Thousands of US Congress Emails Exposed to Takeover
However, the share of US political email addresses exposed on the dark web (20%) pales in comparison to that of British MPs (68%) and members of the European Parliament (44%), which the researchers discovered in an earlier iteration of the study.
Cyber_Security_Channel
However, the share of US political email addresses exposed on the dark web (20%) pales in comparison to that of British MPs (68%) and members of the European Parliament (44%), which the researchers discovered in an earlier iteration of the study.
Cyber_Security_Channel
Infosecurity Magazine
Thousands of US Congress Emails Exposed to Takeover
Some 3191 email addresses for congressional staff are available on the dark web
👍5👏4🤡3❤2🤔1🤩1🤣1
Millions of Kia Cars Were Vulnerable to Remote Hacking: Researchers
After registering on the Kia dealer website – a link to it is sent via email to new users for registration purposes – using the same request used when registering to the owners’ portal, the researchers could generate an access token that allowed them to call the backend dealer APIs.
Cyber_Security_Channel
After registering on the Kia dealer website – a link to it is sent via email to new users for registration purposes – using the same request used when registering to the owners’ portal, the researchers could generate an access token that allowed them to call the backend dealer APIs.
Cyber_Security_Channel
SecurityWeek
Millions of Kia Cars Were Vulnerable to Remote Hacking
Security researchers detail vulnerabilities in Kia owners’ portal that allowed them to control vehicles remotely.
👍9❤2👏2😁2
📩 CyberWeekly by Hacklido — Issue №7; 28th of September, 2024
Long time no see, but here is the latest CyberWeekly Newsletter, from our partners at Hacklido.
Dive in to explore the following industry topics:
• EPA
• NIST
• CUPS
• Patches
• Malware
• Logistics
• ATG systems
• Cyberattacks
• Cybersecurity
• Vulnerabilities
• Transportation
• Water treatment
• Remote code execution
• Authentication guidelines
Along with a variety of other useful materials.
Find the full article via this link.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
Long time no see, but here is the latest CyberWeekly Newsletter, from our partners at Hacklido.
Dive in to explore the following industry topics:
• EPA
• NIST
• CUPS
• Patches
• Malware
• Logistics
• ATG systems
• Cyberattacks
• Cybersecurity
• Vulnerabilities
• Transportation
• Water treatment
• Remote code execution
• Authentication guidelines
Along with a variety of other useful materials.
Find the full article via this link.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
👍13❤4🔥2
Enhancing Cloud Data Security For Efficient And Private Queries With New Encrypt-Then-Index Strategy
This research, published in Frontiers of Computer Science, is a collaborative effort between Nanjing University of Aeronautics and Astronautics, the University of Tokyo, Guilin University of Electronic Technology, and China University of Geosciences.
Cyber_Security_Channel
This research, published in Frontiers of Computer Science, is a collaborative effort between Nanjing University of Aeronautics and Astronautics, the University of Tokyo, Guilin University of Electronic Technology, and China University of Geosciences.
Cyber_Security_Channel
Eurasia Review
Enhancing Cloud Data Security For Efficient And Private Queries With New Encrypt-Then-Index Strategy
A new encrypt-then-index strategy has been developed to improve the efficiency and security of k-nearest neighbor (k-NN) queries on encrypted databases. This method provides significant...
👍6🔥5
Are Ghost Calls a Problem? Yes, if They Don’t Stop
When they happen repeatedly, it can be a sign that malicious intent is behind ghost calls — they may be a sign of fraudulent activity.
Let’s discuss some common not-so-nice reasons for ghost calls so you can identify when you need to take action.
Cyber_Security_Channel
When they happen repeatedly, it can be a sign that malicious intent is behind ghost calls — they may be a sign of fraudulent activity.
Let’s discuss some common not-so-nice reasons for ghost calls so you can identify when you need to take action.
Cyber_Security_Channel
TechRepublic
Are Ghost Calls a Problem? Yes, if They Don’t Stop
Ghost calls are an annoying indicator of a potential security issue. Learn why they happen, when you should worry, and how to stop them.
❤6👍5🔥1
📩 CyberWeekly by Hacklido — Issue №8; 8th of October, 2024
New week = new issue of the CyberWeekly Newsletter, kindly crafted by our partners at Hacklido.
Discover a wide variety of professional themes:
• CISA
• Zimbra flaw
• CUPS DDoS
• CVE—2024—45519
• CVE—2024—29824
• US Healthcare Cybersecurity Bill
• Texas Hospital ransomware attack
• Ivanti Endpoint Manager vulnerability
In addition to other useful cybersecurity resources.
Find the complete Newsletter here.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
New week = new issue of the CyberWeekly Newsletter, kindly crafted by our partners at Hacklido.
Discover a wide variety of professional themes:
• CISA
• Zimbra flaw
• CUPS DDoS
• CVE—2024—45519
• CVE—2024—29824
• US Healthcare Cybersecurity Bill
• Texas Hospital ransomware attack
• Ivanti Endpoint Manager vulnerability
In addition to other useful cybersecurity resources.
Find the complete Newsletter here.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
👍6👏4❤1🔥1
31 New Ransomware Groups Join the Ecosystem in 12 Months
“Ransomware is a business that is nothing without its affiliate model. In the last year, law enforcement activity has shattered old allegiances, reshaping the business of cybercrime.
Originally chaotic in their response, threat actors have refined their business operations and how they work.
The result is a larger number of groups, underpinned by substantial affiliate migration,” said Don Smith, VP Threat Intelligence, Secureworks Counter Threat Unit.
Cyber_Security_Channel
“Ransomware is a business that is nothing without its affiliate model. In the last year, law enforcement activity has shattered old allegiances, reshaping the business of cybercrime.
Originally chaotic in their response, threat actors have refined their business operations and how they work.
The result is a larger number of groups, underpinned by substantial affiliate migration,” said Don Smith, VP Threat Intelligence, Secureworks Counter Threat Unit.
Cyber_Security_Channel
Infosecurity Magazine
31 New Ransomware Groups Join the Ecosystem in 12 Months
Secureworks reports a 30% increase in active ransomware groups despite law enforcement efforts, with 31 new groups emerging in the past year
👍11❤5🙈2🎃1
📩 CyberWeekly by Hacklido — Issue №9; 12th of October, 2024
Courtesy of our partners at Hacklido, we are happy to present you the new issue of the CyberWeekly Newsletter.
Navigate to their article and learn more about:
• Internet Archive breach exposed 31M users' data
• Microsoft Patch Tuesday fixed critical flaws
• Education on cyber threats rise
• OpenAI blocked AI misuse
• Firefox zero-day patched
Among a wide array of other valuable materials.
Access the full Newsletter via this link.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
Courtesy of our partners at Hacklido, we are happy to present you the new issue of the CyberWeekly Newsletter.
Navigate to their article and learn more about:
• Internet Archive breach exposed 31M users' data
• Microsoft Patch Tuesday fixed critical flaws
• Education on cyber threats rise
• OpenAI blocked AI misuse
• Firefox zero-day patched
Among a wide array of other valuable materials.
Access the full Newsletter via this link.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
❤7👍6🤔1
Why Your Identity Is the Key to Modernizing Cybersecurity
Today, those technologies are coalescing around a modern vision for what is, at its heart, one of our most ancient security solutions: our own unique identity.
Let's take a look at how a modern version of this ancient solution can help protect our digital lives.
Cyber_Security_Channel
Today, those technologies are coalescing around a modern vision for what is, at its heart, one of our most ancient security solutions: our own unique identity.
Let's take a look at how a modern version of this ancient solution can help protect our digital lives.
Cyber_Security_Channel
Dark Reading
Why Your Identity Is the Key to Modernizing Cybersecurity
Ultimately, the goal of creating a trusted environment around all digital assets and devices is about modernizing the way you do business.
👍12❤2😁1
Pokemon Developer Discloses Breach, Extent of Leak Remains a Mystery
As of March 2024, the game developer has 207 full-time and contracted employees.
News outlets like Nintendo Life, IGN, and Nintendo Everything previously reported that massive amounts of data were leaked, ranging from source code to behind-the-scenes information.
Cyber_Security_Channel
As of March 2024, the game developer has 207 full-time and contracted employees.
News outlets like Nintendo Life, IGN, and Nintendo Everything previously reported that massive amounts of data were leaked, ranging from source code to behind-the-scenes information.
Cyber_Security_Channel
Cybernews
Pokemon developer discloses breach, extent of leak remains a mystery
Game Freak recently released a statement announcing a data breach, which revealed the personal data of over 2,500 employees.
👍6
Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach
CrowdStrike did not respond to a request for comment.
But a week after Techmundo’s piece, the tech news publication hackread.com published a story in which USDoD reportedly admitted that CrowdStrike was accurate in identifying him.
Hackread said USDoD shared a statement, which was partially addressed to CrowdStrike:
Cyber_Security_Channel
CrowdStrike did not respond to a request for comment.
But a week after Techmundo’s piece, the tech news publication hackread.com published a story in which USDoD reportedly admitted that CrowdStrike was accurate in identifying him.
Hackread said USDoD shared a statement, which was partially addressed to CrowdStrike:
Cyber_Security_Channel
Krebs on Security
Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach
Brazilian authorities reportedly have arrested a 33-year-old man on suspicion of being "USDoD," a prolific cybercriminal who rose to infamy in 2022 after infiltrating the FBI's InfraGard program and leaking contact information for 80,000 members. More recently…
👍11
📩 CyberWeekly by Hacklido — Issue №10; 19th of October, 2024
Please welcome the new issue of Hacklido's CyberWeekly Newsletter.
Here is what you can find inside:
• Apple & Google propose shorter SSL/TLS certificate lifecycles
• Iranian cyber threats targeting critical infrastructure
• CISA warns of SolarWinds vulnerabilities
• Post-quantum cryptography
Click here to begin reading the full version.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
Please welcome the new issue of Hacklido's CyberWeekly Newsletter.
Here is what you can find inside:
• Apple & Google propose shorter SSL/TLS certificate lifecycles
• Iranian cyber threats targeting critical infrastructure
• CISA warns of SolarWinds vulnerabilities
• Post-quantum cryptography
Click here to begin reading the full version.
-----
→ If your Company / Project / Community wants to become a partner of Cyber Security News...
Please, do not hesitate to contact us by sending a direct message to @cybersecadmin
-----
@Cyber_Security_Channel
👍9❤4🤣3
DPRK Uses Microsoft Zero-Day in No-Click Toast Attacks
"Many Toast ad programs use a feature called WebView to render Web content for displaying ads," according to AhnLab researchers.
"However, WebView operates based on a browser.
Therefore, if the program creator used IE-based WebView to write the code, IE vulnerabilities could also be exploited in the program."
Cyber_Security_Channel
"Many Toast ad programs use a feature called WebView to render Web content for displaying ads," according to AhnLab researchers.
"However, WebView operates based on a browser.
Therefore, if the program creator used IE-based WebView to write the code, IE vulnerabilities could also be exploited in the program."
Cyber_Security_Channel
Dark Reading
DPRK Uses Microsoft Zero-Day in No-Click Toast Attacks
The "Code-on-Toast" supply chain cyberattacks by APT37 delivered data-stealing malware to users in South Korea who had enabled Toast pop-up ads.
👍12❤1
Samsung Zero-Day Vuln Under Active Exploit, Google Warns
"This zero-day exploit is part of an EoP chain," Jin and Lecigne noted. "The actor is able to execute arbitrary code in a privileged camera server process.
The exploit also renamed the process name itself to 'vendor.samsung.hardware.camera.provider@3.0-service', probably for anti-forensic purposes."
Cyber_Security_Channel
"This zero-day exploit is part of an EoP chain," Jin and Lecigne noted. "The actor is able to execute arbitrary code in a privileged camera server process.
The exploit also renamed the process name itself to 'vendor.samsung.hardware.camera.provider@3.0-service', probably for anti-forensic purposes."
Cyber_Security_Channel
Dark Reading
Samsung Zero-Day Vuln Under Active Exploit, Google Warns
If it's exploited, bad actors are capable of executing arbitrary code while evading detection due to a renamed process.
👍10🤔3🔥2❤1😁1
Exploitation of Docker remote API servers has reached a “critical level”
Hackers are exploiting unprotected Docker remote API servers to deploy malware, with researchers stating the threat has reached a “critical level” and warning organizations to act now.
Cyber_Security_Channel
Hackers are exploiting unprotected Docker remote API servers to deploy malware, with researchers stating the threat has reached a “critical level” and warning organizations to act now.
Cyber_Security_Channel
IT Pro
Exploitation of Docker remote API servers has reached a “critical level”
Hackers are targeting Docker’s remote access API as it allows them to pivot from a single container to the host and deploy malware with ease
👍8🔥2❤1
Fog Ransomware Targets SonicWall VPNs to Breach Corporate Networks
While the researchers aren't 100% positive the flaw was used in all cases, all of the breached endpoints were vulnerable to it, running an older, unpatched version.
Cyber_Security_Channel
While the researchers aren't 100% positive the flaw was used in all cases, all of the breached endpoints were vulnerable to it, running an older, unpatched version.
Cyber_Security_Channel
BleepingComputer
Fog ransomware targets SonicWall VPNs to breach corporate networks
Fog and Akira ransomware operators have increased their exploitation efforts of CVE-2024-40766, a critical access control flaw that allows unauthorized access to resources on the SSL VPN feature of SonicWall SonicOS firewalls.
❤6👍1
Most Companies Are Bracing for a Cyberattack Within a Year
Among the various types of attacks, credential theft remained a significant threat, wherein attackers steal login information to gain unauthorised access to systems.
This often occurs through AI generated phishing or social engineering.
Cyber_Security_Channel
Among the various types of attacks, credential theft remained a significant threat, wherein attackers steal login information to gain unauthorised access to systems.
This often occurs through AI generated phishing or social engineering.
Cyber_Security_Channel
Deccan Herald
Most companies are bracing for a cyberattack within a year
Among the various types of attacks, credential theft remained a significant threat, wherein attackers steal login information to gain unauthorised access to systems. This often occurs through AI generated phishing or vishing, social engineering or exploiting…
👍8⚡3❤2
Microsoft SharePoint RCE Bug Exploited to Breach Corporate Network
The attacker remained undetected for two weeks. Rapid7 determined the initial access vector to be the exploitation of a vulnerability, CVE 2024|38094, within the on-premise SharePoint server.
Cyber_Security_Channel
The attacker remained undetected for two weeks. Rapid7 determined the initial access vector to be the exploitation of a vulnerability, CVE 2024|38094, within the on-premise SharePoint server.
Cyber_Security_Channel
BleepingComputer
Microsoft SharePoint RCE bug exploited to breach corporate network
A recently disclosed Microsoft SharePoint remote code execution (RCE) vulnerability tracked as CVE-2024-38094 is being exploited to gain initial access to corporate networks.
👍10
Global Operation Takes Down 22,000 Malicious IPs
The first iteration of Operation Synergia was announced in February 2024 when law enforcement agencies from over 50 Interpol member countries joined forces between September and November the previous year.
Cyber_Security_Channel
The first iteration of Operation Synergia was announced in February 2024 when law enforcement agencies from over 50 Interpol member countries joined forces between September and November the previous year.
Cyber_Security_Channel
Infosecurity Magazine
Global Operation Takes Down 22,000 Malicious IPs
Interpol claims an international policing operation has shuttered 22,000 IPs connected with cybercrime
👍14❤3🔥1🖕1
Hacker Claims to Steal Source Code Owned by Nokia
The company’s investigation has not identified evidence that an attack has impacted any of its systems or data.
However, they assured everyone that they would continue to watch the situation actively despite not spotting a potential compromise.
Cyber_Security_Channel
The company’s investigation has not identified evidence that an attack has impacted any of its systems or data.
However, they assured everyone that they would continue to watch the situation actively despite not spotting a potential compromise.
Cyber_Security_Channel
👍13