Skip to main content
To Customer Support To Customer Support

Welcome

News, Announcements, Tech Discussions

44867 Topics
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Ukraine arrests rogue VPN operator providing access to Runet

October 11 2024 By Bill Toulas Ukraine's cyber police have arrested a 28-year-old man who operated a massive virtual private network (VPN) service, allowing people from within the country to access the Russian internet (Runet).Runet is the portion of the internet that includes Russian sites on the ".ru" and ".su" top-level domains, including government sites, social media platforms, search engines, and various news platforms from the country. The Russian government has taken steps to control, restrict, monitor, and isolate from the broader global internet,Per restrictions and sanctions imposed by Ukraine's National Security and Defense Council (NSDC), access to the Runet is forbidden. Hence, Ukrainian internet service providers (ISPs) block access to Russian platforms from within the country. >>Full Article<<

30
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
ShadowLogic Attack Targets AI Model Graphs to Create Codeless Backdoors

HiddenLayer details ShadowLogic, a new method of creating codeless backdoors in AI models by manipulating their graphs. October 11 2024 By Ionut Arghire Manipulation of an AI model’s graph can be used to implant codeless, persistent backdoors in ML models, AI security firm HiddenLayer reports.Dubbed ShadowLogic, the technique relies on manipulating a model architecture’s computational graph representation to trigger attacker-defined behavior in downstream applications, opening the door to AI supply chain attacks.Traditional backdoors are meant to provide unauthorized access to systems while bypassing security controls, and AI models too can be abused to create backdoors on systems, or can be hijacked to produce an attacker-defined outcome, albeit changes in the model potentially affect these backdoors.By using the ShadowLogic method, HiddenLayer says, threat actors can implant codeless backdoors in ML models that will persist across fine-tuning and which can be used in highly targeted

20
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Modern TVs have “unprecedented capabilities for surveillance and manipulation,” group reveals

 October 11 2024 By Pieter Arntz Your television is debuting the latest, most captivating program: You.In a report titled “How TV Watches Us: Commercial Surveillance in the Streaming Era,” the Center for Digital Democracy (CDD) spotlighted a massive data-driven surveillance apparatus that ensnares the public through modern television sets.“The widespread technological and business developments that have taken place during the last five years have created a connected television media and marketing system with unprecedented capabilities for surveillance and manipulation.”In cooperation with data brokers, streaming video programming networks, Connected Television (CTV) device companies, and smart TV manufacturers are creating detailed digital dossiers about viewers, based on a person’s identity information, viewing choices, purchasing patterns, and thousands of online and offline behaviors. >>Full Article<<

20
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Iran and China-linked actors used ChatGPT for preparing attacks

October 11 2024 By Pierluigi Paganini OpenAI disrupted 20 cyber and influence operations in 2023, revealing Iran and China-linked actors used ChatGPT for planning ICS attacks.OpenAI announced the disruption of over 20 cyber and influence operations this year, involving Iranian and Chinese state-sponsored hackers.The company uncovered the activities of three threat actors abusing ChatGPT to launch cyberattacks. One of these groups is CyberAv3ngers, which is a threat actor linked to the Iranian Iranian Islamic Revolutionary Guard Corps (IRGC).In the past, the group targeted industrial control systems at water utilities in Ireland and the U.S.. Rather than using advanced hacking techniques, they exploited systems with default credentials to compromise target networks. >>Full Article<<

50
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Casio Hit by Cyberattack

Casio says a recent cyberattack has caused some system disruptions and it’s investigating whether a data breach has occurred.  October 10, 2024 By Eduard Kovacs Japanese electronics giant Casio revealed on Tuesday that a recent cyberattack caused some disruptions. The company said it detected unauthorized access to its network on October 5. The intrusion resulted in a system failure and led to the disruption of some services.Casio has launched an investigation and is trying to determine whether any personal or other sensitive information has been compromised as a result of the cyberattack. Authorities have been notified and the company has restricted external access to its systems as part of its incident response. >>Full Article<<

51
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Burning Zero Days: Suspected Nation-State Adversary Targets Ivanti CSA

By Faisal Abdul Malik Qureshi, John Simmons, Jared Betts, Luca Pugliese, Trent Healy, Ken Evans and Robert Reyes | October 11, 2024 Affected Platforms: Ivanti Cloud Services Appliance version 4.6 and priorImpacted Users: Any organizationImpact: Remote attackers gain control of the vulnerable systemsSeverity Level: Critical Today FortiGuard Labs is releasing this blog post about a case where an advanced adversary was observed exploiting three vulnerabilities affecting the Ivanti Cloud Services Appliance (CSA). At the time of our investigation, two out of the three identified vulnerabilities were not publicly known. This incident is a prime example of how threat actors chain zero-day vulnerabilities to gain initial access to a victim’s network. BackgroundIn a recent incident response engagement, FortiGuard Incident Response (FGIR) services were engaged by a customer to investigate malicious communication originating from their network. During the investigation, FGIR came across an advers

30
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Mamba 2FA Cybercrime Kit Targets Microsoft 365 Users

A stealthy new underground offering uses sophisticated adversary-in-the-middle (AitM) techniques to convincingly serve up "Microsoft" login pages of various kinds, with dynamic enterprise branding.   October 9, 2024 By Tara Seals A phishing-as-a-service (PhaaS) kit dubbed Mamba 2FA is targeting Microsoft 365 users using a variety of convincing adversary-in-the-middle (AitM) disguises.According to the Sekoia Threat Detection & Research (TDR) team, the kit, which goes for $250 per month on underground cybercrime forums, can present a number of faux login pages to unsuspecting users. It can imitate OneDrive, a SharePoint Online secure link, or a generic Microsoft sign-in page; or it can show the user a purported voicemail retrieval link that redirects to a sign-in page after a click.In all cases, it dynamically reflects enterprise targets' branding, including logos and background image. >>Full Article<<

30
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Awaken Likho APT group targets Russian government with a new implant

October 9, 2024 By Pierluigi Paganini A threat actor tracked as Awaken Likho is targeting Russian government agencies and industrial entities, reported cybersecurity firm Kaspersky.A recent investigation by Kaspersky researchers into the APT group Awaken Likho (aka Core Werewolf and PseudoGamaredon) uncovered a new campaign from June to August 2024, showing a shift from UltraVNC to the MeshCentral platform for remote access. The threat actor continues to target Russian government entities and enterprises.The experts detected a new implant used by the group, the malware was delivered via phishing to gain remote control over systems, shifting from UltraVNC to MeshAgent. The implant was distributed through malicious URLs in phishing emails, while the attackers used methods like self-extracting archives and Golang droppers in previous campaigns. This campaign highlights the group’s continued efforts to refine their remote access strategies. >>Full Article<<

20
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Palo Alto fixed critical flaws in PAN-OS firewalls that allow for full compromise of the devices

October 10, 2024 By Pierluigi Paganini Palo Alto fixed critical flaws in PAN-OS firewalls, warning that attackers could chain these vulnerabilities to hijack the devices.Palo Alto Networks addressed multiple vulnerabilities that an attacker can chain to hijack PAN-OS firewalls.The vulnerabilities reside in the Palo Alto Networks’ Expedition solution, which is a migration tool designed to help organizations move configurations from other firewall platforms (like Check Point, Cisco, and others) to Palo Alto’s PAN-OS.“Multiple vulnerabilities in Palo Alto Networks Expedition allow an attacker to read Expedition database contents and arbitrary files, as well as write arbitrary files to temporary storage locations on the Expedition system.” reads the advisory. “Combined, these include information such as usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.”An attacker could exploit the flaws to access sensitive data, such as user credentials, and p

20
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Two never-before-seen tools, from same group, infect air-gapped devices

It's hard enough creating one air-gap-jumping tool. GoldenJackal did it 2x in 5 years.Dan Goodin – 9 Oct 2024 Researchers have unearthed two sophisticated toolsets that a nation-state hacking group—possibly from Russia—used to steal sensitive data stored on air-gapped devices, meaning those that are deliberately isolated from the Internet or other networks to safeguard them from malware.One of the custom tool collections was used starting in 2019 against a South Asian embassy in Belarus. A largely different toolset created by the same threat group infected a European Union government organization three years later. Researchers from ESET, the security firm that discovered the toolkits, said some of the components in both were identical to those fellow security firm Kaspersky described in research published last year and attributed to an unknown group, tracked as GoldenJackal, working for a nation-state. Based on the overlap, ESET has concluded that the same group is behind all the attac

30
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Crypto-stealing malware campaign infects 28,000 people

October 9, 2024 By Bill Toulas Over 28,000 people from Russia, Turkey, Ukraine, and other countries in the Eurasian region were impacted by a large-scale cryptocurrency-stealing malware campaign.The malware campaign disguises itself as legitimate software promoted via YouTube videos and fraudulent GitHub repositories where victims download password-protected archives that initiate the infection.According to cybersecurity firm Dr. Web, the campaign uses pirated office-related software, game cheats and hacks, and even automated trading bots to deceive users into downloading malicious files. >>Full Article<<

40
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Fidelity Data Breach Exposed Personal Data of 77,000 Customers

The cyberattack on Fidelity impacts a small percentage of customers. Here's what you can do if you're affected. Oct 10, 2024 By CNET Fidelity Investments has suffered a data breach that has compromised the personal information of 77,000 customers, the company said in a notice to the Maine attorney general’s office on Wednesday.The breach occurred in August and is tied to two accounts recently opened with the asset management company, according to the filing. It’s not clear how these accounts allowed hackers access to customer data. Fidelity has not revealed what specific customer data was accessed by thieves, but said after concluding its investigation that no customer accounts or funds were compromised in the breach.“We detected this activity on August 19 and immediately took steps to terminate the access,” Fidelity said in a notification letter to customers.  >>Full Article<<

30
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
E-skimming campaign uses Unicode obfuscation to hide the Mongolian Skimmer

October 10, 2024 By Pierluigi PaganiniJscrambler researchers found a skimming campaign using unique JavaScript obfuscation with accented characters to hide a skimmer named Mongolian Skimmer.Jscrambler researchers uncovered a skimming campaign using unique JavaScript obfuscation with accented characters to hide a skimmer dubbed ‘Mongolian Skimmer.’The attackers used unusual Unicode characters for variables and function names.The skimmer was named “Mongolian Skimmer” after researchers found it used the Unicode character “Mongolian Letter OE” as an identifier in the code.Jscrambler researchers analyzed a malware sample employed in this skimming campaign that was shared from Sansec threat intel. >>Full Article<<

30
Jasper_The_Rasper
Moderator
1 month ago
ProTruckDriver
Moderator
ProTruckDriverModerator
posted in Water Cooler
Hurricane Milton Heading For Florida

This hurricane doesn’t look good for you @TylerM Looks like you’re right in the path of Milton when it makes landfall at Cat 3. You are probably now preparing your home for the hurricane and / or making plans to evacuate the area. Thoughts and prayers from our family to yours that you and your family will remain safe and that there isn’t too much damage done.  

11819
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Lamborghini Carjackers Lured by $243M Cyberheist

October 9, 2024 By Brian Krebs The parents of a 19-year-old Connecticut honors student accused of taking part in a $243 million cryptocurrency heist in August were carjacked a week later — while out house-hunting in a brand new Lamborghini. Prosecutors say the couple was beaten and briefly kidnapped by six young men who traveled from Florida as part of a botched plan to hold the parents for ransom.Image: ABC7NY.  youtube.com/watch?v=xoiaGzwrunYLate in the afternoon of Aug. 25, 2024 in Danbury, Ct., a married couple in their 50s pulled up to a gated community in a new Lamborghini Urus (investigators say the sports car still had temporary tags) when they were intentionally rear-ended by a Honda Civic. >>Full Article<<

30
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Actively exploited Firefox zero-day fixed, update ASAP! (CVE-2024-9680)

See here for more information - Mozilla Firefox 131.0.2 Released Oct 8, 2024 October 10, 2024 By Zeljka Zorz Mozilla has pushed out an emergency update for its Firefox and Firefox ESR browsers to fix a vulnerability (CVE-2024-9680) that is being exploited in the wild.About CVE-2024-9680Reported by ESET malware researcher Damien Schaeffer, CVE-2024-9680 is a use-after-free vulnerability in the browser’s Animation timelines and, according to Mozilla, has been exploited to achieve code execution in the content process.Additional details about the vulnerability or the attacks are yet to be shared.According to Mozilla’s engineers, the versions with the fix – Firefox 131.0.2, Firefox ESR 115.16.1 and Firefox ESR 128.3.1 – have been shipped within 25 hours after the vulnerability was reported to them. >>Full Article<< 

90
Jasper_The_Rasper
Moderator
1 month ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Internet Archive hacked, data breach impacts 31 million users

October 9, 2024 By Lawrence Abrams Updates added at end of the article.Internet Archive's "The Wayback Machine" has suffered a data breach after a threat actor compromised the website and stole a user authentication database containing 31 million unique records.News of the breach began circulating Wednesday afternoon after visitors to archive.org began seeing a JavaScript alert created by the hacker, stating that the Internet Archive was breached. Update 10/10/24: Internet Archive founder Brewster Kahle shared an update on X last night, confirming the data breach and stating that the threat actor used a JavaScript library to show the alerts to visitors."What we know: DDOS attacked-fended off for now; defacement of our website via JS library; breach of usernames/email/salted-encrypted passwords," reads a first status update tweeted last night."What we've done: Disabled the JS library, scrubbing systems, upgrading security."A second update shared this morning states that DDoS attacks hav

20
Jasper_The_Rasper
Moderator
1 month ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Alert CISA Adds Three Known Exploited Vulnerabilities to Catalog Release Date October 09, 2024

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2024-23113·   Fortinet Multiple Products Format String Vulnerability·  CVE-2024-9379·   Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability·  CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact

30
TripleHelix
Moderator
1 month ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Mozilla Firefox 131.0.2 Released Oct 8, 2024

Version 131.0.2, first offered to Release channel users on October 9, 2024Fixed Security fix. Via Internal Updater. More info here: https://www.mozilla.org/en-US/firefox/131.0.2/releasenotes/ 

80
TripleHelix
Moderator
1 month ago
R
New Member
Robert_RiverNew Member
asked in Community 101
Carbonite Error "Your account has been disabled"

But my online access says my account is good, I can log in, see everything, it’s paid up - etc/

331
ProTruckDriver
Moderator
1 month ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Google Chrome Stable Channel Update for Desktop Tuesday October 08, 2024

The Stable channel has been updated to 129.0.6668.100/.101 for Windows, Mac and 129.0.6668.100 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_8.html Webroot users make sure to re-add back to Privacy Protection!  

70
TripleHelix
Moderator
1 month ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Alert CISA Adds Three Known Exploited Vulnerabilities to Catalog Release Date October 08, 2024

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2024-43047·  Qualcomm Multiple Chipsets Use-After-Free Vulnerability·  CVE-2024-43572·  Microsoft Windows Management Console Remote Code Execution Vulnerability·  CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing VulnerabilityThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet f

30
TripleHelix
Moderator
1 month ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Adobe Security Bulletin: 08 Oct 2024

APSB24-52 : Security update available for Adobe Substance 3D PainterAPSB24-73 : Security update available for Adobe CommerceAPSB24-74 : Security update available for Adobe Dimension APSB24-76 : Security update available for Adobe AnimateAPSB24-78 : Security update available for Adobe LightroomAPSB24-79 : Security update available for Adobe InCopyAPSB24-80 : Security update available for Adobe InDesign APSB24-81 : Security update available for Adobe Substance 3D StagerAPSB24-82 : Security update available for Adobe FrameMaker

70
TripleHelix
Moderator
1 month ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
SAP Security Patch Day – October 2024

On 8th of October 2024, SAP Security Patch Day saw the release of 6 new Security Notes. Further, there were 6 updates to previously released Security Notes. https://support.sap.com/en/my-support/knowledge-base/security-notes-news/october-2024.html

40
TripleHelix
Moderator
1 month ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Android Security Bulletin October 2024

Published October 7, 2024The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2024-10-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version.Android partners are notified of all issues at least a month before publication. Source code patches for these issues have been released to the Android Open Source Project (AOSP) repository and linked from this bulletin. This bulletin also includes links to patches outside of AOSP.The most severe of these issues is a high security vulnerability in the System component that could lead to remote code execution with no additional execution privileges needed. The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigations are turned off for development purposes or if successfully bypassed.Refe

30
TripleHelix
Moderator
1 month ago

Badges

Show all badges

Join the Conversation

Terms & Conditions