Category Security

July 13, 2023THNMorecyber attack Government agencies, military organizations, and civilian users in Ukraine and Poland have been targeted as part of a series of campaigns aimed at stealing sensitive data and gaining persistent remote access to infected systems. This intrusion…

A new version of the Common Vulnerability Scoring System (CVSS 4.0) was made generally available by the Incident Response Security Team Forum (FIRST) on July 13, 2023. CVSS is an open industry standard for rating the severity of security vulnerabilities…

July 13, 2023THNMoreLinux / Vulnerability In a sign that cybersecurity researchers remain under the watchful eye of malicious actors, a proof-of-concept (PoC) has been found on GitHub that hides a backdoor with “clever” persistence methods. “This PoC is a wolf…

The White House has released an implementation plan for the US National Cybersecurity Strategy, which will be introduced in March 2023. The National Cybersecurity Strategy Implementation Plan (NCSIP), published July 13, 2023, aims to ensure transparency and coordination among U.S.…

A global email-based extortion scam is the work of a small group of scammers, according to new research from Barracuda Networks. The security vendor worked with Columbia University to analyze over 300,000 extortion emails they tracked over the course of…

July 13, 2023THNMoreOT/ICS, SCADA Cyber ​​Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified two security flaws affecting Rockwell Automation’s ControlLogix EtherNet/IP (ENIP) communication module models, including remote code execution and denial of service (DoS). ) could be…

A major nonprofit has warned that this year could set another record for data breaches after 951 publicly reported incidents in the second quarter. The Identity Theft Resource Center (ITRC) has tracked publicly reported data breaches and breaches since 2005.…

July 13, 2023THNMorecyber espionage / email security An anonymous US Federal Civilian Executive (FCEB) agency detected unusual email activity in mid-June 2023, leading to the discovery of a new China-related espionage campaign by Microsoft targeting 20 organizations. rice field. The…

July 13, 2023THNMoreNetwork security/vulnerability SonicWall announced Wednesday that it has provided customers of its Global Management System (GMS) firewall management and Analytics network reporting engine software with a set of 15 security flaws that threat actors can exploit to bypass…

According to Chainalysis, cryptocurrency flows to known criminal organizations fell 65% in the first half of 2023 compared to the same period in 2022, but ransomware is expected to be the biggest year yet. The company analyzed blockchain activity in…