WIRED Threat Level

FEBRUARY 3, 2024

Plus: Russia was likely behind widespread GPS outages, Vault 7 leaker was sentenced, police claim to trace Monero cryptocurrency, and more.

Cryptocurrency 145

Cryptocurrency 145

Security Affairs

FEBRUARY 3, 2024

A vulnerability impacting the decentralized social network Mastodon can be exploited by threat actors to impersonate and take over any account. A security flaw, tracked as CVE-2024-23832 (CVSS score 9.4), in the decentralized social network Mastodon can be exploited to impersonate and take over any account. The issue is caused by insufficient origin validation in all Mastodon. “Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account

Accountability 141

Accountability Media Hacking Information Security 141

Bleeping Computer

FEBRUARY 3, 2024

Mastodon, the free and open-source decentralized social networking platform, has fixed a critical vulnerability that allows attackers to impersonate and take over any remote account. [.

Accountability 120

Accountability 120

Security Affairs

FEBRUARY 3, 2024

Cleaning products giant Clorox estimates the economic impact of the cyber attack that hit the company in August 2023 at $49 million. The Clorox Company is a multinational consumer goods company that specializes in the production and marketing of various household and professional cleaning, health, and personal care products. The cleaning product giant announced in mid-August it was the victim of a cybersecurity incident that forced it to take some systems offline.

Insurance 141

Insurance Cyber Attacks Marketing Hacking 141

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

Bleeping Computer

FEBRUARY 3, 2024

Clorox has confirmed that a September 2023 cyberattack has so far cost the company $49 million in expenses related to the response to the incident. [.

119

119

Penetration Testing

FEBRUARY 3, 2024

In the dynamic world of content management systems (CMS), Schlix CMS has stood out as a high-performance, multi-site solution that empowers users to create websites and blogs effortlessly. Renowned for its openness, extensibility, scalability,... The post CVE-2023-31505: Schlix CMS Flaw Exposes Websites to RCE, No Patch Available appeared first on Penetration Testing.

Penetration Testing 109

Penetration Testing 109

Penetration Testing

FEBRUARY 3, 2024

The urgency of the situation escalated when proof-of-concept (PoC) exploit code for a zero-day CVE-2024-21893 vulnerability became publicly accessible, raising the stakes for potential malicious exploitation. This flaw, along with CVE-2024-21887, could enable attackers... The post PoC Exploit Published for Zero-Day Ivanti CVE-2024-21893 Vulnerability appeared first on Penetration Testing.

Penetration Testing 98

Penetration Testing 98

SecureBlitz

FEBRUARY 3, 2024

Is Carbonite Safe To Use? Read on to find out… Carbonite is a cloud backup service that helps you protect your data from loss or damage. It does this by backing up your files to its servers in the cloud. Carbonite offers a variety of features to protect your data, including encryption, two-factor authentication, and […] The post Is Carbonite Safe To Use?

Backups 80

Backups Encryption Authentication Cybersecurity 80

Security Boulevard

FEBRUARY 3, 2024

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott ; and via the organizations YouTube channel. Permalink The post USENIX Security ’23 – Kenneth G. Paterson, Matteo Scarlata, Kien Tuong Truong – Three Lessons From Threema: Analysis of a Secure Messenger appeared first on Security Boulevard.

64

64