News
-
"Rockwell Automation Urges Customers to Disconnect ICS From Internet"Rockwell Automation has recently issued a security notice urging customers to ensure that their industrial control systems (ICS) are not connected to the internet and exposed to cyber threats.
-
"Mastercard Doubles Speed of Fraud Detection with Generative AI"Mastercard has recently announced it is deploying generative AI technology to enhance its fraud detection capabilities.
-
"Zoom Adding Post-Quantum End-to-End Encryption to Products"Video communications giant Zoom recently announced that post-quantum end-to-end encryption (E2EE) has been added to Zoom Workplace.
-
"OmniVision Says Personal Information Stolen in Ransomware Attack"Semiconductor manufacturing giant OmniVision Technologies has recently disclosed a data breach following a ransomware attack it suffered in September 2023.
-
"70% of CISOs Expect Cyberattacks in Next Year, Report Finds"Seventy percent of Chief Information Security Officers (CISOs) revealed that their businesses are at risk of experiencing a cyberattack in the next year.
-
"Russia's Turla APT Abuses MSBuild to Deliver TinyTurla Backdoor"The Russian-linked "Turla" Advanced Persistent Threat (APT) group has been using PDF and MSBuild project files to deliver the "TinyTurla" backdoor as a fileless payload.
-
"YouTube Has Become a Significant Channel for Cybercrime"YouTube has become a major cybercrime channel, with telemetry from Avast showing that 4 million users were protected against YouTube threats in 2023 and 500,000 in January-March 2024.
-
"EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems"The US Environmental Protection Agency (EPA) released an alert highlighting cyber-protection measures for drinking water systems.
-
"GitHub Warns of SAML Auth Bypass Flaw in Enterprise Server"GitHub fixed a maximum severity authentication bypass vulnerability that affects GitHub Enterprise Server (GHES) instances using SAML Single Sign-On (SSO) authentication.
-
"Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users""CLOUD#REVERSER," a new attack campaign, uses Google Drive and Dropbox to stage malicious payloads.
-
"Authorities Arrest $100m Incognito Drugs Market Suspect"Rui-Siang Lin, a Taiwanese national, is facing multiple life sentences after being arrested on suspicion of owning and running one of the dark web’s most successful drugs marketplaces.
-
"Over 60% of Network Security Appliance Flaws Exploited as Zero Days"According to security researchers at Rapid7, over 60% of vulnerabilities discovered in network and security appliances in 2023 were exploited as zero days.