Dependabot impersonators cause trouble on GitHub
We take a look at a clever attack imitating GitHub’s Dependabot in order to publish rogue project updates. GitHub is experiencing issues of the “breached…
Latest Cybersecurity News — Page 5736
View all →
Aussie Broadband makes a play for Symbio – Telco/ISP
Aussie Broadband has made a non-binding conditional play for unified communications as-a-service (UCaaS) provider Symbio that values the company at about $271 million. The offer,…
A still unpatched 0-day RCE impacts more than 3.5M Exim servers
A still unpatched zero-day RCE impacts more than 3.5M Exim servers Pierluigi Paganini September 29, 2023 Experts warn of a critical zero-day vulnerability, tracked as…
Nine finds its next group director of cyber security – Training & Development – Security
Nine has appointed PwC Australia’s Garry Bentlin as its new group director of cyber security. Bentlin will join the media group on October 11; he…
The Week in Ransomware – September 29th 2023
This week has been a busy ransomware week, with ransomware attacks having a massive impact on organizations and the fallout of the MOVEit breaches to…
Bankrupt IronNet Shuts Down Operations
The lights have flickered shut at IronNet, the once-promising network security company founded by former NSA director General Keith Alexander. Bankrupt and out of financing…
Digital Accessibility and Cybersecurity Must Go Hand in Hand
By Dr. Chris Olson In an Increasingly Digital World, Accessibility and Cybersecurity Have Emerged as Significant Factors for Both Individuals and Organizations. Digital accessibility refers…
Mozilla Rushes to Fix Critical Vulnerability in Firefox and Thunderbird
Mozilla Foundation strongly advises all users of these products to update to the latest versions to ensure their systems are protected against this critical security…
Millions of Exim mail servers exposed to zero-day RCE attacks
A critical zero-day vulnerability in all versions of Exim mail transfer agent (MTA) software can let unauthenticated attackers gain remote code execution (RCE) on Internet-exposed servers.…
Lazarus APT Exploiting LinkedIn to Target Spanish Aerospace Firm
KEY FINDINGS An aerospace firm in Spain is the target of an organized attack where scammers contact the company’s employees as recruiters from LinkedIn. The…
Exploit released for Microsoft SharePoint Server auth bypass flaw
Proof-of-concept exploit code has surfaced on GitHub for a critical authentication bypass vulnerability in Microsoft SharePoint Server, allowing privilege escalation. Tracked as CVE-2023-29357, the security flaw…
Cybercriminals Using New ASMCrypt Malware Loader Flying Under the Radar
Threat actors are selling a new crypter and loader called ASMCrypt, which has been described as an “evolved version” of another loader malware known as…