The recently disclosed critical security flaw impacting Apache ActiveMQ is being actively exploited by threat actors to distribute a new Go-based botnet called GoTitan as well as a .NET program known as PrCtrl Rat that’s capable of remotely commandeering the infected hosts. The attacks involve the exploitation of a remote code execution bug (CVE-2023-46604, CVSS […]
Cyber News
Google has rolled out security updates to fix seven security issues in its Chrome browser, including a zero-day that has come under active exploitation in the wild. Tracked as CVE-2023-6345, the high-severity vulnerability has been described as an integer overflow bug in Skia, an open source 2D graphics library. Benoît Sevens and Clément Lecigne of […]
Cyber News
Soon we will be able to unlock and start our cars from our phones. Let’s hope people are thinking about security. Tags: cars, keys, smartphones, transportation Sidebar photo of Bruce Schneier by Joe MacInnis.
Cyber News
Hacker Gang Files SEC Report Against Their Own Victim Cite Company’s Failure to Report Ransomware Attack it Perpetrated Turns out, crossing paths with a BlackCat really does bring misfortune! In a recent, bizarre turn of events, the notorious BlackCat ransomware gang has played a twisted game with the U.S. Securities and Exchange Commission (SEC). Just […]
Cyber Thoughts
One of the cybercrime underground’s more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked accounts at the U.S. consumer data broker USinfoSearch, KrebsOnSecurity has learned. Since at least February 2023, a service advertised on Telegram called USiSLookups has operated an automated bot that allows anyone to look […]
Cyber News
Graham CLULEY November 28, 2023 Promo Protect all your devices, without slowing them down. Free 30-day trial What’s happened? Warnings are spreading on social media about a new way for iPhone users to quickly share their contact information with others. For instance, Forbes is reporting that police departments across America have been spreading a warning, […]
Cyber News
As cloud technology evolves, so does the challenge of securing sensitive data. In a world where data duplication and sprawl are common, organizations face increased risks of non-compliance and unauthorized data breaches. Sentra’s DSPM (Data Security Posture Management) emerges as a comprehensive solution, offering continuous discovery and accurate classification of sensitive data in the cloud. […]
Cyber News
Cybersecurity researchers have detailed a “severe design flaw” in Google Workspace’s domain-wide delegation (DWD) feature that could be exploited by threat actors to facilitate privilege escalation and obtain unauthorized access to Workspace APIs without super admin privileges. “Such exploitation could result in theft of emails from Gmail, data exfiltration from Google Drive, or other unauthorized […]
Cyber News
Account credentials, a popular initial access vector, have become a valuable commodity in cybercrime. As a result, a single set of stolen credentials can put your organization’s entire network at risk. According to the 2023 Verizon Data Breach Investigation Report, external parties were responsible for 83 percent of breaches that occurred between November 2021 and […]
Cyber News