Security Affairs

JULY 4, 2024

Brazil’s data protection authority temporarily banned Meta from using data originating in the country to train its artificial intelligence. Brazil’s data protection authority, Autoridade Nacional de Proteção de Dados (ANPD), has imposed a temporary ban on Meta from processing users’ personal data for training its artificial intelligence (AI) models. “The National Data Protection Authority (ANPD) issued today a Preventive Measure determining the immediate suspension, in Brazil,

Artificial Intelligence 132

Artificial Intelligence Media Hacking Risk 132

Security Boulevard

JULY 4, 2024

IT managers and CSOs need to rethink their approach to cybersecurity and protect their organizations from this new breed of AI-powered attacks. The post Rethinking Cybersecurity in the Age of AI appeared first on Security Boulevard.

Cybersecurity 134

Cybersecurity Data breaches Security Awareness Ransomware 134

Security Affairs

JULY 4, 2024

Technology company Splunk released security updates to address 16 vulnerabilities in Splunk Enterprise and Cloud Platform. Technology company Splunk addressed 16 vulnerabilities in Splunk Enterprise and Cloud Platform, including four high-severity flaws. The vulnerability CVE-2024-36985 is a Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise. “In Splunk Enterprise versions below 9.0.10, 9.1.5, and

Technology 130

Technology Hacking Authentication Information Security 130

Security Boulevard

JULY 4, 2024

VOC enables teams to address the vulnerabilities that present the greatest risk to their specific attack surface before they can be exploited. The post Smashing Silos With a Vulnerability Operations Center (VOC) appeared first on Security Boulevard.

Risk 128

Risk Security Awareness Cybersecurity 128

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

Security Affairs

JULY 4, 2024

Twilio states that threat actors have identified the phone numbers of users of its two-factor authentication app, Authy, TechCrunch reported. Last week, the notorious hacker ShinyHunters claimed to have stolen 33 million phone numbers from Twilio. This week the messaging firm told TechCrunch that “threat actors” identified data of Authy users, a two-factor authentication app owned by Twilio, including their phone numbers.

Authentication 125

Authentication Social Engineering Phishing Accountability 125

Security Boulevard

JULY 4, 2024

While compliance frameworks establish baseline requirements for data protection, they may not always align with the rapidly evolving threat landscape. The post Compliance, Security and the Role of Identity appeared first on Security Boulevard.

Security Awareness 124

Security Awareness Risk Government Cybersecurity 124

Quick Heal Antivirus

JULY 4, 2024

In today’s technological landscape, ransomware is a well-known yet potent threat, posing significant challenges to individuals and businesses. The post Quick Heal’s New Update With Enahnced Ransomware Protection appeared first on Quick Heal Blog.

Ransomware 114

Ransomware Technology Cybersecurity 114

Security Affairs

JULY 4, 2024

Healthcare firm HealthEquity disclosed a data breach caused by a partner’s compromised account that exposed protected health information. Healthcare fintech firm HealthEquity disclosed a data breach after a partner’s compromised account was used to access its systems. The intruders have stolen protected health information from the company systems.

Data breaches 118

Data breaches Healthcare Accountability Insurance 118

Graham Cluley

JULY 4, 2024

Security researchers have warned that a new ransomware group has taken an unusual twist on the traditional method of extorting money from its corporate victims. Read more in my article on the Tripwire State of Security blog.

Ransomware 112

Ransomware Data breaches 112

The Hacker News

JULY 4, 2024

The supply chain attack targeting widely-used Polyfill[.]io JavaScript library is wider in scope than previously thought, with new findings from Censys showing that over 380,000 hosts are embedding a polyfill script linking to the malicious domain as of July 2, 2024.

114

114

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Software

WIRED Threat Level

JULY 4, 2024

Generative AI is seeping into the core of your phone, but what does that mean for privacy? Here’s how Apple’s unique AI architecture compares to the “hybrid” approach adopted by Samsung and Google.

Architecture 116

Architecture 116

Tech Republic Security

JULY 4, 2024

Rates have declined by 15% since the market peak in 2022, according to Howden Insurance Brokers.

Insurance 137

Insurance Cyber Insurance Marketing Backups 137

The Hacker News

JULY 4, 2024

Microsoft has revealed two security flaws in Rockwell Automation PanelView Plus that could be weaponized by remote, unauthenticated attackers to execute arbitrary code and trigger a denial-of-service (DoS) condition.

112

112

Malwarebytes

JULY 4, 2024

Twilio has warned users of the Authy multi-factor authentication (MFA) app about an incident in which cybercriminals may have obtained their phone numbers. Twilio said the cybercriminals abused an unsecured Application Programming Interface (API) endpoint to verify the phone numbers of millions of Authy multi-factor authentication users. Authy is an app that you install on your device which then produces a MFA code for you when logging into services.

Cryptocurrency 107

Cryptocurrency Phishing Authentication Data breaches 107

Advertisement

After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!

The Hacker News

JULY 4, 2024

Cybersecurity researchers have uncovered a new botnet called Zergeca that's capable of conducting distributed denial-of-service (DDoS) attacks. Written in Golang, the botnet is so named for its reference to a string named "ootheca" present in the command-and-control (C2) servers ("ootheca[.]pw" and "ootheca[.]top").

DDOS 111

DDOS Cybersecurity 111

Bleeping Computer

JULY 4, 2024

A threat actor compromised Ethereum's mailing list provider and sent to over 35,000 addresses a phishing email with a link to a malicious site running a crypto drainer. [.

Phishing 104

Phishing Cryptocurrency 104

Trend Micro

JULY 4, 2024

In this blog entry, we will discuss how the Jenkins Script Console can be weaponized by attackers for cryptomining activity if not configured properly.

Cyber threats 120

Cyber threats Malware 120

GlobalSign

JULY 4, 2024

During the holiday period, cyber threats are larger than ever – find out how to protect your business while having peace of mind through automated security solutions.

Cyber threats 103

Cyber threats 103

Advertisement

Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.

Software

Penetration Testing

JULY 4, 2024

A high-severity vulnerability (CVE-2024-38513) has been discovered in Fiber, a widely-used web framework for the Go programming language. This flaw allows attackers to hijack user sessions, potentially leading to unauthorized access and data breaches.... The post CVE-2024-38513 (CVSS 9.8): Critical Security Flaw in Popular Go Web Framework, Fiber appeared first on Cybersecurity News.

Data breaches 94

Data breaches Cybersecurity 94

Bleeping Computer

JULY 4, 2024

Hackers are targeting older versions of the HTTP File Server (HFS) from Rejetto to drop malware and cryptocurrency mining software. [.

Malware 104

Malware Cryptocurrency Software 104

IT Security Guru

JULY 4, 2024

In this digital world we live in, online start-ups are emerging rapidly, harnessing the power of the internet to reach global audiences and deliver innovative solutions. However, with the increased digital presence comes an elevated risk of cyber threats. For new online businesses, implementing robust cybersecurity strategies is not just an option, but a necessity.

Backups 75

Backups Cyber threats Encryption Authentication 75

Security Boulevard

JULY 4, 2024

The last mile in secrets security is securing secrets in workloads. Discover a new way to securely deliver encrypted secrets in your infrastructure with innovative open-source tools, and say goodbye to plaintext secrets. The post The Runtime Secrets’ Security Gap appeared first on Security Boulevard.

Encryption 69

Encryption 69

Advertisement

Tech leaders today are facing shrinking budgets and investment concerns. This whitepaper provides insights from over 1,000 tech leaders on how to stay secure and attract top cybersecurity talent, all while doing more with less. Download today to learn more!

Cybersecurity

Thales Cloud Protection & Licensing

JULY 4, 2024

Your PCI-DSS v4.0 Roadmap: Charting a Course of Education, Analysis & System Enhancements josh.pearson@t… Thu, 07/04/2024 - 07:00 The Payment Card Industry Data Security Standard (PCI-DSS) v4.0 is about protecting cardholder data and maintaining the secure reputation of the industry as a whole. Cyber threats are continuing to grow and evolve in frequency, vector and complexity requiring stronger protection, particularly for payments data.

Education 62

Education Encryption Technology Authentication 62

Penetration Testing

JULY 4, 2024

A sophisticated and persistent supply chain attack targeting the popular JavaScript library jQuery has been uncovered by cybersecurity researchers at Phylum. The attack, which has been active since late May, involves the distribution of... The post Widespread Supply Chain Attack on NPM: Trojanized jQuery Discovered appeared first on Cybersecurity News.

Cybersecurity 70

Cybersecurity Malware 70

Heimadal Security

JULY 4, 2024

The Romanian branch of NTT DATA has reportedly been targeted in a significant cyber attack, with the RansomHub ransomware group claiming responsibility. The hackers allege that they have exfiltrated 230 GB of sensitive data. The attack was first detected on June 14, 2024, and the cybercriminals have set a ransom deadline of July 5, 2024, […] The post NTT DATA Romania Probes Security Incident as RansomHub Threatens Data Leak appeared first on Heimdal Security Blog.

Cyber Attacks 64

Cyber Attacks Ransomware Cybersecurity 64

Penetration Testing

JULY 4, 2024

Recently, the Apache Software Foundation has rushed to release Apache HTTP Server version 2.4.61, a crucial update that addresses a severe source code disclosure vulnerability (CVE-2024-39884). This flaw, rated as “Important” by the Apache... The post Apache HTTP Server Update Patches Critical Source Code Disclosure Flaw (CVE-2024-39884) appeared first on Cybersecurity News.

Software 74

Software Cybersecurity 74

Advertisement

Explore how enterprises can enhance developer productivity and onboarding by adopting self-hosted Cloud Development Environments (CDEs). This whitepaper highlights the simplicity and flexibility of cloud-based development over traditional setups, demonstrating how large teams can leverage economies of scale to boost efficiency and developer satisfaction.

Security Boulevard

JULY 4, 2024

If data is the new oil, then organizations will get little benefit from hoarding it. They need to share it between individuals, departments, organizations and/or systems to improve decision making and drive growth. But there are risks. To avoid major financial, reputational and legal repercussions, these same enterprises need to build “secure pipelines” down which that data can travel.

Risk 64

Risk Big data 64

Penetration Testing

JULY 4, 2024

Two critical vulnerabilities have been identified in the Logsign Unified SecOps Platform, a comprehensive software solution for security operations. These vulnerabilities, CVE-2024-5716 and CVE-2024-5717, when combined, can enable remote, unauthenticated code execution on the... The post Logsign Unified SecOps Platform Urgent Update Addresses Critical RCE Vulnerabilities appeared first on Cybersecurity News.

Software 67

Software Cybersecurity 67

Security Boulevard

JULY 4, 2024

The buzz around AI is palpable! The need for new skills and the rush to create AI-powered teams grows stronger – the whispers of Gen. Read More The post Upskill, Reskill, or Hire? For GenAI, You Need All Three appeared first on ISHIR | Software Development India. The post Upskill, Reskill, or Hire? For GenAI, You Need All Three appeared first on Security Boulevard.

Software 59

Software Artificial Intelligence 59

We Live Security

JULY 4, 2024

Social media sites are designed to make their users come back for more. Do laws restricting children's exposure to addictive social media feeds have teeth or are they a political gimmick?

Media 82

Media 82

Advertisement

IT leaders are experiencing rapid evolution in AI amid sustained investment uncertainty. As AI evolves, enhanced cybersecurity and hiring challenges grow. This whitepaper offers real strategies to manage risks and position your organization for success.

Cybersecurity