Security Experts:
Ionut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Recent articles by Ionut Arghire
-
The RatMilad spyware has been used indiscriminately in a broad campaign rather than to target specific individuals.
-
RealDefense has raised $30 million from Sunflower Bank, which will help it complete the acquisition of more privacy and cybersecurity firms.
-
Former Canadian government employee Sebastien Vachon-Desjardins was sentenced to prison for participating in NetWalker ransomware attacks.
-
A severe vulnerability impacting Packagist could have been abused to mount supply chain attacks targeting the PHP community.
-
As per Binding Operational Directive 23-01, federal agencies have six months to take the necessary actions to improve asset visibility and vulnerability detection within their networks.
-
Domain and web application security firm Detectify has received a $10 million investment from Insight Partners.
-
CrowdStrike warns of a supply chain attack targeting North American and European organizations across multiple sectors with a trojanized Comm100 installer.
-
Out of 9.8 million Optus customers, 2.1 million had numbers associated with IDs compromised in a recent data breach.
-
CISA has added to its KEV catalog a recent Atlassian Bitbucket flaw and two Microsoft Exchange zero-days.
-
North Korea’s Lazarus hackers were seen exploiting a Dell DBUtil driver vulnerability to disable security mechanisms on target Windows machines.
-
Trustwave has identified two XSS vulnerabilities in Canon Medical’s Vitrea View medical imaging sharing tool.
-
CISA has published guidance for organizations to prepare for the November 1, 2022, move from Traffic Light Protocol (TLP) version 1.0 to TLP 2.0.
-
A total of 267 ethical hackers participated in the HackerOne-hosted challenge, including 139 new to the DoD VDP.
-
Part of the Cicada group, Witchetty has been observed progressively updating its toolset in recent attacks against Middle Eastern and African targets.
-
Cisco has announced patches for 12 vulnerabilities in its IOS and IOS XE software, including 10 rated ‘high severity’.
-
Updates announced for Drupal core address a severe vulnerability in Twig that could lead to the leakage of sensitive information.
-
Auth0 says it has not identified a data breach following a third-party’s claim to possess Auth0 older code repositories.
-
Black Lotus Labs security researchers have observed Chaos, the successor of the Kaiji DDoS botnet, targeting devices within enterprise environments.
-
American business magazine Fast Company confirms Apple News account hijack after its content management system (CMS) was hacked.
-
Cisco has confirmed that tens of its enterprise routers and switches are impacted by four bypass vulnerabilities in Layer-2 (L2) network security controls.
-
Google has released Chrome 106 to the stable channel with patches for 20 vulnerabilities, including 16 externally reported bugs.
-
Cybersecurity firm Human disrupts Scylla ad fraud campaign consisting of 89 mobile applications that gathered over 13 million downloads.
-
Security researchers are warning of a new information stealer named Erbium being distributed as Malware-as-a-Service (MaaS).
-
A class action lawsuit filed against Samsung alleges that the company unnecessarily collected user data, then stored and sold it without proper security protections.
-
American Airlines discovered it was breached after receiving reports of employee email accounts being used in phishing attacks.
Get the Daily Briefing
- SCADA Systems Involved in Many Breaches Suffered by US Ports, Terminals
- SecurityWeek to Host 2022 ICS Cybersecurity Conference October 24-27 in Atlanta
- Iranian Hackers Target Enterprise Android Users With New RatMilad Spyware
- RealDefense Raises $30 Million to Acquire More Privacy, Cybersecurity Firms
- Canadian NetWalker Ransomware Affiliate Gets 20-Year Prison Sentence in US
- US Government Details Tools Used by APTs in Defense Organization Attack
- Seattle Woman Gets Probation for Massive Capital One Hack
- White House Unveils Artificial Intelligence ‘Bill of Rights’
- Is OTP a Viable Alternative to NIST's Post-Quantum Algorithms?
- Critical Packagist Vulnerability Opened Door for PHP Supply Chain Attack
Copyright © 2022 Wired Business Media. All Rights Reserved. Privacy Policy