eSecurity Planet

NOVEMBER 6, 2023

EoP exploit for AMD driver (PDFWKRNL.sys) on HVCI-enabled Windows 11 The fix: To address this issue, thorough action is required: Driver Patching: Developers and manufacturers of affected drivers must deliver patches and upgrades as soon as possible to address the reported vulnerabilities.

Software 112

Software Education Ransomware Firmware 112

eSecurity Planet

MARCH 25, 2024

The problem: All Saflok system electronic locks are affected by a vulnerability that impacts “both the key derivation algorithm used to generate MIFARE Classic® keys and the secondary encryption algorithm used to secure the underlying card data,” according to manufacturer Dormakaba.

Computers and Electronics 62

Computers and Electronics Software Accountability Authentication 62

Security Boulevard

JANUARY 18, 2024

Organizations first looked to augment their existing web application security tools and processes to “address” API security. Unfortunately, the security challenges associated with APIs can't be solved by simply updating existing testing tools and edge security defenses to check-the-box technologies that claim to provide "API security."

Risk 59

Risk Government Artificial Intelligence Threat Detection 59

eSecurity Planet

MAY 2, 2024

Ransomware & Data Theft Organizations worldwide continue to feel the pain of ransomware attacks, although many ransomware gangs may be shifting to extortion over data theft instead of encrypted data. Secure remote access : Enables encrypted connections between internal network resources and remote users using a variety of methods.

Cybersecurity 121

Cybersecurity DDOS Penetration Testing Passwords 121

SecureList

SEPTEMBER 11, 2023

As with most cyberextortionists lately, the Cuba gang encrypts victims’ files and demands a ransom in exchange for a decryption key. Industry affiliation does not seem to be a factor: victims have included retailers, financial and logistical services, government agencies, manufacturers, and others.

Ransomware 142

Ransomware Encryption Malware DDOS 142

SecureList

APRIL 27, 2021

On February 24, the National Security Defense Council of Ukraine (NSDC) publicly warned that a threat actor had exploited a national documents circulation system (SEI EB) to distribute malicious documents to Ukrainian public authorities.

Malware 143

Malware Spyware Government Social Engineering 143

ForAllSecure

MARCH 10, 2021

Gosh, there must be 20 or more villages at DEF CON if you want to learn radio if you want to learn tampering with seals if you want to learn encryption if you want to learn, you name it. The idea, as in any security defense is to sufficiently frustrate an attacker so he or she will go elsewhere. That's pretty easy to do.

Hacking 52

Hacking Marketing Government InfoSec 52

ForAllSecure

MARCH 9, 2021

Gosh, there must be 20 or more villages at DEF CON if you want to learn radio if you want to learn tampering with seals if you want to learn encryption if you want to learn, you name it. The idea, as in any security defense is to sufficiently frustrate an attacker so he or she will go elsewhere. That's pretty easy to do.

Hacking 52

Hacking Marketing Government InfoSec 52

CyberSecurity Insiders

DECEMBER 8, 2021

Have hope that through the hard work and brilliant minds behind these security defenses that 2022 will not be a repeat of such high level attacks. Learn more about what security leaders have to say about the upcoming year below: Neil Jones, cybersecurity evangelist, Egnyte.

Data breaches 142

Data breaches Ransomware Government Cybersecurity 142