Category Security

July 25, 2023THNMoreMalware/Cyberthreat Financial attackers are behind it Casbaneiro Banking malware families have been observed to leverage User Account Control (UAC) bypass techniques to gain full administrative privileges on machines, a sign threat actors are evolving their tactics to evade…

An “established” threat actor claimed to possess two million data records stolen from the Egyptian Ministry of Health and Population. The allegations, made on the hacker forum Popürler, were observed on July 25, 2023 by cyber threat intelligence provider SOCRadar…

July 25, 2023THNMoreEndpoint Security / Zero Day Apple has rolled out security updates to iOS, iPadOS, macOS, tvOS, watchOS, and Safari to address several security vulnerabilities, including one zero-day bug being exploited in the wild. tracked CVE-2023-38606This flaw exists in…

The Australian Home Office has been blushing after accidentally leaking personal information about participants in a government cybersecurity report. of Guardian Australia Yesterday, about 50 business owners and employees revealed that they have earned more than expected when they took…

Ivanti is warning users to update their Endpoint Manager Mobile (EPMM) mobile device management software (formerly MobileIron Core) to the latest version that fixes an actively exploited zero-day vulnerability. dubbing CVE-2023-35078, this issue has been described as a remote, unauthenticated…

July 25, 2023THNMoreServer Security / Zero Day Atlassian has released updates to address three security flaws affecting our Confluence Server, Data Center and Bamboo Data Center products. Successful exploitation could lead to remote code execution on the vulnerable system. The…

This week’s Graham Cluley Security News sponsors are: plex truck. Thanks for the support of an amazing team! Reports are the key deliverables that make penetration testing results actionable, but why should it be so hard to prepare? not anymore.…

According to Coveware, the infamous Clop ransomware gang may have made as much as $100 million in recent data extortion campaigns because a handful of victims paid the group so much money. In a new report, the security vendor claimed…

The Biden-Harris administration has taken another step toward ensuring responsible development of artificial intelligence (AI) technology by securing voluntary commitments from major AI companies. As part of the new effort, Amazon, Anthropic, Google, Inflection, Meta, Microsoft and OpenAI have committed…

The healthcare industry is constantly exposed to cyberattacks. It has traditionally been one of the most frequently targeted industries, and 2023 hasn’t changed that. The U.S. Government Office for Civil Rights reported 145 data breaches in the U.S. in the…