Troy Hunt

JANUARY 27, 2024

I spent longer than I expected talking about Trello this week, in part because I don't feel the narrative they presented properly acknowledges their responsibility for the incident and in part because I think the impact of scraping in general is misunderstood. I suspect many of us are prone to looking at this in a very binary fashion: if the data is publicly accessible anyway, scraping it poses no risk.

Risk 246

Risk 246

Security Affairs

JANUARY 27, 2024

The Main Intelligence Directorate of Ukraine’s Ministry of Defense states that pro-Ukraine hackers wiped 2 petabytes of data from a Russian research center. The Main Directorate of Intelligence of the Ministry of Defense of Ukraine revealed that pro-Ukraine hackers group “BO Team” wiped the database of the Far Eastern Scientific Research Center of Space Hydrometeorology “Planet.” The Russian center processes data received from satellites and also provides relevant p

Malware 145

Malware Software Information Security Hacking 145

WIRED Threat Level

JANUARY 27, 2024

Plus: North Korean hackers get into generative AI, a phone surveillance tool that can monitor billions of devices gets exposed, and ambient light sensors pose a new privacy risk.

Accountability 136

Accountability Surveillance Risk 136

Security Affairs

JANUARY 27, 2024

Bug bounty hunters earned more than $1.3 million for hacking Teslas, infotainment systems, and electric vehicle chargers at the Pwn2Own Automotive competition. The Zero Day Initiative’s Pwn2Own Automotive competition has ended, participants demonstrated 49 zero-day vulnerabilities affecting automotive products earning a total of $1,323,750. The amazing Synacktiv team won the competition and earned a total of $450,000.

Hacking 135

Hacking Information Security 135

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

Bleeping Computer

JANUARY 27, 2024

Governments struck back this week against members of ransomware operations, imposing sanctions on one threat actor and sentencing another to prison. [.

Ransomware 100

Ransomware Government 100

Penetration Testing

JANUARY 27, 2024

FortiGuard Labs detected the Albabat ransomware, also known as White Bat. First emerging in November 2023, this financially motivated variant has evolved rapidly, targeting companies and individuals primarily in countries such as Argentina, Brazil,... The post From Games to Ransom: Albabat’s Deceptive Distribution Method Exposed appeared first on Penetration Testing.

Penetration Testing 96

Penetration Testing Ransomware Malware 96

Penetration Testing

JANUARY 27, 2024

IOCTLance Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver... The post ioctlance: detect various vulnerability types in Windows Driver Model (WDM) drivers appeared first on Penetration Testing.

Penetration Testing 69

Penetration Testing 69

Bleeping Computer

JANUARY 27, 2024

The Kansas City Area Transportation Authority (KCATA) announced it was targeted by a ransomware attack on Tuesday, January 23. [.

Ransomware 81

Ransomware 81

Security Boulevard

JANUARY 27, 2024

Safeguarding our online accounts has never been more crucial. One of the most effective tools at our disposal is Two-Factor Authentication (2FA). Let’s discuss how 2FA adds an essential layer of protection to your digital life. Two-Factor Authentication is a security process in which users provide two different authentication factors to verify themselves.

Authentication 64

Authentication Accountability Hacking 64