Biztonsági szemle

Two US senators accuse carmakers of deceptive language and shifty practices in sharing and resale of driver data.

The Cisco Live debut of the all-new Patching Station, a memorable personalization experience powered by Webex Connect.

While the DDoS attack was the initial trigger, Microsoft said it was “amplified” by an internal misconfiguration.

As part of its extensive project portfolio, the Apache Foundation supports OFBiz, a Java-based framework for creating ERP (Enterprise Resource Planning) applications [1]. OFBiz appears to be far less prevalent than commercial alternatives [2]...

Numerous Electoral Commission accounts had similar passwords or default credentials, which could increase vulnerability to intrusions.

Intrusions involved the delivery of phishing emails with malicious RAR or ISO attachments, with the former triggering direct DBatLoader execution and the latter obscuring a Windows batch script with a PEM-encoded certificate revocation list...

Attackers leveraged agreement-spoofing phishing emails to deliver a RAR archive with a malicious DLL, which would execute DSDownloader.

CyberScoop reports that artificial intelligence, low influence operation costs, and legal challenges were noted by Senate Intelligence Chairman Mark Warner, D-Va., to worsen misinformation and disinformation campaigns targeted at the upcoming...

Influence operations are expected to exploit recent developments in the presidential campaign, including President Joe Biden's dropping of a reelection bid in favor of Vice President Kamala Harris and the attempted assassination of former President...

Cisco Defense Orchestrator is designed to simplify the management of secure firewalls. With the introduction of Cisco CDO APIs, we enable Managed Security Service Providers (MSSPs) to unlock unprecedented levels of operational efficiency.

The security vulnerabilities, CVE-2024-37394, CVE-2024-37395, and CVE-2024-37396, could lay open proprietary and sensitive research to data thieves.

If paying a ransom is prohibited, organizations won't do it — eliminating the incentive for cybercriminals. Problem solved, it seems. Or is it?