Category Security

College students are being warned to be vigilant after researchers uncover a new scam campaign based on fake job listings. According to Proofpoint, the campaign will begin in March 2023 and run through June, targeting primarily North American students with…

July 19, 2023THNMoreCloud security/vulnerabilities Cybersecurity researchers have discovered a privilege escalation vulnerability in Google Cloud. This vulnerability could allow malicious attackers to modify application images to infect users, leading to supply chain attacks. This problem, Bad. BuildAccording to cloud security…

Norwegian recycling and mining multinational Tomra has revealed that some “data systems” were directly affected by a “massive” cyberattack. In a brief statement, the company said it discovered the breach on the morning of July 16th. “We quickly disconnected some…

July 19, 2023THNMoreCyber ​​espionage / spyware The U.S. government on Tuesday accused two foreign commercial spyware vendors, Cytrox and Intellexa, of using cyber exploits to gain unauthorized access to devices and “threat the privacy and security of individuals and organizations…

July 19, 2023THNMoreVulnerability / Cyber ​​Threat Citrix is ​​warning users that its NetScaler Application Delivery Controller (ADC) and gateway have serious security flaws that are being exploited in the wild. tracked CVE-2023-3519 (CVSS score: 9.8), this issue is related to…

A former IT security analyst has been sentenced to three years and seven months in prison for attempting to blackmail his employer, according to British police. Ashley Lyles, 28, of Fleetwood, Letchworth Garden City, was found guilty of unauthorized computer…

Threat actors have extensively used a sophisticated web injection kit called drIBAN to orchestrate malicious attacks against corporate banking institutions and their customers. According to the new Recommendation drIBAN was first discovered in 2019 by Clafy security researchers. drIBAN uses…

Security researchers at Rapid7 have discovered multiple vulnerabilities being actively exploited in Adobe ColdFusion, a web development computing platform. On July 11, 2023, Adobe released an access control bypass vulnerability (CVE-2023-29298) found in Rapid7, as well as an insecure deserialization…

July 18, 2023hacker newsCyber ​​Security / Cyber ​​Attack Read monthly stories from Cybersixgill’s threat experts on the latest threat actor tactics, techniques, and procedures. Each story details a new underground threat, the attackers involved, and how you can act to…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) will release a comprehensive fact sheet on July 17, 2023 to help companies ensure data security and protect critical assets as they move to cloud environments. Released. Named Free tools for cloud…