News
-
"Securing Space: NASA Funds Innovative AI, Blockchain Project at University of Miami for Nanosatellite Cybersecurity"NASA is leading a project through the University of Miami's Frost Institute for Data Science and Computing (IDSC) that seeks to improve the security of satellite communication in space.
-
"27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT Experts"For nearly six months, an unknown threat actor has been publishing typosquat packages to the Python Package Index (PyPI) repository to deliver malware capable of gaining persistence, stealing sensitive data, and accessing cryptocurrency wallets.
-
"Russian Cozy Bear Strikes European Embassies With WinRAR Bug"According to Ukrainian government cybersecurity researchers, Russian state hackers exploited a recently patched vulnerability in a popular Windows tool for archiving files to target European embassies and international organizations in espionage
-
"A Critical OS Command Injection Flaw Affects Fortinet FortiSIEM"Fortinet is warning customers about a critical operating system command injection vulnerability, tracked as CVE-2023-36553 with a CVSS score of 9.3, in the FortiSIEM report server.
-
"Four Threat Groups Targeted Zimbra Collaboration Flaw"According to Google's Threat Analysis Group (TAG), four different campaigns are exploiting a vulnerability in the Zimbra Collaboration server, which the team discovered in June.
-
"Samsung Says Hackers Accessed Customer Data During Year-Long Breach"During a year-long breach, hackers gained access to the personal data of UK-based Samsung customers.
-
"Piloting New Ground: Expanding Scalable Cybersecurity Services to Protect the Broader Critical Infrastructure Community"In response to the evolving cyber threat environment, the Cybersecurity and Infrastructure Security Agency (CISA) has announced a pilot program to provide cutting-edge cybersecurity shared services on a voluntary basis to critical infrastructure entiti
-
"Rise in Automated Attacks Troubles E-commerce Industry"According to Imperva, the leading threat to online retailers is automated attacks conducted through sophisticated bad bots against application business logic.
-
"CISA Warns of Actively Exploited Windows, Sophos, and Oracle Bugs"The Cybersecurity and Infrastructure Security Agency (CISA) has added three security issues affecting Microsoft devices, a Sophos product, and an Oracle enterprise solution to its catalog of Known Exploited Vulnerabilities (KEV).
-
"Intel Patches Reptar Vulnerability in Intel Processors, Which Can Cause Data Theft"Intel has patched the Reptar vulnerability Google security researchers found in its CPUs that could lead to data theft or DNS attacks. According to researchers, the Reptar flaw is a "redundant prefix" issue.
-
"CISA, FBI Warn of Scattered Spider Expertise With Social Engineering, SIM Swapping"The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) are warning about a group of hackers known as Scattered Spider, who have disrupted some of the country's largest companies through social engineering and other methods.
-
"CSA Launches First Zero Trust Certification"The Cloud Security Alliance (CSA) has recently introduced the Certificate of Competence in Zero Trust (CCZT), the industry’s inaugural authoritative zero trust certification.