Cloud SecurityHackers use cloud services to target financial and insurance firmsShaun NicholsSeptember 11, 2024Hackers are using cloud service attacks as a way to go after big-money targets in the insurance and financial industries.
Network SecurityLazarus Group tricks developers to load malware via fake recruiting testsSteve ZurierSeptember 11, 2024Latest iteration from North Korean APT to lure job seekers to download malware.
Vulnerability ManagementMicrosoft fixes at least four zero-days in September Patch TuesdayShaun NicholsSeptember 10, 2024Microsoft patched 79 bugs for administrators to install this month.
RansomwareReport: CosmicBeetle ransomware gang may have joined RansomHubLaura FrenchSeptember 10, 2024The group, known for its use of the Spacecolon toolkit, is suspected of having used RansomHub in a recent attack.
Vulnerability ManagementDisinformation reigns ahead of Harris-Trump presidential debateSteve ZurierSeptember 10, 2024From potential XXS flaws experienced by Gallup that could spread disinformation to false claims about Haitian immigrants eating household pets, it’s game on.
AI/MLMan used AI to bilk $10 million-plus from music-streaming servicesShaun NicholsSeptember 9, 2024Spotify and Apple Music among defrauded services using a combination of AI tools and bots.
Data SecurityElectronic payment firm Slim CD notifies 1.7M customers of data breachLaura FrenchSeptember 9, 2024The payment processing service said credit card information was accessed in June 2024.
Network SecurityProgress Software patches 10.0 vulnerability in LoadMaster releasesSteve ZurierSeptember 9, 2024Because of the high CVSS score and recent issues at Progress with MOVEit transfer, security pros say teams should patch immediately.
Vulnerability ManagementVeeam patches 5 critical vulnerabilities, including unauthenticated RCE flawLaura FrenchSeptember 6, 2024An advisory for 18 patched flaws includes one that could enable “full system takeover,” researchers said.
Vulnerability ManagementApache patches OFBiz bypass vulnerabilitySteve ZurierSeptember 6, 2024Security pros say this flaw could be integrated into a botnet, so teams should patch immediately.
National Public Data breach underscores the need for stronger digital identitiesJordan Burris September 10, 2024
