[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
DarkReading
Zero-Click MediaTek Bug Opens Phones, Wi-Fi to Takeover
LinkedIn Addresses User Data Collection for AI Training
GenAI in Cybersecurity: Insights Beyond the Verizon DBIR
North Korean APT Bypasses DMARC Email Policies in Cyber-Espionage Attacks
Mastercard's Recorded Future Deal Furthers Its AI Security Goals
CrowdStrike Expands Cybersecurity Startup Accelerator With AWS and NVIDIA
Abstract Security Expands Multi-Cloud Security Operations
GitLab Warns of Max Severity Authentication Bypass Bug
c/side Lands $6M to Combat Rising Browser Supply Chain Attacks
Vice Society Pivots to Inc Ransomware in Healthcare Attack
Ars Technica
NC governor candidate cries AI fabrication as defense for racist porn forum posts
Microsoft releases a new Windows app called Windows App for running Windows apps
Ever wonder how crooks get the credentials to unlock stolen phones?
Due to AI fakes, the “deep doubt” era is here
Real-time Linux is officially part of the kernel after decades of debate
AI’s hungry maw drives massive $100B investment plan by Microsoft and BlackRock
“Dead Internet theory” comes to life with new AI-powered social media app
Landmark AI deal sees Hollywood giant Lionsgate provide library for AI training
Massive China-state IoT botnet went undetected for four years—until now
Google seeks authenticity in the age of AI with new content labeling system
CyberScoop
OIG audit calls for more clarity from CISA, DHS on disinformation mission 
Here’s what corporate boards are asking Kevin Mandia about
European, Latin American authorities arrest 17 in crackdown on phishing network with 483,000 victims
Krebs: Iranian outreach to Biden campaign was ‘late breaking’ news to U.S. gov
UnitedHealth Group CISO: We had to ‘start over’ after Change Healthcare attack
FTC details how streaming services, social media have become ‘mass surveillance’ machines 
What more can be done to stop ransomware attacks? 
Despite challenges, Minnesota’s top election official is ‘an optimist’ heading into November
U.S. agencies say Iranian hackers tried to pass ‘non-public’ Trump campaign docs to Biden’s campaign
Newmark initiative will bring online a network of civil defense hackers
HITBSecNews
AI-Powered Super Soldiers Are More Than Just a Pipe Dream
China's APT40 gang is ready to attack vulns within hours or days of public release
Massive car dealer ransom attack is mostly over after 2 weeks of work-arounds
The president ordered a board to probe a massive Russian cyberattack. It never did.
Two of the German military’s new spy satellites appear to have failed in orbit
“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux
Cisco Talos warns of wider security implications following Snowflake breach
Indonesian Airports, Data Centres Hit By Worst Cyberattack in Years
Researchers upend AI status quo by eliminating matrix multiplication in LLMs
I Wore Meta Ray-Bans in Montreal to Test Their AI Translation Skills. It Did Not Go Well
SecurityWeek
Ukraine Bans Telegram Messenger App on State-Issued Devices Because of Russian Security Threat
Google Now Syncing Passkeys Across Desktop, Android Devices
UN Experts Urge United Nations to Lay Foundations for Global Governance of Artificial Intelligence
In Other News: Disney Ditches Slack, Binance Malware Warning, Defense Conference Targeted
Noise Storms: Massive Amounts of Spoofed Web Traffic Linked to China
Kubernetes Container Isolation Startup Edera Raises $5 Million
Law Enforcement Dismantles Phishing Platform Used for Unlocking Stolen Phones
Tor Responds to Reports of German Police Deanonymizing Users
Ivanti Warns of Second CSA Vulnerability Exploited in Attacks
Watch on Demand: 2024 Attack Surface Management Summit – All Sessions Available
ZDNet
The best VPN routers of 2024
Upgrading to MacOS Sequoia? Here's why you may want to hold off
Where's your BitLocker recovery key? How to save a copy before the next Windows meltdown
FTC report exposes massive data collection by social media brands - how to protect yourself
The NSA advises you to turn off your phone once a week - here's why
Google Chrome just made it even easier to use passkeys across all your devices
Singapore mandates face authentication for 'higher risk' bank transactions
The best secure browsers for privacy in 2024: Expert tested
Uber launches new rider verification program as a safety measure for drivers across the US
The best AirTag wallets of 2024: Expert tested
The Hacker News
Europol Shuts Down Major Phishing Scheme Targeting Mobile Phone Credentials
Passwordless AND Keyless: The Future of (Privileged) Access Management
Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East
Chrome Users Can Now Sync Passkeys Across Devices with New Google PIN Feature
Critical Ivanti Cloud Appliance Vulnerability Exploited in Active Cyberattacks
Wherever There's Ransomware, There's Service Account Compromise. Are You Protected?
Hackers Exploit Default Credentials in FOUNDATION Software to Breach Construction Firms
New Brazilian-Linked SambaSpy Malware Targets Italian Users via Phishing Emails
New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit
Healthcare's Diagnosis is Critical: The Cure is Cybersecurity Hygiene
BleepingComputer
Windows Server 2025 previews security updates without restarts
Disney ditching Slack after massive July data breach
Ukraine bans Telegram on military, govt devices over security risks
Dell investigates data breach claims after hacker leaks employee info
macOS Sequoia change breaks networking for VPN, antivirus software
Clickbaity or genius? 'BF cheated on you' QR codes pop up across UK
Suspects behind $230 million cryptocurrency theft arrested in Miami
CISA warns of actively exploited Apache HugeGraph-Server bug
Microsoft Edge will flag extensions causing performance issues
Tor says it’s "still safe" amid reports of police deanonymizing users
gbhackers
CISA Releases Six Advisories for Industrial Control Systems
Hackers Allegedly Claim Breach of Dell Employee Database
GitLab Urges Organization to Patch for Authentication Bypass Vulnerability
Hertz Car Rental Platform Leaks 60,000 Insurance Claim Reports
Researchers Detailed Raptor Train Botnet That 60,000+ Compromised Devices
Hackers Using Supershell Malware To Attack Linux SSH Servers
Threat Actors Forcing victims Into Entering Login Credentials For Stealing
SambaSpy Using Weaponized PDF Files to Attack Windows Users
Tor Claims Network is Safe Following Enforcement Infiltration to Expose Criminals
Threat Actor Allegedly Claims Breach of Federal Bank Customer Data
Cybersecurity Dive
Cybersecurity firm flags attack on construction accounting system
Attackers exploit second Ivanti Cloud Service Appliance flaw for more access
Kevin Mandia’s 5 question confidence test for CISOs
Generative AI raises security concerns among IT leaders
Port of Seattle official flags a cyber dilemma, ‘one-way street’ with federal agencies
US authorities take down a Mirai-variant botnet tied to DDoS threat
Suffolk County ransomware attack linked to lack of planning, ignored warnings
AT&T settles a 2023 data breach for $13M. Recent incidents are much worse.
Open source maintainers, under security pressure, remain largely unpaid after XZ Utils
Valid accounts remain top access point for critical infrastructure attacks, officials say
Threatpost
Student Loan Breach Exposes 2.5M Records
Watering Hole Attacks Push ScanBox Keylogger
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Ransomware Attacks are on the Rise
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Twitter Whistleblower Complaint: The TL;DR Version
Firewall Bug Under Active Attack Triggers CISA Warning
Fake Reservation Links Prey on Weary Travelers
iPhone Users Urged to Update to Patch 2 Zero-Days
Google Patches Chrome’s Fifth Zero-Day of the Year
CISA News
Joint ODNI, FBI, and CISA Statement
CISA Releases Plan to Align Operational Cybersecurity Priorities for Federal Agencies
FBI and CISA Release Joint PSA, Just So You Know: False Claims of Hacked Voter Information Likely Intended to Sow Distrust of U.S. Elections
CISA Releases Election Security Focused Checklists for Both Cybersecurity and Physical Security
CISA Launches New Portal to Improve Cyber Reporting
Election Security Partners Host 7th Annual Tabletop the Vote Exercise for 2024
Joint ODNI, FBI, and CISA Statement on Iranian Election Influence Efforts
FBI and CISA Release Joint PSA, Just So You Know:  Ransomware Disruptions During Voting Periods Will Not Impact the Security and Resilience of Vote Casting or Counting
CISA Releases Secure by Demand Guide
CISA Names First Chief Artificial Intelligence Officer
The Register
US indicts two over socially engineered $230M+ crypto heist
Ivanti patches exploited admin command execution flaw
Cybercrooks strut away with haute couture Harvey Nichols data
CISA boss: Makers of insecure software are the real cyber villains
Valencia Ransomware explodes on the scene, claims California city, fashion giant, more as victims
No way? Big Tech's 'lucrative surveillance' of everyone is terrible for privacy, freedom
Iran's cyber-goons emailed stolen Trump info to Team Biden – which ignored them
1 in 10 orgs dumping their security vendors after CrowdStrike outage
Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations
UK activists targeted with Pegasus spyware ask police to charge NSO Group
TechCrunch
Internet surveillance firm Sandvine says it’s leaving 56 ‘non-democratic’ countries
Chipmaker Qualcomm lays off hundreds of workers in San Diego
Apple’s new macOS Sequoia update is breaking some cybersecurity tools
Google rolls out automatic passkey syncing via Password Manager
Picus Security, founded by 3 Turkish mathematicians, raises $45M after simulating 1B cyberattacks
Craig Newmark pledges $100M to fight hacking by foreign governments
US government ‘took control’ of a botnet run by Chinese government hackers, says FBI director
Discord launches end-to-end encrypted voice and video chats
Cisco’s second layoff of 2024 affects thousands of employees
The cybersecurity labor gap now stands at 4M+ open jobs — Intezer has raised $33M for AI tools to plug it
Network World Security
Dice: 60% more tech pros lost jobs in 2024 vs 2023
Juniper jumps into Wi-Fi 7 with enterprise switches, access points
2024 global network outage report and internet health check
Cisco bolsters optical network software
Microsoft, BlackRock form group to raise $100 billion for AI data centers
Intel strikes foundry deal with AWS
Gartner: Network automation to increase threefold by 2026
How cybersecurity red teams can boost backup protections
Network jobs watch: Hiring, skills and certification trends
Linus Torvalds advises open-source developers to pursue meaningful projects, not hype
Help Net Security
Resecurity joins Cloud Security Alliance to help organizations secure cloud technologies
Opnova emerges from stealth with $3.75 million in funding
How to detect and stop bot activity
Striking the balance between cybersecurity and operational efficiency
Rising identity security risks: Why organizations must act now
New infosec products of the week: September 20, 2024
Nextcloud Hub 9 released: New features, more security, updated performance
Windows users targeted with fake human verification pages delivering malware
Zenity unveils agent-less security solution for Microsoft 365 Copilot
Juniper extends AI-Native Networking Platform to maximize the full potential of Wi-Fi 7
SC Magazine
InfoSec World Interviews Video Player
New CISA guidance seeks to standardize federal agencies' cyber defenses
InfoSec World CRTV Live Stream
Updated CISA exploited vulnerabilities catalog adds several flaws
FTC: Mass surveillance conducted by social media, video streaming services
Disney reportedly ditching Slack after breach
Dell claimed to be breached, over 10K employee records exposed
Lumma Stealer deployed via fraudulent CAPTCHA pages
Several orgs purportedly attacked by novel Valencia Ransomware gang
Middle East backdoored by Iranian state-backed hackers
InfoSecurity Magazine
US Cyberspace Solarium Commission Outlines Ten New Cyber Policy Priorities
Cybersecurity Skills Gap Leaves Cloud Environments Vulnerable
Going for Gold: HSBC Approves Quantum-Safe Technology for Tokenized Bullions
Infostealers Cause Surge in Ransomware Attacks, Just One in Three Recover Data
Western Agencies Warn Risk from Chinese-Controlled Botnet
8000 Claimants Sue Outsourcing Giant Capita Over 2023 Data Breach
FCC $200m Cyber Grant Pilot Opens Applications for Schools and Libraries
Cryptojacking Gang TeamTNT Makes a Comeback
Insecure APIs and Bot Attacks Cost Global Firms $186bn
Critical Infrastructure at Risk From Email Security Breaches
© 2024 RiskDiscovery | Sponsored by: Deception Logic