@cyber-security ..
zdroje:
#bleepingcomputer.com
#csirt.cz
#darkreading.com
#googleprojectzero.blogspot.com
#hackread.com
#kratkespravy.sk
#krebsonsecurity.com
#nakedsecurity.sophos.com
#nukib.cz
#scmagazine.com
#securityaffairs.co
#securityweek.com
#thehackernews.com
#therecord.media
#threatpost.com
#tripwire.com-state-of-security
bleepingcomputer.com
- Microsoft adding a USB4 troubleshooting page to Windows 11
- Facebook accounts hijacked by new malicious ChatGPT Chrome extension
- North Korean hackers using Chrome extensions to steal Gmail emails
- PoC exploits released for Netgear Orbi router vulnerabilities
- Windows 10 KB5023773 preview update released with 10 fixes
- Microsoft: Defender update behind Windows LSA protection warnings
- Windows 11 Snipping Tool privacy bug exposes cropped image content
- Hackers use new PowerMagic and CommonMagic malware to steal data
- Mozilla Firefox 111.0.1 fixes Windows 11 and macOS crashes
- Microsoft: Windows preview updates to target last week of the month
- LockBit ransomware gang now also claims City of Oakland breach
- Breached hacking forum shuts down, fears it's not 'safe' from FBI
csirt.cz
- Microsoft vydal v úterý důležité záplaty
- Postřehy z bezpečnosti: BlackLotus je UEFI bootkit obcházející Secure Boot
- Zranitelnost produktu FortiNAC je aktivně zneužívána útočníky
- CSIRT.CZ upozorňuje na phishingovou kampaň, která se vydává za zprávu od registrátora domén FORPSI
- Microsoft vydal záplaty pro tři aktivně zneužívané zranitelnosti
- Postřehy z bezpečnosti: nedobrovolný open-source nebo zaplacení výkupného
- CSIRT.CZ varuje před phishingovou kampaní s údajnou nabídkou neomezených dat
- Závažná zranitelnost ohrožuje více než 100 modelů tiskáren Lexmark
- Tento týden probíhal Data Privacy Week
- Apple vydává záplaty pro starší zařízení kvůli aktivně zneužívaným zranitelnostem
darkreading.com
- 10 Vulnerabilities Types to Focus On This Year
- Pipeline Cybersecurity Rules Show the Need for Public-Private Partnerships
- Attackers Are Probing for Zero-Day Vulns in Edge Infrastructure Products
- BreachForums Shuts Down in Wake of Leader's Arrest
- How to Keep Incident Response Plans Current
- Cyberpion Rebrands As IONIX
- .NET Devs Targeted With Malicious NuGet Packages
- Renowned Researcher Kelly Lum Passes Away
- Research Highlights Cyber Security's Underestimated Role As a Business and Revenue Enabler
- BlackBerry Announces New Patent Sale Transaction With Patent Monetization Company for Up to $900M
- Normalyze Granted Patent for Data Security Posture Management (DSPM)
- Zero-Day Bug Allows Crypto Hackers to Drain $1.6M From Bitcoin ATMs
googleprojectzero.blogspot.com
- Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems
- Exploiting null-dereferences in the Linux kernel
- DER Entitlements: The (Brief) Return of the Psychic Paper
- Exploiting CVE-2022-42703 - Bringing back the stack attack
- Mind the Gap
- A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
- Gregor Samsa: Exploiting Java's XML Signature Verification
- RC4 Is Still Considered Harmful
- The quantum state of Linux kernel garbage collection CVE-2021-0920 (Part I)
- 2022 0-day In-the-Wild Exploitation…so far
- The curious tale of a fake Carrier.app
- An Autopsy on a Zombie In-the-Wild 0-day
hackread.com
- Google Suspends Chinese Shopping App Pinduoduo Over Malware Concerns
- Windows 11 and 10’s Snipping Tools Vulnerable to Data Exposure
- Ferrari Discloses Ransomware Attack; Refuses to Pay Ransom
- ChatGPT Bug Exposes Conversation History Titles
- Breach Forums to Remain Offline Permanently
- Crypto ATM Manufacturer General Bytes Suffers $1.5m Bitcoin Theft
- Technology and Software Redefine Business Operations
- DotRunpeX: The Malware That Infects Systems with Multiple Families
- Threat Actors Using Go-based HinataBot to launch DDoS Attacks
- Analysis of the recent volatility in the cryptocurrency market
kratkespravy.sk
- Zo sveta IT bezpečnosti, 2/2023
- Zo sveta IT bezpečnosti, 1/2023
- Zo sveta IT bezpečnosti, 12/2022
- Zo sveta IT bezpečnosti, 11/2022
- Zo sveta IT bezpečnosti, 10/2022
- Zo sveta IT bezpečnosti, 9/2022
- Zo sveta IT bezpečnosti, 8/2022
- Zo sveta IT bezpečnosti, 7/2022
- Zo sveta IT bezpečnosti, 6/2022
- Zo sveta IT bezpečnosti, 5/2022
krebsonsecurity.com
- Why You Should Opt Out of Sharing Data With Your Mobile Provider
- Feds Charge NY Man as BreachForums Boss “Pompompurin”
- Microsoft Patch Tuesday, March 2023 Edition
- Two U.S. Men Charged in 2022 Hacking of DEA Portal
- Who’s Behind the NetWire Remote Access Trojan?
- Sued by Meta, Freenom Halts Domain Registrations
- Highlights from the New U.S. Cybersecurity Strategy
- Hackers Claim They Breached T-Mobile More Than 100 Times in 2022
- When Low-Tech Hacks Cause High-Impact Breaches
- Who’s Behind the Botnet-Based Service BHProxies?
nakedsecurity.sophos.com
- Windows 11 also vulnerable to “aCropalypse” image data leakage
- Google Pixel phones had a serious data leakage bug – here’s what to do!
- Bitcoin ATM customers hacked by video upload that was actually an app
- Dangerous Android phone 0-day bugs revealed – patch or work around them now!
- S3 Ep 126: The price of fast fashion (and feature creep) [Audio + Text]
- Microsoft fixes two 0-days on Patch Tuesday – update now!
- Firefox 111 patches 11 holes, but not 1 zero-day among them…
- Linux gets double-quick double-update to fix kernel Oops!
- SHEIN shopping app goes rogue, grabs price and URL data from your clipboard
- S3 Ep125: When security hardware has security holes [Audio + Text]
nukib.cz
- NÚKIB upozorňuje na zranitelnost CVE-2023-23397
- Kybernetické incidenty pohledem NÚKIB - únor 2023
- Aplikace TikTok představuje bezpečnostní hrozbu
- NÚKIB spouští webové stránky k evropským certifikacím kybernetické bezpečnosti
- Upozorňujeme na zneužití dokumentů OneNote ke stahování malware
- NÚKIB a slovenské NBÚ stvrdily svou spolupráci memorandem
- Kybernetické incidenty pohledem NÚKIB - leden 2023
- Nový zákon o kybernetické bezpečnosti, NÚKIB vyzývá odbornou veřejnost ke konzultacím
- Upozorňujeme na kritickou zranitelnost FortiOS CVE-2022-42475
- Upozorňujeme na zranitelnosti knihovny OpenSSL ve verzi 3
- Doporučení k používání protokolu TLP ke sdílení chráněných informací
- Doporučení v oblasti kryptografických prostředků verze 2.0
scmagazine.com
-
[kanál neteče]
securityaffairs.co
- Experts released PoC exploits for severe flaws in Netgear Orbi routers
- ENISA: Ransomware became a prominent threat against the transport sector in 2022
- BreachForums current Admin Baphomet shuts down BreachForums
- Independent Living Systems data breach impacts more than 4M individuals
- New Bad Magic APT used CommonMagic framework in the area of Russo-Ukrainian conflict
- New ShellBot bot targets poorly managed Linux SSH Servers
- 2022 Zero-Day exploitation continues at a worrisome pace
- Ferrari confirms data breach after receiving a ransom demand from an unnamed extortion group
- Crooks stole more than $1.5M worth of Bitcoin from General Bytes ATMs
- Acropalypse flaw in Google Pixel’s Markup tool allowed the recovery of edited images
securityweek.com
- Backslash Snags $8M Seed Financing for AppSec Tech
- ‘Badsecrets’ Open Source Tool Detects Secrets in Many Web Frameworks
- High-Severity Vulnerabilities Found in WellinTech Industrial Data Historian
- Chrome 111 Update Patches High-Severity Vulnerabilities
- BreachForums Shut Down Over Law Enforcement Takeover Concerns
- CISA Expands Cybersecurity Committee, Updates Baseline Security Goals
- Malware Trends: What’s Old Is Still New
- Burnout in Cybersecurity – Can It Be Prevented?
- Spain Needs More Transparency Over Pegasus: EU Lawmakers
- Ransomware Will Likely Target OT Systems in EU Transport Sector: ENISA
thehackernews.com
- CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems
- ScarCruft's Evolving Arsenal: Researchers Reveal New Malware Distribution Techniques
- Preventing Insider Threats in Your Active Directory
- Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware
- NAPLISTENER: New Malware in REF2924 Group's Arsenal for Bypassing Detection
- BreachForums Administrator Baphomet Shuts Down Infamous Hacking Forum
- New 'Bad Magic' Cyber Threat Disrupts Ukraine's Key Sectors Amid War
- New ShellBot DDoS Malware Variants Targeting Poorly Managed Linux Servers
- The Best Defense Against Cyber Threats for Lean Security Teams
- From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022
- Hackers Steal Over $1.6 Million in Crypto from General Bytes Bitcoin ATMs Using Zero-Day Flaw
- New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Ads
therecord.media
- Lineup set for House talks on Section 702 surveillance law
- UK issues strategy to protect National Health Service from cyberattacks
- BreachForums says it is closing after suspected law enforcement access to backend
- Ransomware ‘likely’ to target transportation OT systems, warns EU cyber agency
- After BreachForums arrest, new site administrator says the platform will live on
threatpost.com
- Student Loan Breach Exposes 2.5M Records
- Watering Hole Attacks Push ScanBox Keylogger
- Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
- Ransomware Attacks are on the Rise
- Cybercriminals Are Selling Access to Chinese Surveillance Cameras
- Twitter Whistleblower Complaint: The TL;DR Version
- Firewall Bug Under Active Attack Triggers CISA Warning
- Fake Reservation Links Prey on Weary Travelers
- iPhone Users Urged to Update to Patch 2 Zero-Days
- Google Patches Chrome’s Fifth Zero-Day of the Year
tripwire.com-state-of-security
- 5 Key Components of Cybersecurity Hardening
- VIN Cybersecurity Exploits and How to Address Them in 2023
- Ransomware Risk Management: A Cybersecurity Framework Profile
- Key Findings: UK Cybersecurity Breaches Survey 2022
- Don’t fail an audit over a neglected annual policy review
- A Look at The 2023 Global Automotive Cybersecurity Report
- Free decryptor released for Conti-based ransomware following data leak
- How Retiring Gas and Coal Plants Affects Grid Stability
- What is CSAF (Common Security Advisory Framework)?
- What are Rootkits? How to prevent them