@cyber-security ..
zdroje:
#bleepingcomputer.com
#blog.google-TAG
#csirt.cz
#cyberscoop.com
#darkreading.com
#googleprojectzero.blogspot.com
#kratkespravy.sk
#krebsonsecurity.com
#linuxsecurity.com
#nakedsecurity.sophos.com
#nukib.cz
#scmagazine.com
#security.googleblog.com
#securityaffairs.co
#securityweek.com
#thehackernews.com
#therecord.media
#threatpost.com
#tripwire.com-state-of-security
bleepingcomputer.com
- Over 20,000 vulnerable Microsoft Exchange servers exposed to attacks
- Google Chrome's new cache change could boost performance
- US Health Dept urges hospitals to patch critical Citrix Bleed bug
- The Week in Ransomware - December 1st 2023 - Police hits affiliates
- TrickBot malware dev pleads guilty, faces 35 years in prison
- Hackers use new Agent Raccoon malware to backdoor US targets
- French government recommends against using foreign chat apps
- VMware fixes critical Cloud Director auth bypass unpatched for 2 weeks
- Windows 10 KB5032278 update adds Copilot AI assistant, fixes 13 bugs
- LogoFAIL attack can install UEFI bootkits through bootup logos
- US govt sanctions North Korea’s Kimsuky hacking group
- WhatsApp's new Secret Code feature hides your locked chats
blog.google-TAG
- Zimbra 0-day used to target international government organizations
- Government-backed actors exploiting WinRAR vulnerability
- TAG Bulletin: Q3 2023
- 0-days exploited by commercial surveillance vendor in Egypt
- Active North Korean campaign targeting security researchers
- TAG Bulletin: Q2 2023
- The ups and downs of 0-days
- TAG Bulletin: Q1 2023
- Ukraine remains Russia’s biggest cyber focus in 2023
- How we’re protecting users from government-backed attacks from North Korea
- Spyware vendors use 0-days and n-days against popular platforms
- Magniber ransomware actors used a variant of Microsoft SmartScreen bypass
csirt.cz
- Postřehy z bezpečnosti: reklamy Google opět zneužity k šíření malware
- Postřehy z bezpečnosti: stáhni soubor a něco si přej
- Priviledge escalation zranitelnost v ld.so - glibc 2.35, glibc 2.34
- Postřehy z bezpečnosti: phishingová kampaň přes Facebook Messenger
- V Junos OS byla objevena chyba umožňující provést vzdáleně DoS útok
- Postřehy z bezpečnosti: rukověť školního administrátora
- Postřehy z bezpečnosti: umělá inteligence na dráze zločinu
- Postřehy z bezpečnosti: pozor na falešné novináře
- Postřehy z bezpečnosti: falešné investiční nabídky na vzestupu
- Společnost Barracuda varuje před aktivně zneužívanou zranitelností v ESG
cyberscoop.com
- Bipartisan House legislation calls for two new federal cybersecurity training programs
- U.S. government sanctions prolific North Korean cyber espionage unit
- CISA’s Goldstein wants to ditch ‘patch faster, fix faster’ model
- Anti-Israel hacking campaign highlights danger of internet-connected devices
- Ahead of 2024 election, Meta worries about lack of information on top-tier nation-state covert operations
- North Texas Municipal Water District suffers cyberattack
- Pennsylvania water facility hit by Iran-linked hackers
- Ransomware gang broken up in Ukraine as a result of international operation
- US and UK release guidelines for secure AI development
- Shadowy hacking group targeting Israel shows outsized capabilities
darkreading.com
- The Role of the CISO in Digital Transformation
- Cyber Threats to Watch Out for in 2024
- CISA, NCSC Offer a Road Map, Not Rules, in New Secure AI Guidelines
- Ardent Health Hospitals Disrupted After Ransomware Attack
- General Electric, DARPA Hack Claims Raise National Security Concerns
- Hamas-Linked APT Wields New SysJoker Backdoor Against Israel
- Data De-Identification: Balancing Privacy, Efficacy & Cybersecurity
- Balancing Simplicity and Security in the Digital Experience
- Hack The Box Launches 5th Annual University CTF Competition
- Fake Browser Updates Targeting Mac Systems With Infostealer
- Kiteworks' Maytech Acquisition Reaffirms Commitment to UK Market
- Generative AI Takes On SIEM
googleprojectzero.blogspot.com
- First handset with MTE on the market
- An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit
- Analyzing a Modern In-the-wild Android Exploit
- MTE As Implemented, Part 1: Implementation Testing
- MTE As Implemented, Part 3: The Kernel
- MTE As Implemented, Part 2: Mitigation Case Studies
- Summary: MTE As Implemented
- Release of a Technical Report into Intel Trust Domain Extensions
- Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems
- Exploiting null-dereferences in the Linux kernel
- DER Entitlements: The (Brief) Return of the Psychic Paper
- Exploiting CVE-2022-42703 - Bringing back the stack attack
kratkespravy.sk
- Zo sveta IT bezpečnosti, 11/2023
- Zo sveta IT bezpečnosti, 10/2023
- Zo sveta IT bezpečnosti, 9/2023
- Zo sveta IT bezpečnosti, 8/2023
- Zo sveta IT bezpečnosti, 7/2023
- Zo sveta IT bezpečnosti, 6/2023
- Zo sveta IT bezpečnosti, 5/2023
- Zo sveta IT bezpečnosti, 4/2023
- Zo sveta IT bezpečnosti, 3/2023
- Zo sveta IT bezpečnosti, 2/2023
krebsonsecurity.com
- Okta: Breach Affected All Customer Support Users
- ID Theft Service Resold Access to USInfoSearch Data
- Alleged Extortioner of Psychotherapy Patients Faces Trial
- Microsoft Patch Tuesday, November 2023 Edition
- It’s Still Easy for Anyone to Become You at Experian
- Who’s Behind the SWAT USA Reshipping Service?
- Russian Reshipping Service ‘SWAT USA Drop’ Exposed
- .US Harbors Prolific Malicious Link Shortening Service
- NJ Man Hired Online to Firebomb, Shoot at Homes Gets 13 Years in Prison
- Hackers Stole Access Tokens from Okta’s Support Unit
linuxsecurity.com
nakedsecurity.sophos.com
-
[kanál neteče]
nukib.cz
- Upozorňujeme na hrozbu spojenou s aplikací WeChat
- NÚKIB upozorňuje na hrozbu spojenou s aplikací WeChat společnosti Tencent
- Národní koordinační centrum výzkumu a vývoje má vlastní web
- O aktuálních výzvách na poli kybernetické bezpečnosti diskutovali odborníci v Brně
- Zástupce NÚKIB jednal v Singapuru s odborníky ze státní, soukromé i akademické sféry
- Česká republika se připojila k prohlášení proti platbám výkupného při ransomwarových útocích
- Upozorňujeme na zranitelnost CVE-2023-20273 v Cisco IOS XE (CVSS 7.2)
- Upozorňujeme na kritickou zranitelnost CVE-2023-20198 v Cisco IOS XE (CVSS 10.0)
- Upozorňujeme na kritické zranitelnosti v knihovnách webových prohlížečů
- Doporučení v oblasti kryptografických prostředků verze 3.0
- Upozornění na zranitelnost MikroTik RouterOS CVE-2023-30799
- Doporučení k používání protokolu TLP ke sdílení chráněných informací
scmagazine.com
-
[kanál neteče]
security.googleblog.com
-
[kanál neteče]
securityaffairs.co
- Fortune-telling website WeMystic exposes 13M+ user records
- Expert warns of Turtle macOS ransomware
- US govt sanctioned North Korea-linked APT Kimsuky
- Black Basta Ransomware gang accumulated at least $107 million in Bitcoin ransom payments since early 2022
- CISA adds ownCloud and Google Chrome bugs to its Known Exploited Vulnerabilities catalog
- Apple addressed 2 new iOS zero-day vulnerabilities
- Critical Zoom Room bug allowed to gain access to Zoom Tenants
- Rhysida ransomware group hacked King Edward VII’s Hospital in London
- Google addressed the sixth Chrome Zero-Day vulnerability in 2023
- Okta reveals additional attackers’ activities in October 2023 Breach
securityweek.com
- Congressmen Ask DOJ to Investigate Water Utility Hack, Warning It Could Happen Anywhere
- Staples Confirms ‘Cybersecurity Risk’ Disrupting Online Stores
- In Other News: Utilities Targeted by Hackers, Aerospace Attacks, Killnet Leader Unmasked
- New ‘Turtle’ macOS Ransomware Analyzed
- US Sanctions North Korean Cyberespionage Group Kimsuky
- Simple Attack Allowed Extraction of ChatGPT Training Data
- Apple Patches WebKit Flaws Exploited on Older iPhones
- Major Security Flaws in Zyxel Firewalls, Access Points, NAS Devices
- Meta Takes Action Against Multiple Foreign Influence Campaigns
- Qlik Sense Vulnerabilities Exploited in Ransomware Attacks
thehackernews.com
- Agent Racoon Backdoor Targets Organizations in Middle East, Africa, and U.S.
- Russian Hacker Vladimir Dunaev Convicted for Creating TrickBot Malware
- New FjordPhantom Android Malware Targets Banking Apps in Southeast Asia
- Qakbot Takedown Aftermath: Mitigations and Protecting Against Future Threats
- Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan
- Discover How Gcore Thwarted Powerful 1.1Tbps and 1.6Tbps DDoS Attacks
- WhatsApp's New Secret Code Feature Lets Users Protect Private Chats with Password
- U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 Foreign-Based Agents
- Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices
- Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws
- Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails
- North Korea's Lazarus Group Rakes in $3 Billion from Cryptocurrency Hacks
therecord.media
- HHS warns of ‘Citrix Bleed’ attacks after hospital outages
- 60 credit unions facing outages due to ransomware attack on popular tech provider
- iPhones and Macs get patches for two vulnerabilities
- US sanctions North Korean ‘Kimsuky’ hackers after surveillance satellite launch
- Russian developer of Trickbot malware pleads guilty, faces 35-year sentence
threatpost.com
- Student Loan Breach Exposes 2.5M Records
- Watering Hole Attacks Push ScanBox Keylogger
- Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
- Ransomware Attacks are on the Rise
- Cybercriminals Are Selling Access to Chinese Surveillance Cameras
- Twitter Whistleblower Complaint: The TL;DR Version
- Firewall Bug Under Active Attack Triggers CISA Warning
- Fake Reservation Links Prey on Weary Travelers
- iPhone Users Urged to Update to Patch 2 Zero-Days
- Google Patches Chrome’s Fifth Zero-Day of the Year
tripwire.com-state-of-security
- Ex-worker phished former employer to illegally hack network and steal data
- Holiday Shopping: Tips and Best Practices to Help you Stay Secure
- Building Fortra as Your Cybersecurity Ally
- QR Code Phishing –What Is It?
- How Does NIST's AI Risk Management Framework Affect You?
- Guarding the Grid: Navigating the Current and Future Landscape of Utility Cybersecurity
- NIST NCCoE Publishes Cybersecurity Framework Profile for Hybrid Satellite Networks
- $9 million seized from "pig butchering" scammers who preyed on lonely hearts
- The Cybersecurity Skills Gap: You’re Looking at the Wrong Gap
- UK Finance Reports Slight Decrease in FinTech Cyberattacks