Biztonsági szemle

A 2023. 42. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2023.10.03. és 2023.10.19. között kezelt incidensek statisztikai adatait is tartalmazza.

We all know to look out for phishing emails, but sometimes these scams can catch us off guard. Learn to identify minute details that, when brought together, shine light on a larger attack.

VMware released advisories VMSA-2023-0021 and VMSA-2023-0022 that have been rated as important. They are as follows:

While we’ve seen an unsettling surge in the number of zero-days targeting Apple devices, security pros must look more broadly and understand how the Apple zero-days fit into the full context of cyber threats and espionage.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

More threat actors have been exploiting QR codes to facilitate advanced phishing attacks, reports SiliconAngle.

Subjecting payment systems around the world to a catastrophic cyberattack could result in a $3.5 trillion loss in global gross domestic product over a five-year period, according to The Record, a news site by cybersecurity firm Recorded Future.

Major U.S. biotechnology and genetic testing firm 23andMe had 4.1 million more genetic data profiles for individuals in Great Britain and Germany compromised through credential stuffing attacks exposed by a threat actor following the leak of...

Tech companies, professional services organizations, and government entities have been subjected to attacks exploiting a critical information disclosure vulnerability in Citrix NetScaler Application Delivery Controller and NetScaler Gateway instances...

Organizations in the oil and gas and defense industries across Eastern Europe have been targeted by spear-phishing attacks leveraging a new iteration of the MATA backdoor framework from August 2022 to May 2023, according to BleepingComputer.

Vulnerable Jupyter Notebook instances have been subjected to attacks by a suspected Tunisia-based threat actor leveraging the novel Qubitstrike intrusion set, which facilitates cryptomining and cloud compromise, The Hacker News reports.