SecurityWeek

Could cybersecurity professionals benefit from FUD awareness training in the same way that users benefit from phishing awareness training?

CVE-2024-21412, one of the security bypass zero-days fixed by Microsoft with Patch Tuesday updates, exploited by Water Hydra (DarkCasino).

Albania’s cybersecurity authorities have accused a hacker group “sponsored” by the Iranian government of attacking the country’s Institute of Statistics earlier this month.

SAP patches a critical code-injection vulnerability in the SAP ABA (Application Basis) cross-application component.

Major technology companies are planning to sign an agreement this week that would guide how they try to put a stop to the use of AI tools to disrupt democratic elections.

Patch Tuesday: Microsoft pushes a massive batch of security-themed updates and calls urgent attention to exploits bypassing security features.

Adobe ships patches for at least 30 documented security flaws, warning that users are exposed to code execution, security feature bypass and denial-of-service attacks.

France’s data protection agency CNIL says it is investigating massive data breaches at two companies that manage third-party healthcare payments, warning that more than 33 million people may be affected.

Aircraft parts dealer Willis Lease Finance Corporation (WLFC) notified the SEC that it fell victim to a cyberattack.

Bank of America is notifying some customers that their personal information was stolen in a data breach at third-party services provider.

Two individuals involved in hacking the taxi dispatch system at JFK airport have been sentenced to prison. 

Backdoor deployed using recent Ivanti VPN vulnerability enables command execution, web request and system log theft.

February 2024 ICS Patch Tuesday: Siemens and Schneider Electric release a total of 18 new security advisories.

Because you can’t secure what you can’t see, having real-time asset visibility across the network is vital to maximizing security, minimizing risk, and protecting the enterprise.

Romanian hospitals turn to pen and paper after ransomware attack on centralized healthcare management system.

CISA has added the Roundcube flaw tracked as CVE-2023-43770 to its known exploited vulnerabilities catalog.

A malware tactic dubbed ‘hunter-killer’ is growing, based on an analysis of more than 600,000 malware samples. This may become the standard approach for advanced attacks.

An active cloud account takeover campaign has impacted dozens of Azure environments and compromised hundreds of user accounts.

ExpressVPN disables split tunneling on Windows after learning that DNS requests were not properly directed.

A possibly China-linked threat actor uses a custom backdoor in a cyberespionage campaign ongoing since at least 2021.