Biztonsági szemle

Security researchers at Kaspersky's ICS CERT division revealed critical vulnerabilities in Telit Cinterion cellular modems, which are popularly used in the industrial, healthcare, and telecommunications sectors, BleepingComputer reports.

When setting authentication token expiry policies, always lean in to security over employee convenience.

Cybersecurity researchers have uncovered a new attack method that they have dubbed LLMjacking, which targets cloud-hosted large language model services using stolen cloud credentials, after which attackers would attempt to sell the illegal access...

Brisbane-based mortgage lender Firstmac has become the latest Australian business to be targeted by cybercriminals, warning customers that it suffered a data breach a day after the new Embargo cyber-extortion group leaked over 500 GB of data...

More than 538,000 Ohio Lottery players have had their names and Social Security numbers compromised in a Christmas Eve data breach revealed this week in a regulatory filing by the state lottery, The Register reports.

Kaspersky's APT trends report for the first quarter highlighted the emergence of a new threat from the North Korean threat group Kimsuky, in the form of a new sophisticated malware named Durian, which the group has used in targeted cyber attacks...

BIND 9.16 introduced a new method to maintain DNSSEC on your zones. In addition to the inline-signing and auto-dnssec configuration options, there is now dnssec-policy (also see the configuration reference in the ARM). dnssec-policy replaces auto...

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-4671 Google Chromium in Visuals Use-After-Free Vulnerability These types of vulnerabilities are frequent attack...

Companies need to support their developers and coders need to double-down on the value of high-quality source code to the business.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

I was asked if I could provide mote details on the following sentence from my diary entry " nslookup's Debug Options":

Dell began notifying customers this week after database records surfaced on a cybercrime forum.