Tag: data
-
Insurance Worker Sentenced After Illegally Accessing Claimants’ Data
An insurance employee has been handed a suspended sentence after illegally accessing personal information First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/worker-sentenced-illegally/
-
Bitcoin ATM giant Byte Federal says 58,000 users’ personal data compromised in breach
Byte Federal, one of the largest Bitcoin ATM operators in the U.S., said the personal data of thousands of customers may have been compromised during a recent breach. In a filing with Maine’s attorney general, Florida-based Byte Federal said hackers tried to access the data of 58,000 customers, including names, addresses, phone numbers, government-issued IDs,…
-
BadRAM Attack Breaches AMD Secure VMs with $10 Device
Researchers have uncovered a vulnerability that allows attackers to compromise AMD’s Secure Encrypted Virtualization (SEV) technology using a $10 device. This breakthrough exposes a previously underexplored weakness in memory module security, specifically in cloud computing environments where SEV is widely used to protect sensitive data, which is shared on the BadRAM page. Modern computers depend…
-
Splunk RCE Vulnerability Let Attackers Execute Remote Code
Splunk, the data analysis and monitoring platform, is grappling with a Remote Code Execution (RCE) vulnerability. This flaw, identified as CVE-2024-53247, affects several versions of Splunk Enterprise and the Splunk Secure Gateway app on the Splunk Cloud Platform. The vulnerability is rated with a CVSSv3.1 score of 8.8, indicating a high severity level that poses…
-
Cyberangriff auf einen Hafen in Kroatien
Cyberattack targets Port of Rijeka, data stolen First seen on worldcargonews.com Jump to article: www.worldcargonews.com/news/2024/12/cyberattack-targets-port-of-rijeka-data-stolen/
-
AMD data center chips vulnerable to revealing data through ‘BadRAM’ attack
Tags: access, advisory, attack, best-practice, cloud, cve, data, encryption, exploit, finance, firmware, flaw, germany, Hardware, mitigation, monitoring, reverse-engineering, software, update, vulnerabilityAMD’s Secure Encrypted Virtualization (SEV), meant to protect processor memory from prying eyes in virtual machine (VM) environments, can be tricked into giving access to its encrypted memory contents using a test rig costing less than $10, researchers have revealed.Dubbed “BadRAM” by researchers from the University of Lübeck in Germany, KU Leven in Belgium, and…
-
Attackers can abuse the Windows UI Automation framework to steal data from apps
An accessibility feature built into Windows to facilitate the use of computers by people with disabilities can be abused by malware to steal data from other applications or control them in malicious ways that evades detection by most endpoint protection systems.The Windows UI Automation framework has existed since the days of Windows XP and provides…
-
Safe Handling of Data: Why Secrets Sprawl is a Risk
Why is Secrets Sprawl a Risk in Data Handling? As cybersecurity continues to evolve at an unprecedented pace, businesses are increasingly becoming aware of the need to secure their digital assets, including data and secrets. Among these, “Secrets Sprawl” has emerged as a significant concern in data handling. Secrets sprawl refers to the unchecked proliferation……
-
Randall Munroe’s XKCD ‘Seismologists’
Tags: dataPermalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2024/12/randall-munroes-xkcd-seismologists/
-
The imperative for governments to leverage genAI in cyber defense
Tags: ai, attack, cyber, cyberattack, cybersecurity, dark-web, data, deep-fake, defense, detection, email, endpoint, gartner, government, incident response, infrastructure, intelligence, LLM, malicious, malware, microsoft, strategy, tactics, threat, tool, training, vulnerabilityIn an era where cyber threats are evolving at an unprecedented pace, the need for robust cyber defense mechanisms has never been more critical. Sixty-two percent of all cyberattacks focus on public sector organizations directly and indirectly. Nation-state actors, equipped with generative artificial intelligence (genAI) sophisticated tools and techniques, pose significant threats to national security,…
-
Cardiac surgery device manufacturer falls prey to ransomware
Tags: attack, breach, business, cyber, cyberattack, cybercrime, data, group, hacker, healthcare, ransom, ransomware, service, supply-chainThe healthcare industry has been increasingly in the crosshairs of cyberattackers this year, with ransomware near the top of the sector’s biggest cyber threats. Hackers are attacking IT systems and personal data, among other things, with the aim of manipulation or theft. But it’s not just hospitals that are affected by cyberattacks; their suppliers are under attack as well.…
-
Apple Pushes Major iOS, macOS Security Updates
Cupertino ships iOS 18.2 and macOS Sequoia 15.2 patches to fix data leakage, sandbox escapes and code exection vulnerabilities. The post Apple Pushes Major iOS, macOS Security Updates appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/apple-pushes-major-ios-macos-security-updates/
-
Predictive AI and the Future of Fleet Maintenance
Sarvant Singh of Penske Transportation Solutions on AI-Powered Fleet Optimization. Predictive AI solutions can now anticipate maintenance needs before issues arise, enabling fleet operators to schedule timely repairs and prevent disruptions, said Sarvant Singh, vice president, data and emerging digital solutions at Penske Transportation Solutions. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/predictive-ai-future-fleet-maintenance-a-27025
-
US subsidiary of global water treatment firm probes November cyberattack after data encrypted
Kurita America, a subsidiary of a Tokyo-based company, is the latest in a string of companies tied to the water industry targeted by hackers. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/kurita-america-cyberattack-water/735102/
-
Hospital Notifies 316,000 of Breach in Christmas 2023 Hack
Cybercriminal Gang Money Message Claims Credit, Publishes Stolen Records. A Massachusetts hospital is notifying 316,000 people that their information was compromised in a cyberattack discovered nearly a year ago on Christmas 2023. Cybercriminal group Money Message had claimed that it stole 600 gigabytes data, posting patient and employee records on the dark web. First seen…
-
iOS vuln leaves user data dangerously exposed
Jamf threat researchers detail an exploit chain for a recently patched iOS vulnerability that enables a threat actor to steal sensitive data, warning that many organisations are still neglecting mobile updates. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366616985/iOS-vuln-leaves-user-data-dangerously-exposed
-
Comic Agilé Mikkel Noe-Nygaard, Luxshan Ratnaravi #315 Stickies
Tags: datavia the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2024/12/comic-agile-mikkel-noe-nygaard-luxshan-ratnaravi-315-stickies/
-
Auguria Streamlines Management of Security Log Data
Auguria today at the Black Hat Europe conference, in addition to providing five additional integrations with other platforms, revealed it has added an explainability graph capability that makes it simple to understand why log data collected is either irrelevant or warrants further investigation. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/auguria-streamlines-management-of-security-log-data/
-
Black Hat: Latest news and insights
The infosecurity world decamps to London this week, with research on vulnerabilities in AI systems at the fore of the latest edition of Black Hat Europe.The four-day program runs from Dec. 9-12, with two-and four-day options of hands-on trainings, but the main event at ExCeL London occurs on Dec. 11 and 12 featuring the latest research, developments,…
-
Black Hat Europe preview: Cryptographic protocol attacks and AI in the spotlight
Tags: access, ai, application-security, attack, authentication, backdoor, best-practice, computer, conference, control, cybercrime, cybersecurity, data, dns, encryption, exploit, finance, github, government, hacker, healthcare, identity, injection, Internet, LLM, malicious, microsoft, mitigation, office, open-source, radius, RedTeam, risk, service, sophos, technology, tool, training, vulnerability, vulnerability-management, windowsThis week in London Black Hat Europe will feature a diverse range of talks and presentations covering the latest developments in cybersecurity.The opening keynote on Wednesday will be delivered by Frédérick Douzet, a professor of geopolitics at the University of Paris 8, and director of the French Institute of Geopolitics research team. No preview is…
-
French internet operator fined $53 million for unsolicited ads and tracking users without consent
The French regulator also said that even after users indicated they no longer wanted cookies, or tracking code, following them on the web, Orange allowed previously stored cookies to continue capturing their internet activity, a violation of the French Data Protection Act. ]]> First seen on therecord.media Jump to article: therecord.media/french-internet-operator-fined-53-million-unsolicited-ads-tracking
-
3AM ransomware: what you need to know
The 3AM ransomware first emerged in late 2023. Like other ransomware, 3AM exfiltrates victims’ data (demanding a ransom is paid) and encrypts the copies left behind. Here’s what you need to know. First seen on tripwire.com Jump to article: www.tripwire.com/state-of-security/3am-ransomware-what-you-need-know
-
Senators want to block data brokers from selling health and location data
Tags: dataSens. Elizabeth Warren, Ron Wyden and others introduced legislation to prohibit data brokers from selling or transferring location and health data and provide the Federal Trade Commission with $1 billion for enforcement.]]> First seen on therecord.media Jump to article: therecord.media/senate-bill-block-data-broker-sales-health-location-data
-
Wald.ai Raises $4M in Seed Funding to Protect Data in Conversations With AI Assistants
Wald.ai has raised $4 million in seed funding for a solution designed to ensure data protection when organizations use AI assistants. The post Wald.ai Raises $4M in Seed Funding to Protect Data in Conversations With AI Assistants appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/wald-ai-raises-4m-in-seed-funding-to-protect-data-in-conversations-with-ai-assistants/
-
SPA is for Single-Page Abuse! Using Single-Page Application Tokens to Enumerate Azure
Author: Lance B. Cain Overview Microsoft Azure is a leading cloud provider offering technology solutions to companies, governments, and other organizations around the globe. As such, many entitles have begun adopting Azure for their technology needs to include identity, authentication, storage, application management, and web services. One of the most common methods for organizations to begin…
-
Traveling for the Holidays? Your Digital Identity Is Along for the Ride
Traveling for the Holidays? Your Digital Identity Is Along for the Ride andrew.gertz@t“¦ Tue, 12/10/2024 – 14:20 Identity & Access Management Access Control Thales – Cloud Protection & Licensing Solutions More About This Author > Thales Contributors: Frederic Klat, Sales Acceleration Director, and Ward Duchamps, Director of Strategy and Innovation, CIAM If you’re one…
-
Hackers Exploit AWS Misconfigurations in Massive Data Breach
Hackers exploited AWS misconfigurations, leaking 2TB of sensitive data, including customer information, credentials and proprietary source code First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/hackers-exploit-aws/
-
Blue Yonder investigating data leak claim following ransomware attack
The software supply chain company is widening its investigation after Termite ransomware leaked data it claims is linked to the attack. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/blue-yonder-data-leak-ransomware/734987/
-
Obsidian Security Achieves Snowflake Ready Validation and Financial Services Competency
Obsidian Security today announced the successful completion of the Snowflake Ready Technology Validation, and achievement of the Snowflake Partner Network Financial Services Industry Competency. These milestones mark significant progress in Obsidian Security’s product integration and collaboration with Snowflake, the AI Data Cloud company. Through this integration, Obsidian Security customers can strengthen the security of their critical data…
-
New Cleo zero-day RCE flaw exploited in data theft attacks
Hackers are actively exploiting a zero-day vulnerability in Cleo managed file transfer software to breach corporate networks and conduct data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-cleo-zero-day-rce-flaw-exploited-in-data-theft-attacks/