New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices
A critical Bluetooth security flaw could be exploited by threat actors to take control of Android, Linux, macOS and iOS...
News
New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices
A critical Bluetooth security flaw could be exploited by threat actors to take control of Android, Linux, macOS and iOS...
Critical Vulnerability in Open Network Demarcation Service (OpenNDS)
OpenNDS has released security updates addressing a critical vulnerability (CVE-2023-41101) in their OpenNDS product, a service providing a border control...
“Sierra:21” vulnerabilities impact critical infrastructure routers
A set of 21 newly discovered vulnerabilities impact Sierra OT/IoT routers and threaten critical infrastructure with remote code execution, unauthorized...
Nissan is investigating cyberattack and potential data breach
Japanese car maker Nissan is investigating a cyberattack that targeted its systems in Australia and New Zealand, which may have...
US senator: Govts spy on Apple, Google users via mobile notifications
A U.S. senator revealed today that government agencies worldwide demand mobile push notification records from Apple and Google users to...
Varonis Introduces Athena AI to Transform Data Security and Incident Response
Athena AI, the new generative AI layer that spans across the entire Varonis Data Security Platform, redefines how security teams...
Navy contractor Austal USA confirms cyberattack after data leak
Austal USA, a shipbuilding company and a contractor for the U.S. Department of Defense (DoD) and the Department of Homeland...
Atlassian patches critical RCE flaws across multiple products
Atlassian has published security advisories for four critical remote code execution (RCE) vulnerabilities impacting Confluence, Jira, and Bitbucket servers, along with...
New SLAM attack steals sensitive data from AMD, future Intel CPUs
Academic researchers developed a new side-channel attack called SLAM that exploits hardware features designed to improve security in upcoming CPUs...
Sellafield Accused of Covering Up Major Cyber Breaches
A UK facility containing the world’s largest stockpile of civil plutonium has been breached by hackers linked to Russia and...
Russian APT28 Exploits Outlook Bug to Access Exchange
A prolific Russian state-sponsored APT group is actively exploiting a known vulnerability in Outlook to access email accounts in Exchange...
US Federal Agencies Miss Deadline for Incident Response Requirements
Although US federal agencies have made progress in preparing for and responding to cyber threats, too many have failed to...
Porn Age Checks Threaten Security and Privacy, Report Warns
New legal requirements to check users’ ages before they can access pornography online could create serious security and privacy risks,...
SpyLoan Scams Target Android Users With Deceptive Apps
Security researchers have uncovered a surge in deceptive Android loan apps since the beginning of 2023. These applications, posing as legitimate...
Disney+ Cyber Scheme Exposes New Impersonation Attack Tactics
Brand impersonation in cyber-attacks has reached new levels of sophistication, a recent research article by Abnormal Security has highlighted. Traditionally observed in...
Police Arrest 1000 Suspected Money Mules
Global law enforcers have arrested just over 1000 individuals suspected of money laundering, and identified thousands more, in a new...
UK FCA Warns of Christmas Loan Fee Fraud Surge
The UK’s financial regulator has warned UK households struggling with the high cost of living to be on the lookout...
78% of CISOs Concerned About AppSec Manageability
A substantial 78% of CISOs have expressed concerns about the current unmanageability of application security (AppSec) attack surfaces, emphasizing the...
Trojan-Proxy Threat Expands Across macOS, Android and Windows
Security researchers have identified a new threat involving cracked applications distributed by unauthorized websites, concealing a Trojan-Proxy designed to compromise...
Deutsche Wohnen Ruling Set to Drive Up GDPR Fines
Legal experts have warned that a “landmark” ruling by the European Court of Justice (ECJ) could have major financial ramifications...
LockBit Remains Top Global Ransomware Threat
The LockBit ransomware strain continues to be the primary digital extortion threat to all regions, and almost all industries globally,...
US-CERT Vulnerability Summary for the Week of November 27, 2023
High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch Infoapache -- dolphinschedulerExposure of Sensitive Information to an Unauthorized Actor vulnerability in...
SpyLoan Android malware on Google Play downloaded 12 million times
More than a dozen malicious loan apps, which are generically named SpyLoan, have been downloaded more than 12 million times this...
