Security Affairs

DECEMBER 16, 2023

The Hunters International ransomware gang claims to have hacked the Fred Hutchinson Cancer Center (Fred Hutch). Another healthcare organization suffered a ransomware attack, the Hunters International ransomware gang claims to have hacked the Fred Hutchinson Cancer Center (Fred Hutch). The ransomware gang has added the organization to its dark web leak site and is threatening the victim to leak the alleged stolen data.

Ransomware 141

Ransomware Hacking Insurance Healthcare 141

Bleeping Computer

DECEMBER 16, 2023

MongoDB is warning that its corporate systems were breached and that customer data was exposed in a cyberattack that was detected by the company earlier this week. [.

119

119

The Hacker News

DECEMBER 16, 2023

MongoDB on Saturday disclosed it's actively investigating a security incident that has led to unauthorized access to "certain" corporate systems, resulting in the exposure of customer account metadata and contact information.

Accountability 109

Accountability Software 109

Bleeping Computer

DECEMBER 16, 2023

Microsoft announced a new Windows Protected Print Mode (WPP), introducing significant security enhancements to the Windows print system. [.

122

122

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

WIRED Threat Level

DECEMBER 16, 2023

Plus: Apple tightens anti-theft protections, Chinese hackers penetrate US critical infrastructure, and the long-running rumor of eavesdropping phones crystallizes into more than an urban legend.

Surveillance 100

Surveillance Hacking 100

Bleeping Computer

DECEMBER 16, 2023

A Mirai-based botnet named 'InfectedSlurs' is exploiting a remote code execution (RCE) vulnerability in QNAP VioStor NVR (Network Video Recorder) devices to hijack and make them part of its DDoS (distributed denial of service) swarm. [.

DDOS 92

DDOS Malware 92

Security Boulevard

DECEMBER 16, 2023

Network Security Policy Compliance Having a well-defined network security policy is crucial for organizations to maintain compliance with cybersecurity standards. A network security policy outlines the rules and guidelines within a network. These rules and guidelines ensure the confidentiality, integrity, and availability of data of the network. It serves as a critical framework for managing … The Ultimate Guide to Network Segmentation Compliance: Ensuring Cybersecurity Standards Read More » The

Policy Compliance 64

Policy Compliance Cybersecurity Network Security 64

Penetration Testing

DECEMBER 16, 2023

IDEMIA, a prominent player in this field, recently issued an advisory that highlights critical vulnerabilities in its Access and Time Biometric Terminals. The advisory, released in November 2023, focuses on multiple vulnerabilities affecting products... The post IDEMIA’s Big Glitch: Critical Vulnerabilities Expose Biometric Terminals appeared first on Penetration Testing.

Penetration Testing 88

Penetration Testing 88

Security Boulevard

DECEMBER 16, 2023

Caves and Muddy Waters The Tham Luang cave rescue, which took place in 2018, was a high-stakes operation in northern Thailand to save a youth soccer team and their coach who were trapped inside a flooded cave. The monsoon rains … The Murky Waters of API Visibility and What That Means for Your Company Read More » The post The Murky Waters of API Visibility and What That Means for Your Company appeared first on TechSpective.

Security Awareness 64

Security Awareness 64

Penetration Testing

DECEMBER 16, 2023

In the fast-paced world of Internet communications, staying ahead of security threats is not just a choice but a necessity. Recently, 3CX, a renowned VoIP communications company, has issued a stark warning to its... The post CVE-2023-49954: Critical SQL Injection Vulnerability in 3CX CRM Integration appeared first on Penetration Testing.

Penetration Testing 82

Penetration Testing Internet Internet 82

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Software

Security Boulevard

DECEMBER 16, 2023

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada ; via the organizations YouTube channel. Permalink The post DEF CON 31 – Ting-Yu [NiNi] Chen’s ‘Review On The Less Traveled Road – 9 Yrs of Overlooked MikroTik PreAuth RCE’ appeared first on Security Boulevard.

Architecture 59

Architecture Education Information Security Cybersecurity 59

WIRED Threat Level

DECEMBER 16, 2023

Plus: Hackers reveal flaws in crypto wallets holding $1 billion, a massive breach of Danish electric utilities, and more.

Cybersecurity 57

Cybersecurity Ransomware Hacking 57