-
"26% of Organizations Lack Any Form of IT Security Training"Hornetsecurity reports that 26 percent of organizations do not train end users on Information Technology (IT) security.
-
"Why Hackers Love Logs"Computer log tampering is almost always part of a system compromise. Computer log files record application actions. They help identify system issues like design malfunctions and malicious activity. However, their value is often overlooked.
-
"SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign"
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a warning about "SPECTR" malware attacks on the country's defense forces. These attacks are part of the "SickSync" espionage campaign.
-
"Google Funds New Cybersecurity Clinics at 15 Colleges"Google and the Consortium of Cybersecurity Clinics awarded 15 colleges, universities, and community colleges up to $1 million each to open cybersecurity clinics at campuses.
-
"Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default"Microsoft has decided to disable its Windows Recall feature on Copilot+ PCs by default. The feature, considered a security and privacy risk, was turned on by default, requiring users to go through checkboxes to opt out of the software.
-
"Security Flaws Found in Popular WooCommerce Plugin"Security researchers at Patchstack have discovered multiple security vulnerabilities in the WooCommerce Amazon Affiliates (WZone) plugin.
-
"Los Angeles Unified School District Investigates Data Theft Claims"Los Angeles Unified School District (LAUSD) officials announced they are investigating a threat actor's claims that they're selling stolen databases containing records belonging to millions of students and thousands of teachers.
-
"SolarWinds Patches High-Severity Vulnerability Reported by NATO Pentester"
SolarWinds recently announced patches for multiple high-severity vulnerabilities in Serv-U and the SolarWinds Platform, including a bug reported by a penetration tester working with NATO.
-
"Ransomware Ecosystem Transformed, New Groups 'Changing the Rules'"
Experts warn that the ransomware ecosystem has changed significantly in 2024, and organizations must adapt their defenses.
-
"Qilin Ransomware Group Blamed for Attack Disrupting London Hospitals"According to former National Cyber Security Centre CEO Ciaran Martin, the "Qilin" Ransomware-as-a-Service (RaaS) group is believed to have been behind the recent cyberattack that forced multiple London hospitals to declare a state of emergency.
-
"Chinese Hackers Exploit Old ThinkPHP Vulnerabilities in New Attacks"Akamai warns that two Remote Code Execution (RCE) vulnerabilities in ThinkPHP that were patched five years ago are being exploited in a new wave of attacks.
-
"Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks""Muhstik," a Distributed Denial-of-Service (DDoS) botnet, exploited a now-patched Apache RocketMQ security flaw to co-opt vulnerable servers and grow.
News