Szolgáltatóknak

Actively abused security issues newly included by the Cybersecurity and Infrastructure Security Agency to its Known Exploited Vulnerabilities catalog reached 185 this year, compared with 187 in 2023, bringing the total of flaws added by the agency since the catalog's inception over two years ago to 1,238, The Cyber Express reports.

Open-source file archiving software 7-ZIP was noted by its creator Igor Pavlov to not have been impacted by any security issue after verified X user @NSA_Employee39 purportedly leaked a zero-day affecting the archiver that could allegedly be exploited for arbitrary code execution, according to Security Affairs.

Texas has alerted half a dozen companies — including Affinity Solutions, Fifty Technology, HubSpot Inc., LoopMe Limited, Spectrum Mailing Lists, and ZenLeads Inc. — to immediately register to the state's data broker registries to avoid daily fines of at least $100 for each day that they are unregistered, reports The Record, a news site by cybersecurity firm Recorded Future.

CNN reports that the U.S. Supreme Court has been sought by President-elect Donald Trump to delay the implementation of a ban on TikTok poised to be effective just a day prior to his inauguration on Jan. 20.

Hundreds of organizations — including Rite Aid, Frontier Communications, Christie's, and Planned Parenthood of Montana — have already been compromised by the RansomHub ransomware-as-a-service operation less than a year after its emergence after enlisting affiliates of the ALPHV/BlackCat and LockBit ransomware gangs, which had been dismantled earlier this year, according to The Register.

Malicious job offers purporting to be from widely known companies have been leveraged by threat actors to facilitate the distribution of cryptocurrency-stealing malware, reports Cybernews.

Rhode Island had some files from its Deloitte-managed public benefits computer system RIBridges leaked following a Brain Cipher ransomware attack earlier this month, according to The Associated Press.

AI tools will enable significant productivity and efficiency benefits for organizations in the coming year, but they also will exacerbate privacy, governance, and security risks.

While most of us are preparing the switch to a new year (If it&#x27s already the case for you: Happy New Year!), Attackers never stop and implement always new tricks to defeat our security controls. For a long time now, we have been flooded by sextortion emails. This is a kind of blackmail where someone threatens to share explicit images or videos unless the victim meets their demands. Even today, I receive regularly some of them.