Sat.Nov 02, 2024

article thumbnail

PTZOptics cameras zero-days actively exploited in the wild

Security Affairs

Hackers are exploiting two zero-day vulnerabilities, tracked as CVE-2024-8956 and CVE-2024-8957, in PTZOptics cameras. Threat actors are attempting to exploit two zero-day vulnerabilities, tracked as CVE-2024-8956 and CVE-2024-8957 , in PTZOptics pan-tilt-zoom (PTZ) live streaming cameras, GretNoise researchers warn. GreyNoise discovered the two flaws while investigating the use of an exploit detected by its LLM-powered threat-hunting tool Sift.

Firmware 121
article thumbnail

SYS01 Infostealer Campaign Exploits Meta Ads to Target Millions Worldwide

Penetration Testing

In a world increasingly dependent on online advertising, cybercriminals have seized an opportunity to exploit Meta’s vast advertising ecosystem. Bitdefender Labs has released an alarming report detailing the “SYS01 Infostealer”... The post SYS01 Infostealer Campaign Exploits Meta Ads to Target Millions Worldwide appeared first on Cybersecurity News.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide

Security Affairs

Sophos used custom implants to monitor China-linked thret actors targeting firewall zero-days in a years-long battle. Sophos revealed a years-long “cat-and-mouse” battle with China-linked threat actors, using custom implants to track the attackers’ activities. Since 2018, Sophos has faced increasingly aggressive campaigns, including the India-based Sophos subsidiary Cyberoam, where attackers exploited a wall-mounted display for initial access.

Firmware 120
article thumbnail

CrossBarking Vulnerability in Opera Browser Allows Malicious Extensions to Hijack User Accounts

Penetration Testing

Guardio Labs has unveiled a critical security flaw in the Opera browser, dubbed “CrossBarking,” which allows malicious extensions to bypass security protocols and exploit Private APIs. This vulnerability grants attackers... The post CrossBarking Vulnerability in Opera Browser Allows Malicious Extensions to Hijack User Accounts appeared first on Cybersecurity News.

article thumbnail

Why Giant Content Libraries Do Nothing for Your Employees’ Cyber Resilience

Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.

article thumbnail

FBI arrested former Disney World employee for hacking computer menus and mislabeling allergy info

Security Affairs

A former Disney World employee hacked servers after being fired, altering prices, adding profanities, and mislabeling allergy info. A former Walt Disney World employee hacked servers after being fired by the company. He is accused of changing prices, adding profanities, and falsely labeling items as allergy-safe. The FBI arrested the man last week, falsely declaring some items as allergy-safe could put the lives of visitors at risk.

Hacking 139
article thumbnail

Okta Discloses Authentication Vulnerability in AD/LDAP DelAuth, Urges Customer Review

Penetration Testing

On October 30, 2024, Okta announced a critical security advisory addressing a vulnerability in its AD/LDAP Delegated Authentication (DelAuth) system. This flaw, which affects cache key generation, could allow unauthorized... The post Okta Discloses Authentication Vulnerability in AD/LDAP DelAuth, Urges Customer Review appeared first on Cybersecurity News.

LifeWorks

More Trending

article thumbnail

I changed 12 settings on my Android phone to drastically improve battery life

Zero Day

There are several ways to improve your Android's battery life, and I've sifted through them all to highlight the most effective options - plus an obvious bonus.

133
133
article thumbnail

DEF CON 32 – On Your Ocean’s 11 Team, I’m The AI Guy (Technically Girl)

Security Boulevard

Authors/Presenters:Harriet Farlow Our sincere appreciation to DEF CON , and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center ; and via the organizations YouTube channel. Permalink The post DEF CON 32 – On Your Ocean’s 11 Team, I’m The AI Guy (Technically Girl) appeared first on Security Boulevard.

article thumbnail

Upgrade to Microsoft Office Pro and Windows 11 Pro with this bundle for 87% off

Zero Day

This lifetime license bundle deal gives you access to the entire Microsoft Office Pro 2021 suite and Windows 11 Pro for just $53 for a limited time.

116
116
article thumbnail

Florida Man Accused of Hacking Disney World Menus, Changing Font to Wingdings

WIRED Threat Level

Plus: Cops take down a notorious infostealer, Strava leaks world leaders’ locations, and a hacking scandal is causing chaos in Italy.

Hacking 78
article thumbnail

Zero Trust Mandate: The Realities, Requirements and Roadmap

The DHS compliance audit clock is ticking on Zero Trust. Government agencies can no longer ignore or delay their Zero Trust initiatives. During this virtual panel discussion—featuring Kelly Fuller Gordon, Founder and CEO of RisX, Chris Wild, Zero Trust subject matter expert at Zermount, Inc., and Principal of Cybersecurity Practice at Eliassen Group, Trey Gannon—you’ll gain a detailed understanding of the Federal Zero Trust mandate, its requirements, milestones, and deadlines.

article thumbnail

Get 3 months of Xbox Game Pass Ultimate for 28% off

Zero Day

Try or gift Xbox Game Pass for three months for nearly one-third off and play over 100 games including Starfield, Forza Motorsport, and Football Manager 2024 on your Xbox, PC, or mobile device.

Mobile 105
article thumbnail

Know Passwords Using Email From Data breach And Leaks On The Internet

Hacker's King

In today's hyper-connected world, the internet has transformed the way we communicate, shop, and share information. However, this digital revolution has also given rise to a darker reality: data breaches. From large corporations to small businesses and even individual users, the implications of data breaches can be devastating, leading to identity theft, financial loss, and a breakdown of trust in online services.

article thumbnail

Buy a Microsoft Project Pro or Microsoft Visio Pro license for just $18 with this deal

Zero Day

Microsoft's project management solutions include timesheet support, org charts, and more to help you stay organized -- and they're on sale for 92% off.

92
article thumbnail

The best blood pressure watches of 2024

Zero Day

We considered medical research and current FDA guidance to find the best blood pressure watches available today, including options from Samsung and YHE.

89
article thumbnail

Prevent Data Breaches With Zero-Trust Enterprise Password Management

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

article thumbnail

How I optimized the cheapest 98-inch TV available to look and sound incredible (and it's $1,000 off)

Zero Day

Some fine-tuning and adjustments turned the TCL S55 TV into a monster home entertainment set -- and currently, it's $1,000 off.

81
article thumbnail

One of the most immersive soundbars I've tested is refreshingly compact (and $100 off right now)

Zero Day

The Bose Smart Soundbar features a robust design that can power up any home audio setup, and it's still less than competing devices.

75
article thumbnail

Join Costco and get a $20 gift card - here's how

Zero Day

Don't miss this deal to buy your own Costco membership and get a $20 gift card, effectively cutting the price to $45 for the year. (I bought one and highly recommend it.

75