"Microsoft unveils new, more secure Windows Protected Print Mode."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 17 December 2023, 1451 UTC.

Content and Source:  https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895 ("Security Bundle" via https://feedly.com).

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

14

MOST POPULAR

Microsoft unveils new, more secure Windows Protected Print Mode

Windows 11 enhances print security

•

300+BleepingComputer / 22h

Microsoft announced a new Windows Protected Print Mode (WPP), introducing significant security enhancements to the Windows print system. [...]

MongoDB Suffers Security Breach, Exposing Customer Data

MongoDB data breach exposes customers

•

84The Hacker News / 9h

MongoDB on Saturday disclosed it's actively investigating a security incident that has led to unauthorized access to "certain" corporate systems, resulting in the exposure of customer account metadata and contact information. The American database software company said it first detected anomalous activity on December 13, 2023, and that it immediately activated its incident response

InfectedSlurs botnet targets QNAP VioStor NVR vulnerability

3 TTPs

•

Security Affairs / 4h

•

CVE-2023-47565

The Mirai-based botnet InfectedSlurs was spotted targeting QNAP VioStor NVR (Network Video Recorder) devices. In November, Akamai warned of a new Mirai -based DDoS botnet, named InfectedSlurs , actively exploiting two zero-day vulnerabilities to infect routers and video recorder (NVR) devices. The researchers discovered the botnet in October 2023, but they believe it has been active since at leas

TODAY

Security Affairs newsletter Round 450 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs / 4h

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Hunters International ransomware gang claims to have hacked the Fred Hutch Cancer Center New NKAbuse malware abuses NKN decentralized P2P network

YESTERDAY

MongoDB says customer data was exposed in a cyberattack

BleepingComputer / 16h

MongoDB is warning that its corporate systems were breached and that customer data was exposed in a cyberattack that was detected by the company earlier this week. [...]

MongoDB confirms customer data was exposed in a cyberattack

BleepingComputer / 16h

MongoDB is warning that its corporate systems were breached and that customer data was exposed in a cyberattack that was detected by the company earlier this week. [...]

Hunters International ransomware gang claims to have hacked the Fred Hutch Cancer Center

Ransomware gang targets cancer patients

•

Security Affairs / 19h

The Hunters International ransomware gang claims to have hacked the Fred Hutchinson Cancer Center (Fred Hutch). Another healthcare organization suffered a ransomware attack, the Hunters International ransomware gang claims to have hacked the Fred Hutchinson Cancer Center (Fred Hutch). The ransomware gang has added the organization to its dark web leak site and is threatening the victim to leak th

QNAP VioStor NVR vulnerability actively exploited by malware botnet

2 TTPs

•

BleepingComputer / 21h

•

CVE-2023-47565

A Mirai-based botnet named 'InfectedSlurs' is exploiting a remote code execution (RCE) vulnerability in QNAP VioStor NVR (Network Video Recorder) devices to hijack and make them part of its DDoS (distributed denial of service) swarm. [...]

DEC 15, 2023

China's MIIT Introduces Color-Coded Action Plan for Data Security Incidents

China draft operators

•

42The Hacker News / 1d

China's Ministry of Industry and Information Technology (MIIT) on Friday unveiled draft proposals detailing its plans to tackle data security events in the country using a color-coded system. The effort is designed to "improve the comprehensive response capacity for data security incidents, to ensure timely and effective control, mitigation and elimination of hazards and losses caused

Microsoft Warns of Storm-0539: The Rising Threat Behind Holiday Gift Card Frauds

3 TTPs

•

81The Hacker News / 1d

•

Microsoft seizes fraudulent account operation

Microsoft is warning of an uptick in malicious activity from an emerging threat cluster it's tracking as Storm-0539 for orchestrating gift card fraud and theft via highly sophisticated email and SMS phishing attacks against retail entities during the holiday shopping season. The goal of the attacks is to propagate booby-trapped links that direct victims to adversary-in-the-middle (AiTM

Smartphones That Help You Bust Out of the Android/iOS Ecosystem

Dark Reading / 1d

If you are in the market for a smartphone but want to break away from the Apple-Google duopoly, look no further: these alternative smartphones are based on various Linux variants and custom hardware.

New NKAbuse malware abuses NKN decentralized P2P network protocol

5 TTPs

•

Security Affairs / 1d

Experts uncovered a new Go-based multi-platform malware, tracked as NKAbuse, which is the first malware abusing NKN technology. Researchers from Kaspersky’s Global Emergency Response Team ( GERT ) and GReAT uncovered a new multiplatform malware dubbed NKAbuse. The malicious code is written in Go language, it is the first malware that relies on the NKN technology for data exchange between peers. T

Hundreds of thousands of dollars in crypto stolen after Ledger code poisoned

Ledger library compromised, dApps affected

•

The Register – Security / 1d

Former worker phished then NPM repo hijacked Cryptocurrency wallet maker Ledger says someone slipped malicious code into one of its JavaScript libraries to steal more than half a million dollars from victims.…

Establishing Reward Criteria for Reporting Bugs in AI Products

Dark Reading / 1d

Bug hunter programs can help organizations foster third-party discovery and reporting of issues and vulnerabilities specific to AI systems.

END OF FEED