Remove 2024 Remove Access Remove Definition Remove Manufacturing
article thumbnail

U.S. CISA adds Apache OFBiz bug to its Known Exploited Vulnerabilities catalog

Security Affairs

Cybersecurity and Infrastructure Security Agency (CISA) added Apache OFBiz Incorrect Authorization Vulnerability CVE-2024-38856 (CVSS score of 9.8) The security researcher Hasib Vhora from SonicWall reported the vulnerability CVE-2024-38856 along with other security experts. to its Known Exploited Vulnerabilities (KEV) catalog.

IT 100
article thumbnail

Researchers warn of a new critical Apache OFBiz flaw

Security Affairs

Experts urge organizations to address a new critical vulnerability, tracked as CVE-2024-38856, in Apache OFBiz. ” The issue stems from a flaw in the authentication mechanism, which allows unauthenticated users to access features typically restricted to logged-in users, potentially leading to remote code execution.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Week in Cyber Security and Data Privacy: 1 – 7 January 2024

IT Governance

They accessed 41.5 million customers’ data having gained access via a vulnerability in Hathaway’s Laravel web application framework. million individuals affected HealthEC LLC, a health technology company, has announced that it suffered a data breach in July 2023, in which systems were accessed and files were copied.

article thumbnail

The Week in Cyber Security and Data Privacy: 5 – 11 February 2024

IT Governance

Further victims of last year’s Perry Johnson & Associates data breach identified Last year, the medical transcription company PJ&A (Perry Johnson & Associates) suffered a data breach in which an unauthorised third party was able to access its computer network. Only 2 definitely haven’t had data breached.

article thumbnail

6,009,014 MovieBoxPro Accounts Breached in Another Data Scraping Incident

IT Governance

Publicly disclosed data breaches and cyber attacks: in the spotlight More than 6 million accounts compromised from streaming service MovieBoxPro MovieBoxPro, a streaming service of “questionable legality”, suffered a data scraping incident on 15 April 2024, according to Have I Been Pwned. None definitely haven’t had data breached.

article thumbnail

Interview With a Crypto Scam Investment Spammer

Krebs on Security

Chaput said whoever was behind the DDoS was definitely not using point-and-click DDoS tools, like a booter or stresser service. Proshutinskiy’s LinkedIn profile says he is a Class of 2024 student at TGM , which is a Christian mission school in Austria. Mr. Proshutinskiy did not respond to requests for comment.

article thumbnail

Biden administration issues Executive Order and takes action to enhance maritime cybersecurity

Data Protection Report

On February 21, 2024, President Biden signed an Executive Order and issued several federal rules aimed at improving the cybersecurity of U.S. It also incorporates the definition of “incident” from 44 U.S.C. ports and maritime supply chains. The measures introduce new cybersecurity requirements and standards for stakeholders of the U.S.