September 2024 - Page 23

TLDR: Government agencies are facing increasingly destructive cyber attacks with limited resources. To boost cybersecurity defenses, they can adopt an assume-breach mindset, practice good cyber hygiene, and leverage federal, state, and local

TLDR: Researchers Find SQL Injection to Bypass Airport TSA Security Checks In a recent discovery, security researchers found a vulnerability in a key air transport security system that allowed unauthorized individuals to

TLDR: US agencies issue cybersecurity advisory on Iranian-linked cyber threat groups targeting critical infrastructure Groups identified as Pioneer Kitten, UNC757, Parisite, Rubidium, and Lemon Sandstorm U.S. agencies have issued a cybersecurity advisory

TLDR: CISA, FBI, and partners issue joint advisory on RansomHub ransomware threat to critical infrastructure sectors RansomHub has targeted various critical infrastructure sectors since February 2024 In a joint cybersecurity advisory, CISA,

Article Summary TLDR: Google warns Chrome and Safari users of a Russian cyber attack. The attack used spyware developed by a Greek cyber intelligence firm and targeted users who did not update

TLDR: The third annual Data Security Day conference at OHIO will be held on Oct. 9, 2024. This year’s event will be a hybrid conference with both in-person and virtual attendance options.

TLDR: Benjamin Franklin’s creation of a volunteer fire department inspired two new projects to engage hackers in protecting critical infrastructure. The Franklin Project and UnDisruptable27 aim to enlist volunteer hackers to defend

Article Summary TLDR: FBI Issues Urgent Ransomware Attack Warning—Do These 3 Things Now RansomHub ransomware gang has targeted at least 210 organizations FBI advises organizations to take immediate action to mitigate the

TLDR: Published vulnerabilities rose by 43% in H1 2024 compared to H1 2023. Attackers heavily targeted flaws in VPNs and other perimeter devices for initial access. Published vulnerabilities surged by 43% in

TLDR: Key Points: Cyber attackers are using Google Sheets as a command-and-control mechanism in a malware campaign targeting various organizations. The campaign impersonates tax authorities from multiple countries and utilizes a bespoke