Chinese hackers collected audio from Trump campaign adviser’s calls – report | US elections 2024 Chinese state-affiliated hackers intercepted audio from the phone calls of US political figures, including an unnamed campaign adviser of Donald Trump, the Washington Post reported on Sunday. Various media outlets reported on Friday that the Read more…
FortiGate admins report active exploitation 0-day. Vendor isn’t talking. Citing the Reddit comment, Beaumont took to Mastodon to explain: “People are quite openly posting what is happening on Reddit now, threat actors are registering rogue FortiGates into FortiManager with hostnames like ‘localhost’ and using them to get RCE.” Beaumont wasn’t Read more…
Ransomware double-extortion group listings peaked in 2024, report finds The number of ransomware double-extortion groups posting to leak sites hit an all-time high in May, with 40 groups actively listing victims that month, according to Secureworks’ State of the Threat 8th Edition report published Tuesday. The Secureworks report outlines the Read more…
What’s new in the MSRC Report Abuse Portal and API | MSRC Blog The Microsoft Security Response Center (MSRC) has always been at the forefront of addressing cyber threats, privacy issues, and abuse arising from Microsoft Online Services. Building on our commitment, we have introduced several key updates to the Read more…
Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts Progress Software has rolled out updates to address a critical security flaw impacting the Telerik Report Server that could be potentially exploited by a remote attacker to bypass authentication and create rogue administrator users. The issue, tracked as CVE-2024-4358, Read more…
SASE Threat Report: 8 Key Findings for Enterprise Security Threat actors are evolving, yet Cyber Threat Intelligence (CTI) remains confined to each isolated point solution. Organizations require a holistic analysis across external data, inbound and outbound threats and network activity. This will enable evaluating the true state of cybersecurity in Read more…
Report: The Dark Side of Phishing Protection The transition to the cloud, poor password hygiene and the evolution in webpage technologies have all enabled the rise in phishing attacks. But despite sincere efforts by security stakeholders to mitigate them – through email protection, firewall rules and employee education – phishing attacks are still a Read more…
FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity Law enforcement agencies have officially seized control of the notorious BreachForums platform, an online bazaar known for peddling stolen data, for the second time within a year. The website (“breachforums[.]st”) has been replaced by a seizure banner stating the clearnet cybercrime forum Read more…
The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield With the browser becoming the most prevalent workspace in the enterprise, it is also turning into a popular attack vector for cyber attackers. From account takeovers to malicious extensions to phishing attacks, the browser is a means for stealing Read more…
Pentera's 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation Over the past two years, a shocking 51% of organizations surveyed in a leading industry report have been compromised by a cyberattack. Yes, over half. And this, in a world where enterprises deploy an average of 53 Read more…