Tag: service
-
NVIDIA GPU Display Drivers Vulnerability Lets Attackers Access Files Remotely
NVIDIA has issued a critical security update to address multiple vulnerabilities in its GPU Display Driver and vGPU software, affecting both Windows and Linux systems. These vulnerabilities, disclosed in January 2025, pose risks such as denial of service (DoS), data tampering, information disclosure, and even code execution. Users are strongly advised to update their drivers…
-
Ransomware attack hit Indian multinational Tata Technologies
Indianmultinationaltechnology companyTata Technologies suspended some IT services following a ransomware attack. Indian multinational Tata Technologies, a Tata Motors subsidiary, suspended some IT services following a ransomware attack. The company, which is engaged inproduct engineering, provides services to automotive and aerospaceoriginal equipment manufacturersas well as industrial machinery companies. As of 2023, the IT giant has over…
-
Malware-Verteilung 12.2024 in Deutschland
Nachtrag in Sachen Sicherheit. Sicherheitsanbieter Check Point hat vor einiger Zeit seinen Global Threat Index für Dezember 2024 veröffentlicht, in dem die jüngsten Aktivitäten von Cyberkriminellen hervorgehoben werden. Im Dezember 2024 machte FunkSec, ein aufstrebender Ransomware-as-a-Service (RaaS)-Betreiber, auf sich aufmerksam. … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/02/02/malware-verteilung-12-2024-in-deutschland/
-
5 Encrypted Attack Predictions for 2025
Tags: access, ai, apt, attack, automation, cloud, communications, computer, computing, control, cryptography, cyber, cyberattack, cybercrime, data, data-breach, defense, detection, email, encryption, exploit, government, group, india, infrastructure, intelligence, Internet, malicious, malware, network, phishing, ransomware, risk, service, tactics, technology, threat, update, vpn, zero-trustThe cyberthreat landscape of 2024 was rife with increasingly sophisticated threats, and encryption played a pivotal role”, a staggering 87.2% of threats were hidden in TLS/SSL traffic. The Zscaler cloud blocked 32.1 billion attempted encrypted attacks, a clear demonstration of the growing risk posed by cybercriminals leveraging encryption to evade detection. ThreatLabz reported that malware…
-
Account takeover flaw discovered in popular travel booking service
First seen on scworld.com Jump to article: www.scworld.com/brief/account-takeover-flaw-discovered-in-popular-travel-booking-service
-
IT Services Vendor Hack Affects 293,000 AHN Patients
7 Proposed Class Actions Filed Against Allegheny Health Network and IntraSystems. A Pittsburgh-based healthcare system and its Massachusetts-based IT services firm are facing at least seven proposed federal class action lawsuits involving a data theft – reported on Jan. 17 – affecting about 293,000 people. The hack is the latest major breach involving a business…
-
South Africa’s government-run weather service knocked offline by cyberattack
The government-run South African Weather Service (SAWS) said its systems went down “following a security breach by criminal elements.” First seen on therecord.media Jump to article: therecord.media/south-african-weather-service-cyberattack
-
Mirai Variant ‘Aquabot’ Exploits Mitel Device Flaws
Yet another spinoff of the infamous DDoS botnet is exploiting a known vulnerability in active attacks, while its threat actors are promoting it on Telegram for other attackers to use as well, in a DDoS-as-a-service model. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/mirai-variant-aquabot-exploits-mitel-phone-flaws
-
Microsoft investigates Microsoft 365 outage affecting users, admins
Microsoft is investigating an ongoing outage preventing users and admins from accessing some Microsoft 365 services and the admin center. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-investigates-microsoft-365-outage-affecting-users-admins/
-
Lynx Ransomware Architecture to Attack Windows, Linux, ESXi Uncovered
Tags: attack, cyber, cybercrime, cybersecurity, encryption, extortion, linux, organized, ransomware, service, tool, windowsThe emergence of the Lynx Ransomware-as-a-Service (RaaS) platform has drawn significant attention in cybersecurity circles, owing to its advanced technical capabilities, structured affiliate workflow, and expansive ransomware arsenal. Lynx has proven to be a highly organized and efficient cybercriminal operation, offering its affiliates a user-friendly interface, robust encryption capabilities, and extortion tools that underline its…
-
Threat Actors Exploit Government Website Vulnerabilities for Phishing Campaigns
Cofense Intelligence has continually observed the abuse or usage of legitimate domain service exploitation. This report highlights observed phishing threat actor abuse of .gov top-level domains (TLDs) for different countries over two years from November 2022 to November 2024. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/threat-actors-exploit-government-website-vulnerabilities-for-phishing-campaigns/
-
CrowdStrike Highlights Magnitude of Insider Risk
The impetus for CrowdStrike’s new professional services came from last year’s Famous Chollima threat actors, which used fake IT workers to infiltrate organizations and steal data. First seen on darkreading.com Jump to article: www.darkreading.com/insider-threats/crowdstrike-highlights-magnitude-of-insider-risk
-
DORA erfordert robuste Risikomanagementprozesse über die gesamte Lieferkette hinweg
Der Finanzsektor ist mit regulatorischen Anforderungen bestens vertraut, doch DORA stellt insbesondere im Bereich Drittanbieter und Lieferketten neue Herausforderungen dar. Eine durchgehende Compliance erfordert die Anpassung von Risikomanagementprozessen und Service-Level-Agreements. Ein Kommentar von Andre Troskie, EMEA Field CISO bei Veeam. Im Gegensatz zu anderen Wirtschaftsbereichen, die ebenfalls die NIS2 einhalten müssen, sind dem Finanzsektor strenge Vorschriften…
-
Sicherer und flexibler Cloud-Zugang für ‘RISE with SAP”
Zscaler offeriert ab sofort einen Zero-Trust-Network-Access (ZTNA) -Service an, der nativ in ‘RISE with SAP” integriert ist. Zscaler-Private-Access (ZPA) für SAP wird über die Zscaler-Zero-Trust-Exchange-Plattform bereitgestellt und ermöglicht SAP-Kunden mit bisher vor Ort vorgehaltenten ERP-Workloads eine vereinfachte und risikoarme Cloud-Migration, ohne die Komplexität und das Risiko herkömmlicher VPNs. Laut Zscalers waren […] First seen on…
-
Hellcat Ransomware Attacking Government Organizations Educational Institutions
Tags: cyber, dark-web, data, extortion, government, group, infrastructure, ransomware, service, theft, toolA new ransomware gang, Hellcat, emerged on dark web forums in 2024, targeting critical infrastructure, government organizations, educational institutions, and the energy sector. Operating on a ransomware-as-a-service (RaaS) model, Hellcat offers ransomware tools and infrastructure to affiliates in exchange for a profit share. The group relies on double extortion techniques, combining data theft with system…
-
DeepSeek claims ‘malicious attacks’ disrupting AI service
DeepSeek, which gained popularity recently for its AI platform, did not specify the cause of ‘large-scale malicious attacks,’ which continue to disrupt new account registrations. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366618464/DeepSeek-claims-malicious-attacks-disrupting-AI-service
-
Was Cloud-Services für Disaster Recovery leisten sollten – Leitfaden für eine erfolgreiche DRaaS-Auswahl
First seen on security-insider.de Jump to article: www.security-insider.de/effektive-auswahl-einer-draas-loesung-a-524bd23b771edadcdf91fdb7ba1a8b29/
-
Want to be an effective cybersecurity leader? Learn to excel at change management
Tags: authentication, awareness, business, cio, ciso, cloud, compliance, corporate, cybersecurity, finance, fraud, group, guide, Hardware, identity, jobs, password, privacy, risk, risk-management, service, skills, software, strategy, technology, threat, vulnerability, zero-trustIf there’s one thing that’s inevitable in cybersecurity, it’s change. Ever-evolving technology requires new protections, threats seem to multiply and morph on a daily basis, and even the humblest pieces of software and hardware demand constant updating to stay secure.That work has been increasing as the importance, visibility, and impact of security initiatives have ramped…
-
Improving Secrets Management in Healthcare Systems
Why is Secrets Management Crucial in Healthcare Systems? Have you ever considered how privileged access to digital systems in healthcare organizations can be both a boon and a bane? As more healthcare institutions migrate to cloud-based services, ensuring the security of sensitive data becomes paramount. Inadequate secrets management could lead to severe consequences, including security……
-
Vulnerability in Airline Integration Service enables A Hacker to Gain Entry To User Accounts
A recent security vulnerability in a widely used airline integration service has exposed millions of users to account takeovers, raising concerns over the safety of online travel services. Security researchers from Salt Labs discovered the flaw, which enabled hackers to access user accounts without authorization, potentially compromising sensitive information and airline loyalty points. The Exploit…
-
CISA warns of critical, high-risk flaws in ICS products from four vendors
Tags: access, authentication, automation, cisa, cloud, computing, control, credentials, cve, cvss, cybersecurity, data, exploit, flaw, infrastructure, injection, leak, mitigation, monitoring, open-source, remote-code-execution, risk, service, software, threat, update, vulnerability, windowsThe US Cybersecurity and Infrastructure Security Alliance has issued advisories for 11 critical and high-risk vulnerabilities in industrial control systems (ICS) products from several manufacturers.The issues include OS command injection, unsafe deserialization of data, use of broken cryptographic algorithms, authentication bypass, improper access controls, use of default credentials, sensitive information leaks, and more. The flaws…
-
Unknown threat actor targeting Juniper routers with backdoor: Report
Network administrators using routers from Juniper Networks are being urged to scan for possible compromise after the discovery that an unknown threat actor has been installing a backdoor in customer routers since at least 2023.The bad news: According to researchers at Lumen Technology’s Black Lotus Labs, the unknown attacker can install a reverse shell on…
-
OAuth Flaw Exposed Millions of Airline Users to Account Takeovers
The now-fixed vulnerability involved a major travel services company that’s integrated with dozens of airline websites worldwide. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/oauth-flaw-exposed-millions-airline-users-account-takeovers
-
Is Online Fax Secure? Everything You Need to Know
Online faxing uses the latest security technology, including end-to-end encryption, secure transmission and multi-factor authentication, to keep your information safe. How Does Online Fax Work? Online faxing is a cutting-edge technology that is much more convenient and secure than traditional faxing. Online fax services use the latest encryption, secure transmission and multi-factor authentication to keep…
-
Over 100 LTE, 5G Bugs Threaten Cellular Service Disruptions
First seen on scworld.com Jump to article: www.scworld.com/brief/over-100-lte-5g-bugs-threaten-cellular-service-disruptions
-
Hackers Could Bypassing EDR Using Windows Symbolic Links to Disable Service Executables
A groundbreaking technique for exploiting Windows systems has emerged, combining the >>Bring Your Own Vulnerable Driver
-
Lynx Ransomware Group Unveiled with Sophisticated Affiliate Program
Group-IB researchers have exposed the highly organized affiliate platform and sophisticated operations of the Lynx Ransomware-as-a-Service group First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/lynx-ransomware-sophisticated/