The Hacker News

AUGUST 31, 2024

A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day by North Korean actors in a campaign designed to deliver the FudModule rootkit. The development is indicative of the persistent efforts made by the nation-state adversary, which had made a habit of incorporating rafts of Windows zero-day exploits into its arsenal in recent months.

129

129

Security Boulevard

AUGUST 31, 2024

Why GRC strategies are often not as effective as they could be, and specific practices businesses can adopt to improve GRC operations. The post 4 Tips for Optimizing Your GRC Strategy appeared first on Security Boulevard.

Risk 124

Risk Government Cybersecurity 124

Security Affairs

AUGUST 31, 2024

North Korea-linked APT exploited the recently patched Google Chrome zero-day CVE-2024-7971 to deploy the FudModule rootkit. North Korea-linked group Citrine Sleet (aka AppleJeus , Labyrinth Chollima , UNC4736, Hidden Cobra ) have exploited the recently patched Google Chrome zero-day CVE-2024-7971 (CVSS score 8.8) to deploy the FudModule rootkit , states Microsoft.

Social Engineering 124

Social Engineering Cryptocurrency Malware Engineering 124

Security Boulevard

AUGUST 31, 2024

The widespread adoption of IoT devices has created new cybersecurity challenges, including those related to external attack surface management. The post Modern Strategies for IoT Device Fingerprinting appeared first on Security Boulevard.

IoT 117

IoT Cybersecurity Security Awareness 117

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Software

WIRED Threat Level

AUGUST 31, 2024

Plus: China-linked hackers infiltrate US internet providers, authorities crack down on a major piracy operation, and a ransomware gang claims attacks during the Paris Olympics.

Internet 86

Internet Internet Ransomware Hacking 86

Security Boulevard

AUGUST 31, 2024

An estimated 2.7 billion personal records were stolen from National Public Data (NPD), a Florida-based data broker company that collects and sells personal data for background checks. The post Missing Guardrails, a Troubling Trend in Data Protection appeared first on Security Boulevard.

Data privacy 110

Data privacy Data breaches Cybersecurity 110

Security Boulevard

AUGUST 31, 2024

Permalink The post Happy United States Labor Day Weekend 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024 appeared first on Security Boulevard.

64

64

Penetration Testing

AUGUST 31, 2024

Cyble Research & Intelligence Labs (CRIL) has uncovered the release of a new malware-as-a-service (MaaS) tool known as ManticoraLoader. The service, announced by the notorious threat actors behind the infamous... The post ManticoraLoader: The New Malware-as-a-Service Threat appeared first on Cybersecurity News.

Malware 61

Malware Cybersecurity Ransomware 61

Troy Hunt

AUGUST 31, 2024

I still find the reactions to the Telegram situation with Durov's arrest odd. There are no doubt all sorts of politics surrounding it, but even putting all that aside for a moment, the assertion that a platform provider should not be held accountable for moderating content on the platform is just nuts. As I say in this week's video, there's lots of content that you can put in the "grey" bucket (free speech versus hate speech, for example) and there are valid arguments to b

Accountability 236

Accountability Encryption 236