Lohrman on Security

SEPTEMBER 1, 2024

We are one month away from the start of the annual Cybersecurity Awareness Month in October. Here are resources, themes, toolkits and much more to help your organization prepare.

Cybersecurity 203

Cybersecurity 203

Penetration Testing

SEPTEMBER 1, 2024

A security researcher from Conviso Labs published the technical details and a proof-of-concept (PoC) exploit for a critical CVE-2024-43044 vulnerability in Jenkin. Jenkins is integral to many development pipelines, making... The post CVE-2024-43044: Critical Jenkins Vulnerability Exposes Servers to RCE, PoC Exploit Published appeared first on Cybersecurity News.

Cybersecurity 145

Cybersecurity 145

Security Affairs

SEPTEMBER 1, 2024

A vulnerability in an air transport security system allowed unauthorized individuals to bypass airport security screenings. The Known Crewmember (KCM) and Cockpit Access Security System (CASS) programs are two transport security systems that pilots, flight attendants, and other airline employees to bypass traditional airport security checks and access cockpit jumpseats.

Authentication 140

Authentication Hacking Accountability Information Security 140

The Hacker News

SEPTEMBER 1, 2024

Roblox developers are the target of a persistent campaign that seeks to compromise systems through bogus npm packages, once again underscoring how threat actors continue to exploit the trust in the open-source ecosystem to deliver malware. "By mimicking the popular 'noblox.

Malware 139

Malware 139

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

Security Affairs

SEPTEMBER 1, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware 132

Malware Ransomware Engineering Hacking 132

Penetration Testing

SEPTEMBER 1, 2024

Researcher Sina Kheirkhah of the Summoning Team has published the technical details and a proof-of-concept (PoC) exploit for a critical vulnerability, identified as CVE-2024-6670, affecting Progress Software’s WhatsUp Gold. With... The post Proof-of-Concept Exploit Released for WhatsUp Gold Authentication Bypass (CVE-2024-6670) appeared first on Cybersecurity News.

Authentication 87

Authentication Cybersecurity Software 87

Zero Day

SEPTEMBER 1, 2024

I've seen the top TVs of 2024 from the leading brands, and the Sony X90L from 2023 is the TV I most recommend buying. It also regularly goes on sale at nice discount, including this Labor Day.

75

75

Security Boulevard

SEPTEMBER 1, 2024

Implementing a cloud threat detection system enhances your team's ability to maintain a strong security posture without significant overhead. The post How to Stay One Step Ahead of Data Breaches and Master Cloud Threat Detection appeared first on Security Boulevard.

Threat Detection 75

Threat Detection Data breaches Security Awareness Cybersecurity 75

Zero Day

SEPTEMBER 1, 2024

Save $459 on a Babbel Language Learning subscription and learn 14 new languages with this deal.

75

75

Security Boulevard

SEPTEMBER 1, 2024

Happy Labor Day 2024 - Three Day Weekend Edition! Permalink The post Happy United States Labor Day 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024 appeared first on Security Boulevard.

72

72

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Software

Zero Day

SEPTEMBER 1, 2024

Pay just once and get a lifetime license to the Microsoft Office 2021 app suite (including Word, Excel, and PowerPoint) on your PC for 79% off right now (there's a deal for a Mac version, too).

75

75

Penetration Testing

SEPTEMBER 1, 2024

Proofpoint researchers have unearthed a suspected espionage campaign distributing custom malware dubbed “Voldemort.” This operation, impacting over 70 organizations worldwide, combines common and uncommon techniques to deliver a backdoor capable... The post Cyber Espionage Campaign Leverages Novel Tactics and “Voldemort” Malware to Target Global Organizations appeared first on Cybersecurity News.

Malware 71

Malware Cybersecurity 71

Security Boulevard

SEPTEMBER 1, 2024

In this episode, we explore the recent arrest of Telegram founder Pavel Durov in France and discuss the app’s encryption claims. Is Telegram truly an encrypted messaging app? Joining the conversation is co-host Kevin Johnson, bringing his trademark opinions. We also talk about some intriguing documentaries, including ‘LulaRich’ about the LuLaRoe leggings company and ‘Class […] The post Telegram is NOT an Encrypted Messaging App, Must-See Documentaries appeared first on Shared Security Podcast.

Encryption 69

Encryption Media Data privacy Technology 69

Penetration Testing

SEPTEMBER 1, 2024

A massive, coordinated DDoS attack disrupted Steam services globally and the Perfect World Esports platform in China on the weekend of August 24-26, coinciding with the launch of the highly... The post AISURU Botnet Identified in Massive DDoS Attack on Steam appeared first on Cybersecurity News.

DDOS 70

DDOS Cybersecurity 70

Advertisement

After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!

Security Boulevard

SEPTEMBER 1, 2024

In a world full of uncertainties, how do you keep your business risks in check? Today, we’re exploring risk register templates and how they can supercharge your risk management strategy. What is a Risk Register? First things first, let’s define what a risk register is. A risk register is a tool used in risk management […] The post Risk Register Templates: Enhancing Your Risk Management Strategy appeared first on Centraleyes.

Risk 64

Risk 64

Penetration Testing

SEPTEMBER 1, 2024

The notorious Latrodectus downloader malware, known for its similarities to IcedID and its use by prominent threat actors TA577 and TA578, has undergone a significant upgrade. Netskope Threat Labs recently... The post Latrodectus Malware Evolves: New Payload Features Enhance Evasion and Control appeared first on Cybersecurity News.

Malware 69

Malware Cybersecurity 69

Centraleyes

SEPTEMBER 1, 2024

In a world full of uncertainties, how do you keep your business risks in check? Today, we’re exploring risk register templates and how they can supercharge your risk management strategy. What is a Risk Register? First things first, let’s define what a risk register is. A risk register is a tool used in risk management and project management. It acts as a centralized repository for all risks identified during the lifecycle of a project or within an organization.

Risk 52

Risk Cyber Risk DDOS Data breaches 52

Penetration Testing

SEPTEMBER 1, 2024

In a recent security bulletin, a critical vulnerability has been identified in One Identity’s Safeguard for Privileged Passwords, a key solution designed to protect and manage privileged credentials within organizations.... The post CVE-2024-45488: Flaw in Safeguard for Privileged Passwords Enables Unauthorized Access appeared first on Cybersecurity News.

Passwords 67

Passwords Cybersecurity 67

Advertisement

Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.

Software

Penetration Testing

SEPTEMBER 1, 2024

In a recent report, cybersecurity researchers from Mandiant and Google Cloud have shed light on the alarming trend of threat actors repurposing digital analytics and advertising tools for malicious purposes.... The post Attackers Turn Digital Analytics Tools into Weapons, Experts Warn appeared first on Cybersecurity News.

Advertising 62

Advertising Cybersecurity Ransomware Malware 62

Penetration Testing

SEPTEMBER 1, 2024

In July, a Red Hat engineer developed an option for the Linux Kernel to display a QR code after a crash, inspired by the feature in systemd 255+ that shows... The post QR Codes Coming to Linux Kernel Panics with 6.12 Release appeared first on Cybersecurity News.

Engineering 54

Engineering Cybersecurity 54