Skip to main content
To Customer Support To Customer Support

Welcome

News, Announcements, Tech Discussions

44858 Topics
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
FBI, Partners Disrupt RedLine, Meta Stealer Operations

A collaboration with the FBI and law-enforcement agencies in Europe, the UK, and Australia, Operation Magnus has seized servers and source code related to the two malware families, which have stolen data from millions of victims worldwide.   October 29, 2024 By Elizabeth Montalbano The FBI in collaboration with various international law-enforcement agencies has seized the servers and source code for the RedLine and Meta stealers as part of Operation Magnus, and US authorities have charged one of RedLine's developers with various crimes. The stealers are responsible for the theft of millions of unique credentials from international victims, authorities said.The intelligence bureau and the US Department of Justice (DoJ) are among several international agencies — including Dutch National Police, Belgian Federal Police, Belgian Federal Prosecutor’s Office, UK National Crime Agency, Australian Federal Police, Portuguese Federal Police, and Eurojust — that on Oct. 28 disrupted the operation

20
Jasper_The_Rasper
Moderator
23 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
ChatGPT Jailbreak: Researchers Bypass AI Safeguards Using Hexadecimal Encoding and Emojis

New jailbreak technique tricked ChatGPT into generating Python exploits and a malicious SQL injection tool. October 29, 2024 By Eduard Kovacs Malicious instructions encoded in hexadecimal format could have been used to bypass ChatGPT safeguards designed to prevent misuse. The new jailbreak was disclosed on Monday by Marco Figueroa, gen-AI bug bounty programs manager at Mozilla, through the 0Din bug bounty program. Launched by Mozilla in June 2024, 0Din, which stands for 0Day Investigative Network, is a bug bounty program focusing on large language models (LLMs) and other deep learning technologies. 0Din covers prompt injection, denial of service, training data poisoning, and other types of security issues, offering researchers up to $15,000 for critical findings. It’s unclear how much a jailbreak such as Figueroa’s would be worth.   >>Full Article<< 

30
Jasper_The_Rasper
Moderator
23 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Apple security updates and Rapid Security Responses 29th October 2024

Apple security updates and Rapid Security Responses 29th October 2024  Name and information link Available for Release date Safari 18.1 macOS Ventura and macOS Sonoma 29 Oct 2024  https://support.apple.com/en-us/100100

40
Jasper_The_Rasper
Moderator
23 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Massive PSAUX ransomware attack targets 22,000 CyberPanel instances

October 29, 2024 By Lawrence Abrams Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware attack that took almost all instances offline.This week, security researcher DreyAnd disclosed that CyberPanel 2.3.6 (and likely 2.3.7) suffers from three distinct security problems that can result in an exploit allowing unauthenticated remote root access without authentication.Specifically, the researcher uncovered the following problems on CyberPanel version 2.3.6:Defective authentication: CyberPanel checks for user authentication (login) on each page separately instead of using a central system, leaving certain pages or routes, like ‘upgrademysqlstatus,’ unprotected from unauthorized access.  Command injection: User inputs on unprotected pages aren’t properly sanitized, enabling attackers to inject and execute arbitrary system commands. Security filter bypass: The security middleware only filters POST req

20
Jasper_The_Rasper
Moderator
23 days ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in Threat Reports
Nastiest Malware 2023Nastiest Malware

Stream the Webinar on demand!https://www.brighttalk.com/webcast/18665/593543Check out our Nastiest Malware infographic attached below!  We've been doing the Nastiest Malware series for over 5 years now and in that time, we have seen a steady increase in the number and sophistication of malware attacks. Ransomware has been the most prevalent type of malware, with cybercriminals increasingly targeting businesses and organizations. Criminal actors in the Ransomware sector have come up with new “business models” and ransomware-as-a-service (RaaS) is dominating. Elite Ransomware authors appear to have concluded that profit sharing and risk mitigation are top contributors to their consistent success and reliable evasion from authorities. Malware payloads are becoming more sophisticated and difficult to detect, and we expect their tactics to be ever evolving. Reflecting on the past five years of the malware landscape offers invaluable insights into the evolution of cyber threats. In 2019, the

469116
M
New Member
23 days ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Alert CISA Releases Three Industrial Control Systems Advisories Release Date October 29, 2024

CISA released three Industrial Control Systems (ICS) advisories on October 29, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.ICSA-24-303-01 Siemens InterMesh Subscriber Devices ICSA-24-303-02 Solar-Log Base 15 ICSA-24-303-03 Delta Electronics InfraSuite Device MasterCISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.This product is provided subject to this Notification and this Privacy & Use policy.Vendor Siemens Delta Electronicshttps://www.cisa.gov/news-events/alerts/2024/10/29/cisa-releases-three-industrial-control-systems-advisories

30
TripleHelix
Moderator
23 days ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Mozilla Firefox 132.0 Released Oct 29, 2024

Release NotesChoose which Firefox Browser to download in your language.

111
ProTruckDriver
Moderator
23 days ago
ProTruckDriver
Moderator
ProTruckDriverModerator
posted in Tech Talk
How to Re-Enable Slow Motion Effects on MacOS

by: Paul Horowitz If you’re a long time Mac user, you might recall the Slow Motion effect that could be applied by holding the Shift key while minimizing and maximizing windows, as well as for other animations like opening Launchpad or using Mission Control. Some of the fun eye-candy effects on Mac go way the early days of Mac OS X (and we covered some of these all the way back in 2007!), but at some point in much later MacOS development, Apple has turned the optional Slow Motion features off. But, with a little defaults command magic, you can re-enable the Slow Motion effects on MacOS, even in the latest versions of MacOS Sequoia. ⇨⇨ Full Article ⇦⇦

91
MajorHavoc
Bronze VIP
24 days ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Vulnerability Summary for the Week of October 21, 2024 Released Oct 28, 2024

Document IDSB24-302The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:High: vulnerabilities with a CVSS base score of 7.0–10.0 Medium: vulnerabilities with a CVSS base score of 4.0–6.9 Low: vulnerabilities with a CVSS base score of 0.0–3.9Entries may include additional information provided by organizations and efforts sponsored by CISA. Thi

30
TripleHelix
Moderator
24 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
New tool bypasses Google Chrome’s new cookie encryption system

October 28, 2024 By Bill Toulas A researcher has released a tool to bypass Google's new App-Bound encryption cookie-theft defenses and extract saved credentials from the Chrome web browser.The tool, named 'Chrome-App-Bound-Encryption-Decryption,' was released by cybersecurity researcher Alexander Hagenah after he noticed that others were already figuring out similar bypasses.Although the tool achieves what multiple infostealer operations have already added to their malware, its public availability raises the risk for Chrome users who continue to store sensitive data in their browsers. >>Full Article<<

40
Jasper_The_Rasper
Moderator
24 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
US says Chinese hackers breached multiple telecom providers

October 28, 2024 By Bill Toulas The FBI and the U.S. Cybersecurity & Infrastructure Security Agency (CISA) have disclosed that Chinese hackers breached commercial telecommunication service providers in the United States.The breached entities have been warned, and the agencies are proactively alerting other potential targets of the elevated cyber activity."The U.S. Government is investigating the unauthorized access to commercial telecommunications infrastructure by actors affiliated with the People's Republic of China," reads the announcement."After the FBI identified specific malicious activity targeting the sector, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) immediately notified affected companies, rendered technical assistance, and rapidly shared information to assist other potential victims." >>Full Article<<

40
Jasper_The_Rasper
Moderator
24 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Brazen crims selling stolen credit cards on Meta's Threads

 The platform 'continues to take action' against illegal posts, we're told October 28, 2024 By Jessica Lyons Exclusive Brazen crooks are selling people's pilfered financial information on Meta's Threads, in some cases posting full credit card details, plus stolen credentials, alongside images of the cards themselves.SpyCloud security researcher Kyla Cardona says she spotted some of these posts while scrolling her feed."I was like, what is this? This is fullz information - sensitive PII that could be used for phishing, fraud, any type of cyberattack and cybercrime," Cardona said in an exclusive interview with The Register.A Meta spokesperson told us that it's "aware of this type of behavior, and continues to take action against accounts and content that violate our policies."  >>Full Article<<

40
Jasper_The_Rasper
Moderator
24 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
A crime ring compromised Italian state databases reselling stolen info

October 28, 2024 By Pierluigi Paganini Italian police arrested four and are investigating dozens, including Leonardo Maria Del Vecchio, for alleged unauthorized access to state databases.Italian authorities have arrested four individuals as part of an investigation into alleged illegal access to state databases. The police are also investigating dozens of other individuals, including the son of Luxottica founder Leonardo Maria Del Vecchio.The charges being pursued by investigators include criminal conspiracy for unauthorized access to computer systems, illegal interception, falsification of electronic communications, disclosure of confidential information, aiding and abetting, and extortion. >>Full Article<<

30
Jasper_The_Rasper
Moderator
24 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Black Basta operators phish employees via Microsoft Teams

October 28, 2024 By Zeljka Zorz Black Basta ransomware affiliates are still trying to trick enterprise employees into installing remote access tool by posing as help desk workers, now also via Microsoft Teams.Phishing via MS TeamsEarlier this year, Rapid7 warned about Black Basta using the following social engineering trick: they flood the target employee’s email inbox with spam – typically from automated systems or services that send confirmations or notifications – and then phone them to offer assistance, while posing as their organization’s IT help desk.Recently, though, they’ve also started using Microsoft Teams to reach out to potential victims.“After mass email spam events, the targeted users were added to Microsoft Teams chats with external users. These external users operated from Entra ID tenants they created to pose as support, admin, or help-desk staff,” ReliaQuest researchers discovered.Domains seen include:securityadminhelper.onmicrosoft[.]com supportserviceadmin.onmicroso

50
Jasper_The_Rasper
Moderator
24 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Free, France’s second largest ISP, confirms data breach after leak

October 28, 2024 By Sergiu Gatlan Free, a major internet service provider (ISP) in France, confirmed over the weekend that hackers breached its systems and stole customer personal information.The company, which says it had over 22.9 million mobile and fixed subscribers at the end of June, is the second-largest telecommunications company in France and a subsidiary of the Iliad Group, Europe's sixth-largest mobile operator by number of subscribers.Free has since filed a criminal complaint with the public prosecutor and notified the French National Commission for Information Technology and Civil Liberties (CNIL) and the National Agency for the Security of Information Systems (ANSSI) of the incident."The affected subscribers have been or will be informed by email shortly," a Free spokesperson told BleepingComputer, adding that "no operational impact was observed on our activities and services" and "all necessary measures were taken immediately to put an end to this attack and strengthen th

30
Jasper_The_Rasper
Moderator
24 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Kremlin-backed hackers have new Windows and Android malware to foist on Ukrainian foes

"Civil Defense" pushes hybrid espionage/influence campaign targeting recruits.Dan Goodin – 28 Oct 2024  Google researchers said they uncovered a Kremlin-backed operation targeting recruits for the Ukrainian military with information-stealing malware for Windows and Android devices.The malware, spread primarily through posts on Telegram, came from a persona on that platform known as "Civil Defense." Posts on the ​​@civildefense_com_ua telegram channel and the accompanying civildefense[.]com.ua website claimed to provide potential conscripts with free software for finding user-sourced locations of Ukrainian military recruiters. In fact, the software, available for both Windows and Android, installed infostealers. Google tracks the Kremlin-aligned threat group as UNC5812. Images justifying why permissions and bypassing of Play Protect are necessary. Credit: Google >>Full Article<<

50
Jasper_The_Rasper
Moderator
24 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Apple security updates and Rapid Security Responses 28th October 2024

Apple security updates and Rapid Security Responses 28th October 2024  Name and information link Available for Release date iOS 18.1 and iPadOS 18.1 iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later 28 Oct 2024 iOS 17.7.1 and iPadOS 17.7.1 iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later 28 Oct 2024 macOS Sequoia 15.1 macOS Sequoia 28 Oct 2024 macOS Sonoma 14.7.1 macOS Sonoma 28 Oct 2024 macOS Ventura 13.7.1 macOS Ventura 28 Oct 2024 watchOS 11.1 Apple Watch Seri

60
Jasper_The_Rasper
Moderator
24 days ago
TripleHelix
Moderator
TripleHelixModerator
posted in Security Industry News
Press Release CISA Launches #PROTECT2024 Election Threat Updates Webpage Released October 28, 2024

Related topics:Election SecurityWASHINGTON – Today, the Cybersecurity and Infrastructure Security Agency (CISA) launched a new one-stop shop website for election threat updates from CISA and our federal government partners. As foreign actors continue their efforts to influence and interfere with the 2024 elections, CISA is ensuring that information about the election threat environment is readily accessible.Part of the larger #Protect2024 site launched in January, the page aims to make it easier to find specific threat related products that the American public can use to stay informed and the election community can use to prepare, including:Joint Statements from CISA, ODNI and FBI on threats to the 2024 election ODNI Election Threat Updates FBI and CISA “Just So You Know” Joint PSA SeriesSince its initial launch, #Protect2024 has quickly grown and serves as the central point for critical resources, training lists and security services to support more than 8,000 election jurisdictions f

60
TripleHelix
Moderator
24 days ago
TylerM
Administrator
TylerMSr. Security Analyst & Community Manager
published in News & Announcements
🚨 Vote for OpenText Cybersecurity at the SDC Awards 2024! 🚨AWARDS

We are excited to share that OpenText Cybersecurity has been nominated for this year’s SDC Awards in the category of Channel Security Company of the Year! 🎉These awards are peer-voted, so we need your support to help us win. Here’s how you can help:🗳️ Vote for OpenText Cybersecurity: Vote here 💡 Please share this with your networks to get as many votes as possible. Every vote counts! Just a few key points:Voting closes on 1st November You must use a valid business email to cast your vote We are relying on partners and customers, as companies cannot vote for themselves📅 The awards ceremony will take place on 28th November in Central London, and we expect a fantastic turnout with around 15k unique voters from corporate end users and channel professionals across the EMEA region. Together, let’s make this happen! 💪Spread the word and show your support for OpenText Cybersecurity! 👏

889
A
New Member
25 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Fog ransomware targets SonicWall VPNs to breach corporate networks

October 27, 2024 By Bill Toulas Fog and Akira ransomware operators are increasingly breaching corporate networks through SonicWall VPN accounts, with the threat actors believed to be exploiting CVE-2024-40766, a critical SSL VPN access control flaw.SonicWall fixed the SonicOS flaw in late August 2024, and roughly a week later, it warned that it was already under active exploitation.At the same time, Arctic Wolf security researchers reported seeing Akira ransomware affiliates leveraging the flaw to gain initial access to victim networks.A new report by Arctic Wolf warns that Akira and the Fog ransomware operation have conducted at least 30 intrusions that all started with remote access to a network through SonicWall VPN accounts.Of these cases, 75% are linked to Akira, with the rest attributed to Fog ransomware operations. >>Full Article<<

90
Jasper_The_Rasper
Moderator
25 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
China May Have Hacked Trump's Phone

The hack appears to be the result of a Chinese state-sponsored group gaining access to US telecommunication networks, according to The New York Times. October 25, 2024 By Michael Kan  Chinese state-sponsored hackers may have spied on phones belonging to Donald Trump and his running mate, JD Vance, after secretly infiltrating US telecommunication networks. The New York Times reports that US investigators notified the Trump campaign about the potential spying, which occurred when Chinese hackers gained access to Verizon’s phone systems. Trump and Vance are among a group of people within and outside the US government to be targeted, which also included staff members of Vice President Kamala Harris’s campaign. On Friday, the FBI confirmed that it's investigating the threat of Chinese hackers breaching US telecommunication networks.   >>Full Article<<

162
ProTruckDriver
Moderator
26 days ago
C
Administrator
ConnorMThreat Research Analyst
published in Security Industry News
Cyber News Rundown: Bumblebee malware makes a surprise resurgenceNews

Nearly four months after Operation Endgame, an international law enforcement takedown of multiple malware droppers, the notorious Bumblebee loader malware has made a startling return. Bumblebee loader begins its attack chain with a malicious zip file email attachment, that uses a .LNK file to launch PowerShell and download a malicious MSI payload directly into memory. This tactic allows Bumblebee to avoid executing additional processes, and thus not triggering unwanted alerts to the victim.Globe Life insurance confirms data breachFollowing the investigation into a June data breach at Globe Life insurance, officials have confirmed that the threat actors behind the attack did not encrypt any of the affected files, though they have engaged in an extortion attempt with the threat of leaking the stolen data. The data breach itself compromised sensitive information for upwards of 5,000 individuals, though that number was an initial estimate and may have expanded to a much larger set of custo

183
ProTruckDriver
Moderator
26 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Canadian Military, Police Impacted by Data Breach at Moving Companies

Data breach at moving companies impacts Canadian government employees, and military and police personnel. November 21, 2023 By Ionut Arghire The Canadian government has announced that information pertaining to its employees and to military and police personnel was exposed in a data breach at third-party services providers.The incident involved Brookfield Global Relocation Services (BGRS) and Sirva Canada, two moving and relocation services firms contracted by the Canadian government to provide relocation support to employees.The government learned of the data breach on October 19, immediately launched an investigation into the matter, and informed the Centre for Cyber Security, the Office of the Privacy Commissioner, and the Royal Canadian Mounted Police.According to the Canadian government, the data breach impacts the personal information of present and former public service employees, as well as members of the Canadian Armed Forces and Royal Canadian Mounted Police.“Preliminary infor

30
U
New Member
26 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Russia sentences REvil ransomware members to over 4 years in prison

October 25, 2024 By Lawrence Abrams Russia has sentenced four members of the REvil ransomware operation to over 4 years in prison for distributing malware and illegal circulation of means of payment.REvil ransomware (aka Sodin and Sodinokibi) was launched in April 2019 as a direct successor of the GandCrab operation.In less than a year, the gang became the most prolific ransomware group, asking for some of the highest ransom payments at the time and earning over $100 million in a year.However, in July 2021, when Revil hit over 1,500 businesses worldwide in a Kaseya supply chain attack, things took a turn for the worse for the ransomware gang.In response to the attack, President Biden asked President Putin to take action against cybercriminals residing in Russia; otherwise, the U.S. would take action on its own. >>Full Article<< 

40
Jasper_The_Rasper
Moderator
27 days ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Henry Schein discloses data breach a year after ransomware attack

October 24, 2024 By Lawrence Abrams Henry Schein has finally disclosed a data breach following at least two back-to-back cyberattacks in 2023 by the BlackCat Ransomware gang, revealing that over 160,000 people had their personal information stolen.Henry Schein is a healthcare solutions provider and a Fortune 500 company with operations and affiliates in 32 countries and revenue of over $12 billion in 2022.On October 15, the company disclosed that it was forced to take some systems offline to contain a cyberattack that impacted manufacturing and distribution operations.While Henry Schein did not disclose the nature of the attack, the BlackCat (ALPHV) ransomware gang claimed responsibility, stating that they stole 35 TB of sensitive files.Almost a month later, on November 22, the company once again disclosed that it suffered another attack, again by the now shut down BlackCat ransomware gang. >>Full Article<< 

30
Jasper_The_Rasper
Moderator
27 days ago

Badges

Show all badges

Join the Conversation

Terms & Conditions