The Last Watchdog

DECEMBER 16, 2024

Raising security baselines across industries is essential, with risk mitigationnot acceptancebecoming the standard. Salzman Shirley Slazman , CEO, SeeMetrics In 2025, organizations will recognize that adding more tools doesnt equate to better security. LLMs grant access to private data and take actions on behalf of users.

Security 264

Security Phishing IoT Risk 264

Security Affairs

SEPTEMBER 16, 2024

SolarWinds addressed a critical remote code execution vulnerability, tracked as CVE-2024-28991, in Access Rights Manager. “SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability.” SolarWinds addressed the issues with the release of Access Rights Manager (ARM) 2024.3.1.

Access 336

Access Authentication Security Information Security 336

Security Affairs

NOVEMBER 8, 2024

Palo Alto Networks warns customers to restrict access to their next-generation firewalls because of a potential RCE flaw in the PAN-OS management interface. Palo Alto Networks warns customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability in PAN-OS.

Authentication 290

Authentication Cybersecurity Access Communications 290

Security Affairs

NOVEMBER 17, 2024

A Really Simple Security plugin flaw affects 4M+ sites, allowing attackers full admin access. Wordfence researchers warn of a vulnerability, tracked as CVE-2024-10924 (CVSS Score of 9.8), in the Really Simple Security plugin that affects 4M+ sites. It’s one of the most critical WordPress vulnerabilities ever.

Security 185

Security Authentication Access IT 185

Security Affairs

NOVEMBER 16, 2024

Last week, Palo Alto Networks warned customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability (CVSSv4.0 In particular, we recommend that you ensure that access to the management interface is possible only from trusted internal IPs and not from the Internet.

Cybersecurity 316

Cybersecurity Access Communications Security 316

Security Affairs

MARCH 24, 2025

Medusa ransomware uses a malicious Windows driver ABYSSWORKER to disable security tools, making detection and mitigation more difficult. Elastic Security Labs tracked a financially driven MEDUSA ransomware campaign using a HEARTCRYPT-packed loader and a revoked certificate-signed driver, ABYSSWORKER, to disable EDR tools.

Ransomware 217

Ransomware Security IT Access 217

Security Affairs

OCTOBER 21, 2024

” Immediately, the company launched an investigation, which is still ongoing, into the alleged security incident. “Cisco is investigating reports that an unauthorized actor is alleging to have gained access to certain Cisco data and data of our customers.”

Data breaches 327

Data breaches Access Cloud Security 327

Security Affairs

AUGUST 18, 2024

A large-scale extortion campaign compromised multiple organizations by exploiting publicly accessible environment variable files (.env). This extortion campaign involved several security failures, including exposing environment variables, using long-lived credentials, and the lack of a least privilege architecture. env files).

Access 353

Access Cloud Phishing Encryption 353

Security Affairs

DECEMBER 3, 2024

Securities and Exchange Commission (SEC), the company discovered the attack on November 25. The threat actors had access to the company’s information technology systems and encrypted some of its data files. ” ù At this time, the company is not able to provide the timing of the restoration of full access to its IT systems. .

Ransomware 297

Ransomware Encryption Cybersecurity Access 297

Security Affairs

JANUARY 16, 2025

Over the years, multiple security experts have identified several vulnerabilities in MikroTik routers, such as a remote code execution vulnerability detailed by VulnCheck researchers here. The botnet’s SOCKS proxy setup enables access for hundreds of thousands of compromised machines. ” concludes the report.

File names 347

File names Authentication Access Archiving 347

Security Affairs

NOVEMBER 25, 2024

Threat actors exploit an outdated Avast Anti-Rootkit driver to evade detection, disable security tools, and compromise the target systems. With the driver installed and running, the malware gains kernel-level access to the system, providing it with the ability to terminate critical security processes and take control of the system.”

Access 271

Access Security IT Information Security 271

Security Affairs

APRIL 6, 2025

Oracle confirms a cloud data breach, quietly informing customers while downplaying the impact of the security breach. The hacker has published 10,000 customer records, a file showing Oracle Cloud access, user credentials, and an internal video as proof of the hack. Oracle Classic has the security incident.

Data breaches 313

Data breaches Cloud Encryption Communications 313

Security Affairs

MARCH 26, 2025

Broadcom released security updates to address a high-severity authentication bypass vulnerability, tracked as CVE-2025-22230 (CVSS score 9.8), impacting VMware Tools for Windows. The vulnerability is due to improper access control. ” reads the advisory. The vulnerability impacts VMware Tools versions 12.x.x, VMware Tools 12.5.1

Authentication 256

Authentication Cloud Access Security 256

Security Affairs

JANUARY 19, 2025

A WordPress W3 Total Cache plugin vulnerability could allow attackers to access information from internal services, including metadata on cloud-based apps. The vulnerability allows authenticated attackers with Subscriber access to exploit a missing capability check, leading to information disclosure.

Metadata 313

Metadata Authentication Consumer Services Cloud 313

Security Affairs

FEBRUARY 27, 2025

Belgian authorities are investigating Chinese hackers for breaching its State Security Service (VSSE), stealing 10% of emails from 2021 to May 2023. The Belgian federal prosecutor’s office is probing a possible security breach on its State Security Service (VSSE) by China-linked threat actors. ” reported Reuters.

Security 177

Security Access Government Cybersecurity 177

Security Affairs

OCTOBER 12, 2024

Since April 2021, Russian state-sponsored hackers have exploited vulnerabilities, including Zimbra’s CVE-2022-27924 for injecting commands to access credentials and emails, and JetBrains TeamCity’s CVE-2023-42793 for arbitrary code execution through an authentication bypass. cyber agencies warned.

Data collection 340

Data collection Authentication Access Cybersecurity 340

Security Affairs

SEPTEMBER 1, 2024

A vulnerability in an air transport security system allowed unauthorized individuals to bypass airport security screenings. These systems verify an employee’s active employment status with their airline, and depending on their status authorize to skip security screening or access the cockpit. ” added Carroll.

Security 336

Security Access Authentication IT 336

Security Affairs

MARCH 31, 2025

Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Smart Licensing Utility vulnerability, tracked as CVE-2024-20439 , to its Known Exploited Vulnerabilities (KEV) catalog.

IT 273

IT Cybersecurity Access Passwords 273

Security Affairs

OCTOBER 31, 2024

Peruvian Interbank confirmed a data breach after threat actors accessed its systems and leaked stolen information online. Faced with this situation, we immediately deployed additional security measures to protect the operations and information of our clients.” ” reads the statement published by the company.

Data breaches 319

Data breaches Financial Services Passwords Security 319

Security Affairs

OCTOBER 19, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Veeam Backup and Replication vulnerability to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added the Veeam Backup and Replication flaw CVE-2024-40711 (CVSS score of 9.8) impacting Veeam Backup & Replication (VBR).

IT 325

IT Ransomware Authentication Cybersecurity 325

Security Affairs

JANUARY 30, 2025

Wiz Research discovered a publicly accessible ClickHouse database belonging to DeepSeek, exposing chat history, secret keys, and backend details. After responsible disclosure, DeepSeek promptly secured the issue. The experts used ClickHouses HTTP interface and accessed the /play path to execute arbitrary SQL queriesvia the browser.

Metadata 301

Metadata Authentication Access Passwords 301

Security Affairs

NOVEMBER 12, 2024

Apple iOS supports a new feature that reboots locked devices after extended inactivity, aiming to enhance data security for users. Apple ‘quietly’ implemented a new security feature that automatically reboots a locked device if it has not been used for several days. at the end of October. reported 404 Media.

Encryption 319

Encryption Passwords Security Communications 319

Security Affairs

OCTOBER 25, 2024

DLP is key in cybersecurity; a risk assessment identifies data risks, helping turn findings into real-world security improvements. DLP risk assessments involve identifying, evaluating, and mitigating risks associated with data loss or unauthorized access. Protecting sensitive data is what cybersecurity is all about.

Risk 305

Risk Cybersecurity Cloud Compliance 305

The Last Watchdog

OCTOBER 23, 2024

22, 2024, CyberNewswire — INE Security offers essential advice to protect digital assets and enhance security. Warn “Small businesses face a unique set of cybersecurity challenges and threats and must be especially proactive with cybersecurity training,” said Dara Warn, CEO of INE Security. “At Cary, NC, Oct.

Security 162

Security Data breaches Passwords Cybersecurity 162

Security Affairs

MARCH 8, 2025

On February 5th, the security team detected suspicious activity in its ‘Order Information Distribution System,’ and immediately restricted access to device A. Further investigation revealed unauthorized access on February 15th, leading to the blocking of another device. reads the data breach notification.

Data breaches 287

Data breaches Communications Access IT 287

Security Affairs

FEBRUARY 20, 2025

Citrix released security updates to address a high-severity security vulnerability, tracked as CVE-2024-12284 (CVSS score of 8.8) The company pointed out that only authenticated users with existing access to the NetScaler Console can exploit this vulnerability. ” reads the advisory. NetScaler Console 14.1

Authentication 295

Authentication Cloud Access Security 295

Security Affairs

NOVEMBER 3, 2024

Quad7 botnet, also known as CovertNetwork-1658 or xlogin, was first spotted in the summer of 2023 by security researcher Gi7w0rm. Microsoft has notified affected customers and shared details on CovertNetwork-1658, Storm-0940 tactics, and recommended mitigations to help secure affected environments. ” continues the report.

Passwords 332

Passwords Access Cloud Government 332

Security Affairs

DECEMBER 6, 2024

Atrium Health launched an investigation into the security breach and discovered that from January 2015 to July 2019, certain online tracking technologies were active on its MyAtriumHealth (formerly MyCarolinas) Patient Portal, accessible via web and mobile. The company notified the US Department of Health and Human Services (HHS).

Data breaches 277

Data breaches Access Phishing Privacy 277

Security Affairs

JULY 5, 2024

The New York Times revealed that OpenAI suffered a security breach in 2023, but the company says source code and customer data were not compromised. OpenAI suffered a security breach in 2023, the New York Times reported. technologies.” ” reported the NYT.

Security 359

Security Artificial Intelligence Risk Access 359

Security Affairs

FEBRUARY 24, 2025

Despite Microsoft phasing it out, it remains an active security risk. The botnet operators used stolen credentials from infostealer logs to target accounts at scale “These attacks are recorded in Non-Interactive Sign-In logs, which are often overlooked by security teams. ” continues the report. ” concludes the report.

Passwords 300

Passwords Authentication Access Cybersecurity 300