February 2024 - Page 11

TLDR: Key Points: Critical vulnerabilities found in ConnectWise’s ScreenConnect tool Threat actor potential could lead to a “firestorm” Article Summary: A principal security researcher at Huntress, John Hammond, has raised alarm about

TLDR: Social engineering is a type of cyber attack that manipulates victims into handing over sensitive information. Common types of social engineering attacks include phishing, tailgating, pretexting, baiting, and scareware. In recent

TLDR: Law enforcement agencies successfully disrupted the operations of the LockBit ransomware gang, one of the most prolific in recent history. The collaborative effort involved Europol, the FBI, and others, marking a

TLDR: Key Points: The DarkHotel phenomenon poses a significant cyber threat to the hospitality sector. Protecting guest privacy and data is crucial for hospitality businesses to avoid financial and reputational damage. Cyberthreats

TLDR: – The supply chain threat has been growing for many years – Businesses rely on third parties to deliver ready-made solutions – Attacks on the software supply chain are increasing –

TLDR: Custom Salesforce apps using the Apex programming language may have common misconfigurations and errors that expose corporate data. Security experts warn that vulnerabilities in customized Salesforce instances can leak sensitive data

TLDR: North Korean state-sponsored threat actors, including the Lazarus Group, have been targeting defense firms worldwide in cyber espionage campaigns. The attacks involve social engineering, fake job opportunities, and software supply chain

TLDR: QNAP released a security advisory for multiple vulnerabilities in their products. A 0-day flaw was discovered in the quick.cgi component of QNAP QTS firmware, potentially affecting over 289,000 devices. Last week,

TLDR: – FBI Director Christopher Wray accuses China of cyber-attack on US infrastructure at Munich conference – China denies the claim, labeling it as extremely irresponsible and a distortion of facts FBI

TLDR: An individual in Vinnytsia, Ukraine was arrested for stealing banking credentials of Android users in the US and Canada. The hacker created websites offering free software downloads that contained malware to