Security Affairs

NOVEMBER 24, 2024

seized the stolen credit card marketplace PopeyeTools and charged its operators, this is a major success against cybercrime. Argentieri, head of the Justice Department’s Criminal Division.

IT 321

IT Sales Access Ransomware 321

Security Affairs

MARCH 5, 2025

The agency revealed that it has disconnected its infrastructure to contain the attack and secure data, a circumstance that suggests it was the victim of a ransomware attack. To secure data after the breach, POLSA’s network was immediately disconnected from the internet. “A cybersecurity incident has occurred at POLSA.

IT 251

IT Ransomware Cybersecurity Security 251

Security Affairs

JANUARY 24, 2025

Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SMA1000 vulnerability to its Known Exploited Vulnerabilities catalog. This week, SonicWall warned customers of a critical security vulnerability, tracked as CVE-2025-23006 (CVSS score of 9,8) impacting its Secure Mobile Access (SMA) 1000 Series appliances.

IT 238

IT Authentication Cybersecurity Access 238

Krebs on Security

DECEMBER 19, 2024

The makers of Acunetix, Texas-based application security vendor Invicti Security , confirmed Silent Push’s findings, saying someone had figured out how to crack the free trial version of the software so that it runs without a valid license key. In early 2020, Exorn promoted a website called “ orndorks[.]com

IT 233

IT Data breaches Cloud Passwords 233

Security Affairs

FEBRUARY 11, 2025

Artificial intelligence enhances data security by identifying risks and protecting sensitive cloud data, helping organizations stay ahead of evolving threats. With over 90% of enterprises storing at least some of their data in the cloud, AIs ability to enhance security across complex, distributed environments is more vital than ever.

Artificial Intelligence 204

Artificial Intelligence Security Unstructured data Cloud 204

Security Affairs

APRIL 3, 2025

39 Million Secrets Leaked on GitHub in 2024 GitHub found 39M secrets leaked in 2024 and launched new tools to help developers and organizations secure sensitive data in code. “Still, secret leaks remain one of the most commonand preventablecauses of security incidents. Secret Protection is free for public repositories.

Security 196

Security Risk Cloud Passwords 196

Security Affairs

MARCH 24, 2025

Medusa ransomware uses a malicious Windows driver ABYSSWORKER to disable security tools, making detection and mitigation more difficult. Elastic Security Labs tracked a financially driven MEDUSA ransomware campaign using a HEARTCRYPT-packed loader and a revoked certificate-signed driver, ABYSSWORKER, to disable EDR tools.

Ransomware 207

Ransomware Security IT Access 207

The Last Watchdog

DECEMBER 16, 2024

Raising security baselines across industries is essential, with risk mitigationnot acceptancebecoming the standard. Salzman Shirley Slazman , CEO, SeeMetrics In 2025, organizations will recognize that adding more tools doesnt equate to better security. The drivers are intensifying. Attackers arent hacking in theyre logging in.

Security 264

Security Phishing IoT Risk 264

Security Affairs

DECEMBER 29, 2024

The company has not disclosed the number of impacted customers were impacted by this security breach. “We promptly took steps to secure ZAGG.com and initiated an investigation to determine what happened and identify what information was affected. is a consumer electronics accessories company based in the United States.

Data breaches 198

Data breaches IT Computer and Electronics Access 198

Security Affairs

OCTOBER 23, 2024

Data Security Posture Management (DSPM) helps organizations address evolving data security and privacy requirements by protecting and managing sensitive information. To add to the difficulty, the advent of Generative AI (GenAI) has brought unprecedented security and privacy risks. What is Data Security Posture Management?

Data Privacy 309

Data Privacy Privacy GDPR Compliance 309

Security Affairs

NOVEMBER 17, 2024

A Really Simple Security plugin flaw affects 4M+ sites, allowing attackers full admin access. Wordfence researchers warn of a vulnerability, tracked as CVE-2024-10924 (CVSS Score of 9.8), in the Really Simple Security plugin that affects 4M+ sites. It’s one of the most critical WordPress vulnerabilities ever.

Security 182

Security Authentication Access IT 182

Security Affairs

APRIL 17, 2025

Discovered within a RAR archive containing a legitimate executable (IsoBurner.exe) and a malicious DLL (StarBurn.dll), StarProxy employs DLL sideloading to activate upon execution. Once active, it proxies traffic between infected devices and command-and-control servers using TCP sockets and FakeTLS, encrypting data with a custom XOR-based algorithm.

IT 166

IT Archiving Encryption Communications 166

Security Affairs

NOVEMBER 12, 2024

Apple iOS supports a new feature that reboots locked devices after extended inactivity, aiming to enhance data security for users. Apple ‘quietly’ implemented a new security feature that automatically reboots a locked device if it has not been used for several days. at the end of October. reported 404 Media.

Encryption 315

Encryption Passwords Security Communications 315

Security Affairs

OCTOBER 31, 2024

Faced with this situation, we immediately deployed additional security measures to protect the operations and information of our clients.” We want to reassure you that Interbank guarantees the security of your deposits and all your financial products.” ” reads the statement published by the company.

Data breaches 315

Data breaches Financial Services Passwords Security 315

Security Affairs

APRIL 15, 2025

Meta announced that it will use public EU user data to train AI, resuming plans paused last year over Irish data protection concerns. Meta will start training its AI models using public data from adults in the EU, after pausing the plan last year over data protection concerns raised by Irish regulators. ” reads a post published by the company.

IT 195

IT Artificial Intelligence Information Security Privacy 195

Security Affairs

APRIL 13, 2025

” Cell C has taken swift action to contain a recent cyberattack, secure its systems, and limit the impact. .” ” Cell C has taken swift action to contain a recent cyberattack, secure its systems, and limit the impact. In 2023, Loretto Hospital experienced another data security incident.

Data breaches 315

Data breaches Unstructured data Ransomware Cybersecurity 315

Security Affairs

DECEMBER 5, 2024

Security Operations Center (SOC) analyst burnout is a very real problem. The two key problems are: Alert Overload Modern security environments generate an extraordinary number of alerts. These are some of the most important cybersecurity professionals out there, and many of them are being worked to exhaustion.

Cybersecurity 336

Cybersecurity Artificial Intelligence Risk Data collection 336

Security Affairs

APRIL 16, 2025

” In September, security researchers from G DATA discovered more than two dozen Android mobile phones from different manufacturers already infected by pre-installed malware. Doctor Web warns that the attackers gained access to the supply chain of a number of Chinese manufacturers of Android-based smartphones.

Manufacturing 305

Manufacturing Passwords Security IT 305

Security Affairs

FEBRUARY 27, 2025

Belgian authorities are investigating Chinese hackers for breaching its State Security Service (VSSE), stealing 10% of emails from 2021 to May 2023. The Belgian federal prosecutor’s office is probing a possible security breach on its State Security Service (VSSE) by China-linked threat actors. ” reported Reuters.

Security 174

Security Access Government Cybersecurity 174

Security Affairs

MARCH 12, 2025

Cybersecurity and Infrastructure Security Agency (CISA) adds six Microsoft Windowsflaws to its Known Exploited Vulnerabilities catalog. CVE-2025-26633 (CVSS 7.0): An improper neutralization flaw in Microsoft Management Console that lets unauthorized attackers bypass security features locally. A few days ago, U.S.

IT 166

IT Cybersecurity Access Security 166

Security Affairs

APRIL 6, 2025

Oracle confirms a cloud data breach, quietly informing customers while downplaying the impact of the security breach. The incident has raised serious concerns about the security of Oracles cloud infrastructure and the potential implications for affected customers. Oracle Classic has the security incident. “Oracle Corp.

Data breaches 309

Data breaches Cloud Encryption Communications 309

Security Affairs

OCTOBER 25, 2024

DLP is key in cybersecurity; a risk assessment identifies data risks, helping turn findings into real-world security improvements. They typically include an evaluation of data handling practices, security policies, and DLP solutions to identify and remediate any vulnerabilities that could result in a data breach.

Risk 302

Risk Cybersecurity Cloud Compliance 302

The Last Watchdog

OCTOBER 23, 2024

22, 2024, CyberNewswire — INE Security offers essential advice to protect digital assets and enhance security. Warn “Small businesses face a unique set of cybersecurity challenges and threats and must be especially proactive with cybersecurity training,” said Dara Warn, CEO of INE Security. “At Cary, NC, Oct.

Security 162

Security Data breaches Passwords Cybersecurity 162

Security Affairs

FEBRUARY 23, 2025

Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Power Pages vulnerability to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added a Microsoft Power Pages vulnerability, tracked as CVE-2025-24989 , to its Known Exploited Vulnerabilities (KEV) catalog.

IT 162

IT Cybersecurity Risk Access 162

Security Affairs

MARCH 20, 2025

Cybersecurity and Infrastructure Security Agency (CISA) adds Edimax IC-7100 IP Camera, NAKIVO,and SAP NetWeaver AS Java flaws to its Known Exploited Vulnerabilities catalog. Akamai researchers discovered the vulnerability, and the cyber security firm confirmed ([ 1 ],[ 2 ]) that the flaw is actively exploited in the wild.

IT 174

IT Cybersecurity Risk Security 174

Security Affairs

NOVEMBER 26, 2024

Researchers at Elastic Security Labs analyzed the malware and confirmed it can steal keychain passwords and data from multiple browsers. reads the report published by Elastic Security Labs. Banshee Stealer, a MacOS Malware-as-a-Service, shut down after its source code leaked online. The code is now available on GitHub.

Archiving 357

Archiving Encryption Passwords IT 357

Security Affairs

NOVEMBER 8, 2024

.” Palo Alto Networks recommends reviewing best practices for securing management access to its devices. Cybersecurity and Infrastructure Security Agency (CISA) added a Palo Alto Expedition Missing Authentication Vulnerability, tracked as CVE-2024-5910 , to its Known Exploited Vulnerabilities (KEV) catalog.

Authentication 287

Authentication Cybersecurity Access Communications 287

Security Affairs

JANUARY 16, 2025

Over the years, multiple security experts have identified several vulnerabilities in MikroTik routers, such as a remote code execution vulnerability detailed by VulnCheck researchers here. ” reads the report published by Infoblox. The SPF information is included in the domains DNS records as a TXT record. ” continues the report.

File names 345

File names Authentication Access Archiving 345

Security Affairs

OCTOBER 28, 2024

A long supply chain adds third-party risks, as each partner’s security affects your own, making identity and access management more challenging. Each company brings its own security (or lack thereof) into the game, so your overall security status is essentially the average of yours, plus anyone else’s to whom you’re connected (i.e.,

B2B 309

B2B Cybersecurity Risk Access 309

Security Affairs

APRIL 3, 2025

Ivanti addressed a critical remote code execution flaw in Connect Secure, which has been exploited since at least mid-March 2025. Ivanti released security updates to address a critical Connect Secure remote code execution vulnerability tracked as CVE-2025-22457. The flaw impacts Ivanti Connect Secure (version 22.7R2.5

Security 162

Security Cybersecurity IT Information Security 162