Magánszemélyeknek

Several new attacks leveraging Bluetooth vulnerabilities, collectively tracked as CVE-2023-24023 and dubbed BLUFFS, have been identified by EURECOM to enable adversary-in-the-middle intrusions between connected devices by compromising the forward and future secrecy mechanisms of Bluetooth, reports The Hacker News.

A faux security alert purports to provide a fix for an RCE flaw, but instead creates a user with admin privileges and spreads a backdoor to infected sites.

The UK has disputed a report from The Guardian noting that its Sellafield nuclear site had its networks hacked by Russia- and China-linked hacking groups, stating that there has been no evidence suggesting such a compromise, according to Reuters. "Our monitoring systems are robust and we have a high degree of confidence that no such malware exists on our system.

U.S. web tracking and analytics firm New Relic had its internal environment for hosting customer usage data and other logs impacted in a recent cyberattack, SecurityWeek reports.

Indiana-based liberal arts school DePauw University has data from current and prospective students compromised following a cyberattack detected on Oct. 31, which has since been claimed by the Black Suit ransomware operation, reports The Record, a news site by cybersecurity firm Recorded Future.

Major U.S. multinational confectionary firm The Hershey Company had data from 2,214 individuals stolen following a phishing attack in early September, according to The Register.

SecurityWeek reports that more than $3 million worth of cryptocurrency has been stolen by North Korean hackers collectively tracked as the Lazarus Group since its emergence in 2017.

Data breaches impacting the U.S. government between 2014 and November 2023 totaled 1,283, impacting more than 201 million records and resulting in over $30 billion in losses, reports TechRadar.

AI could be a net positive for security, with a caveat: It could make security teams dangerously complacent.

US government organizations responsible for making sure healthcare products are safe and effective have proposed rules and are soliciting industry feedback regarding artificial intelligence and machine learning.