum (WEF)
- SCM and NERC: What You Need to Know
- Casting a Cybersecurity Net to Secure Generative AI in Manufacturing
- What Is an Axon Agent, and Why Do You Need One?
- ITRC's 2023 Data Breach Report Is a Mixed Bag
- DragonForce Ransomware - What You Need To Know
- Life in Cybersecurity: From Nursing to Threat Analyst
- Embracing Two-Factor Authentication for Enhanced Account Protection