Security Bulletin
4 Jan 2024
Biztonsági szemle
23andMe says users’ bad password hygiene to blame for leak affecting 6.9M
The ancestry and biotech company company said victims “were not affected by any security breach” under California’s privacy law.
4 Jan 2024
Biztonsági szemle
Ukraine: Russia hacked webcams to aid missile, drone strikes on Kyiv
Security pros say compromising IoT devices, as well as industrial control and operational tech, is an effective tactic in modern warfare.
4 Jan 2024
Biztonsági szemle
Russia Kyivstar Hack Should Alarm West, Ukraine Security Chief Warns
If Ukraine's core telephone network can be taken out, organizations in the West could easily be next, Ukraine's SBU chief says.
4 Jan 2024
Biztonsági szemle
LastPass to enforce a 12-character requirement for master passwords
Security pros say while the 12-character requirement by LastPass is a step in the right direction, teams still need to enforce multi-factor authentication and practice continuous monitoring.
4 Jan 2024
Biztonsági szemle
Administrator Account For Middle East Internet Registry Hacked
The compromise reportedly led to corruption in the routing of a Spanish telecom provider's network.
4 Jan 2024
Biztonsági szemle
Mandiant's X (Twitter) Account Hacked to Promote Crypto Scam
The hours-long breach — since resolved — directed users to a suspicious website as attackers posing as crypto-wallet service Phantom took over the feed of the Google subsidiary.
4 Jan 2024
Biztonsági szemle
Wireshark updates, (Thu, Jan 4th)
The Wireshark Foundation has released 3 new versions of its popular network protocol analyzer. They are versions 4.2.1 (which fixes 5 CVEs and a number of other bugs), 4.0.12 (2 CVEs + additional...
4 Jan 2024
Biztonsági szemle
EDNS Client Subnet (ECS) for Resolver Operators - Getting Started
ISC has implemented EDNS Client Subnet (ECS) for Resolvers in the BIND Supported Preview (-S) edition. This feature is not available in public (Open Source) BIND. BIND does not have an authoritative ECS feature At one time, BIND did offer an...
4 Jan 2024
Biztonsági szemle
Navigating the New Age of Cybersecurity Enforcement
The SolarWinds SEC lawsuit illuminates the potential risks faced by CISOs and other cybersecurity executives.
4 Jan 2024
Biztonsági szemle
'Cyber Toufan' Hacktivists Leaked 100-Plus Israeli Orgs in One Month
A new threat actor just concluded a month and a half of two major leaks per day. Now comes phase two: follow-on attacks.
4 Jan 2024
Biztonsági szemle
CISA Releases Three Industrial Control Systems Advisories
CISA released three Industrial Control Systems (ICS) advisories on January 4, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-004-01 Rockwell Automation...
4 Jan 2024
Biztonsági szemle
Rockwell Automation FactoryTalk Activation
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Activation Manager Vulnerabilities: Out-of-Bounds Write 2. RISK EVALUATION Successful exploitation of...
Pagination
- Previous page ‹‹
- Page 1090
- Next page ››