Patch Tuesday: Critical Flaws in Adobe Commerce Software
20
Nov
2023

Morgan Stanley Fined $6.5 Million for Exposing Customer Information

Morgan Stanley has agreed to a $6.5 million settlement over insecurely disposing of hardware containing unencrypted personal information. Through negligent…

APT29 group exploited WinRAR 0day in attacks against embassies
20
Nov
2023

APT29 group exploited WinRAR 0day in attacks against embassies

Russia-linked APT29 group exploited WinRAR 0day in attacks against embassies Pierluigi Paganini November 20, 2023 Russia-linked cyberespionage group APT29 has…

LitterDrifter Powershell Worm Rapidly Spreads on USB Drives
20
Nov
2023

LitterDrifter Powershell Worm Rapidly Spreads on USB Drives

Gamaredon (aka Primitive Bear, ACTINIUM, and Shuckworm) stands out in Russian espionage by exclusively targeting Ukrainian entities. Unusually evident, it…

Threat Intelligence with Sandbox Analysis
20
Nov
2023

Yamaha Ransomware Attack: Personal Information Exposed

A ransomware attack targeted Yamaha Motor Co., Ltd., resulting in a partial disclosure of the personal information maintained by the…

Why the human factor is critical to ITOps success
20
Nov
2023

Software engineers worry about speaking out

A survey of 280 software engineers conducted in October has reported that over half (53%) suspected that malpractices were occuring…

Microsoft addresses Cobalt Strike abuse
20
Nov
2023

Microsoft Hires Sam Altman and OpenAI’s New CEO Vows to Investigate His Firing

Microsoft snapped up Sam Altman and another architect of OpenAI for a new venture after their sudden departures shocked the…

Splunk RCE Vulnerability Let Attackers Upload Malicious File
20
Nov
2023

Splunk RCE Vulnerability Let Attackers Upload Malicious File

A high-severity Remote Code Execution (RCE) flaw in Splunk Enterprise has been discovered, enabling an attacker to upload malicious files. Versions…

Kubernetes Security on AWS
20
Nov
2023

Threat Intelligence with Sandbox Analysis: Security Analyst Guide

Threat intelligence (TI) is critical to organizations’ cybersecurity infrastructure, allowing them to keep track of the evolving threat landscape and…

Popular Dragon Touch Tablet for Kids Infected with Corejava Malware
20
Nov
2023

Popular Dragon Touch Tablet for Kids Infected with Corejava Malware

The Dragon Touch KidzPad Y88X 10 tablet on Amazon, analyzed by EFF researchers, also comes with preinstalled riskware and an…

Johnson Controls
20
Nov
2023

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products

Johnson Controls recently announced patches for a critical vulnerability found by an external researcher in some of its industrial refrigeration…

Hackers Exploit Google Workspace to Exfiltrate Data
20
Nov
2023

Hackers Exploit Google Workspace to Exfiltrate Data

Recent research into Google Workspace and Google Cloud Platform by Bitdefender Labs reveals novel attack methods, potentially leading to network-wide…

Former OpenAI boss to lead Microsoft Advanced AI division
20
Nov
2023

Former OpenAI boss to lead Microsoft Advanced AI division

Microsoft has hired OpenAI co-founder Sam Altman less than 36 hours after he stepped down as CEO of the ChatGPT…