News
-
"European Businesses Admit Major Privacy Skills Gap"According to new research by ISACA, some 94% of European organizations are struggling to find skilled practitioners to take up crucial privacy-related roles. The researchers polled 375 privacy professionals across the region in Q4 2022 as part of a… -
"Almost Half of Critical Manufacturing at Risk of Breach"Security researchers at SecurityScorecards stated that critical manufacturing organizations must prioritize patching as high-severity vulnerabilities continue to increase within the sector. The researchers found that nearly half (48%) of critical…
-
"Four Azure Services Vulnerable to Sever-Ride Request Forgery Flaws"Four Microsoft Azure services were discovered to be vulnerable to Server-Side Request Forgery (SSRF), a persistent web security flaw that provides a continuous threat to cloud environments. According to Orca Security, the vulnerable services include…
-
"Git Patches Two Critical Remote Code Execution Security Flaws"Git has patched two vulnerabilities of critical severity that could allow attackers to execute arbitrary code by exploiting heap-based buffer overflow flaws. A third Windows-specific vulnerability affecting the Git GUI tool, caused by an untrusted search…
-
"Nissan Data Breach Exposed Client's Full Names and Dates of Birth"Nissan North America announced a data breach that impacted around 18,000 of its clients. According to the breach notification Nissan sent to affected consumers, a third-party vendor that provides software development services to the manufacturer leaked…
-
"Initial Access Broker Market Booms, Posing Growing Threat to Enterprises"Ransomware operators and other cybercriminals looking for quick access to enterprise networks looked to Initial Access Brokers (IABs) named Novelli, orangecake, Pirat-Networks, SubComandanteVPN, and zirochka for a large part of last year. During the…
-
"Google Ads Increasingly Pointing To Malware"The FBI has recently published a warning to the public regarding search engine advertisements that push malware disguised as legitimate software. This is an old tactic that has resulted in too many malicious advertisements being served to users searching…
-
"CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems"The US Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) has published four advisories regarding Industrial Control Systems (ICS), highlighting multiple security flaws impacting Siemens, GE Digital, and Contec…
-
"Deepfake Challenges 'Will Only Grow'"According to a new report titled "Deepfakes and international conflict" by Artificial Intelligence (AI) and foreign policy experts at Northwestern University and the Brookings Institution, new deepfake technology is significantly more insidious than…
-
"Security Experts Develop Method of Generating 'Highly Evasive' Polymorphic Malware Using ChatGPT"Security researchers at CyberArk Labs have demonstrated the use of ChatGPT to develop polymorphic malware that can go undetected by most anti-malware products. It took the researchers weeks to produce a proof-of-concept (POC) for the highly evasive…
-
"Ransomware Attacks on America's Health Care Systems More Than Doubled From 2016 to 2021, Exposing the Personal Health Information of Millions"From 2016 to 2021, the annual number of ransomware attacks on healthcare provider organizations more than doubled, leaving the sensitive health information of around 42 million people exposed to threat actors. A new report from the University of…
-
"Credential Phishing Attack Uses Fake DHL Emails to Breach Microsoft 365"Armorblox researchers have detailed a new twist on a credential phishing attack that involves using a fake DHL shipment notification to compromise Microsoft 365 and Exchange Online Protection. The phishing campaign has targeted over 10,000 inboxes at a…