BleepingComputer.com

"Pwn20wn Automotive:  $1.3M for 49 zero-days, Tesla hacked twice."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 26 January 2024, 1446 UTC.

Content and Source:  https://www.bleepingcomputer.com/ ("BleepingComputer.com").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

LATEST ARTICLES

Pwn2Own Automotive: $1.3M for 49 zero-days, Tesla hacked twice

  • The first edition of Pwn2Own Automotive has ended with competitors earning $1,323,750 for hacking Tesla twice and demoing 49 zero-day bugs in multiple electric car systems between January 24 and January 26.

  • Hacker Remote Access
     
    DEALS

Get started in ethical hacking training with hundreds off this training bundle

  • White-hat hacking is one of the best ways to block malicious actors from accessing the systems you're responsible for. This 18-course cybersecurity training bundle shows you how to get it done for $45.99, $1052 off the $1098 MSRP.

    • BLEEPINGCOMPUTER DEALS
      •  
    • JANUARY 26, 2024
      •  
    • 07:19 AM
      •  
    • Comment Count 0
  • 23andMe
     
    SECURITY

23andMe data breach: Hackers stole raw genotype data, health reports

  • Genetic testing provider 23andMe confirmed that hackers stole health reports and raw genotype data of customers affected by a credential stuffing attack that went unnoticed for five months, from April 29 to September 27.

  • China Hacker
     
    SECURITY

Blackwood hackers hijack WPS Office update to install malware

  • A previously unknown advanced threat actor tracked  as 'Blackwood' is using sophisticated malware called NSPX30 in cyberespionage attacks against companies and individuals.

  • Hacking security
     
    DEALS

Upgrade your ethical hacking skills with $150 off this training bundle

  • White-hat hacking is a crucial discipline for the safety of your organization. This nine course ethical-hacking training bundle teaches you the skills you need for $29.99, $150 off the $180 MSRP.

    • BLEEPINGCOMPUTER DEALS
      •  
    • JANUARY 25, 2024
      •  
    • 02:09 PM
      •  
    • Comment Count 0
  • Hacker prison
     
    SECURITY

Russian TrickBot malware dev sentenced to 64 months in prison

  • Russian national Vladimir Dunaev has been sentenced to five years and four months in prison for his role in creating and distributing the Trickbot malware used in attacks against hospitals, companies, and individuals worldwide.

  • iPhone
     
    SECURITY, APPLE, MOBILE

iPhone apps abuse iOS push notifications to collect user data

  • Numerous iOS apps are using background processes triggered by push notifications to collect user data about devices, potentially allowing the creation of fingerprinting profiles used for tracking.

  • Pwn2Own Tokyo
     
    SECURITY

Tesla hacked again, 24 more zero-days exploited at Pwn2Own Tokyo

  • Security researchers hacked the Tesla infotainment system and demoed a total of 24 zero-days on the second day of the Pwn2Own Automotive 2024 hacking competition.

  • Cisco
     
    SECURITY

Cisco warns of critical RCE flaw in communications software

  • Cisco is warning that several of its Unified Communications Manager (CM) and Contact Center Solutions products are vulnerable to a critical severity remote code execution security issue.

  • WordPress
     
    SECURITY

Hackers target WordPress database plugin active on 1 million sites

  • Malicious activity targeting a critical severity flaw in the 'Better Search Replace' WordPress plugin has been detected, with researchers observing thousands of attempts in the past 24 hours.

  • Online Course
     
    DEALS

A lifetime of e-learning is only $120 for a limited time in this deal

  • Get The Ultimate Lifetime Bundle of StackSkills + Infosec4TC + Stone River on sale for just $119.99 (reg. $480) for a limited time only

    • BLEEPINGCOMPUTER DEALS
      •  
    • JANUARY 25, 2024
      •  
    • 07:11 AM
      •  
    • Comment Count 0
  • HPE
     
    SECURITY

HPE: Russian hackers breached its security team’s email accounts

  • Hewlett Packard Enterprise (HPE) disclosed today that suspected Russian hackers known as Midnight Blizzard gained access to the company's Microsoft Office 365 email environment to steal data from its cybersecurity team and other departments.

  • Hackers
     
    SECURITY

VexTrio TDS: Inside a massive 70,000-domain cybercrime operation

  • A previously unknown traffic distribution system (TDS) named 'VexTrio' has been active since at least 2017, aiding 60 affiliates in their cybercrime operations through a massive network of 70,000 sites.

  • GitLab
     
    SECURITY

Over 5,300 GitLab servers exposed to zero-click account takeover attacks

  • Over 5,300 internet-exposed GitLab instances are vulnerable to CVE-2023-7028, a zero-click account takeover flaw GitLab warned about earlier this month.

  • Cybersecurity ethical hacking penetration testing
     
    DEALS

Save $384 in this CISSP exam preparation course bundle deal

  • Getting a CISSP credential can be intimidating. This eight-course CISSP exam prep bundle breaks it down into manageable pieces for $39.99, $384 off the $424 MSRP.

    • BLEEPINGCOMPUTER DEALS
      •  
    • JANUARY 24, 2024
      •  
    • 12:19 PM
      •  
    • Comment Count 0
  • AI hacker security Artificial Intelligence
     
    SECURITY

UK says AI will empower ransomware over the next two years

  • The United Kingdom's National Cyber Security Centre (NCSC) warns that artificial intelligence (AI) tools will have an adverse near-term impact on cybersecurity, helping escalate the threat of ransomware.

  • EquiLend
     
    SECURITY

Global fintech firm EquiLend offline after recent cyberattack

  • New York-based global financial technology firm EquiLend says its operations have been disrupted after some systems were taken offline in a Monday cyberattack.

  • Google Pixel 7
     
    GOOGLE, MOBILE

Google Pixel phones unusable after January 2024 system update

  • Google Pixel smartphone owners report problems after installing the January 2024 Google Play system update, being unable to access their devices internal storage, open the camera, take screenshots, or even open apps.

  • How to secure AD passwords without sacrificing end-user experience
     
    SECURITY
    SPONSORED CONTENT

How to secure AD passwords without sacrificing end-user experience

  • To increase password security, regulatory bodies recommend longer and unique passwords. Despite this, many still stick to using the same easy-to-guess passwords for the sake of convenience. Learn more from Specops Software on an alternative approach that supports security and end-user experience at the same time.

  • Pwn2Own Tokyo
     
    SECURITY

Tesla hacked, 24 zero-days demoed at Pwn2Own Automotive 2024

  • Security researchers hacked a Tesla Modem and collected awards of $722,500 on the first day of Pwn2Own Automotive 2024 for three bug collisions and 24 unique zero-day exploits.

Comments

Post a Comment

Please leave a comment about our recent post.

Popular posts from this blog

The Cyberwire Daily Briefing

Image
"Fortinet confirms breach of customer data." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 15 September 2024, 1339 UTC. Content and Source:   https://thecyberwire.com/newsletters/daily-briefing/13/176 Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). V13 | Issue 176 | 9.13.24 Daily Briefing for 09.13.24 Announcement Cloud Security in the Age of Generative AI. Artificial Intelligence is revolutionizing business, but it also introduces new risks. Join us on Wednesday, September 18th at 2pm EDT for a compelling live webinar on "Good vs. Evil: Cloud Security in the Age of Generative AI" with N2K CyberWire’s Dave Bittner and Sysdig’s Loris Degioanni.  Learn more and register now . Summary By the CyberWire staff At a glance. Fortinet confirms breach of customer data. Iran's Scarred Manticore deploys ne
Read more

BleepingComputer.com

Image
"Progress LoadMaster vulnerable to 10/10 severity RCE flaw." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 08 September 2024, 1458 UTC. Content and Source:   https://www.bleepingcomputer.com/ Please check link or scroll down to read your selections. Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). Latest Articles   Security Progress LoadMaster vulnerable to 10/10 severity RCE flaw Progress Software has issued an emergency fix for a maximum (10/10) severity vulnerability impacting its LoadMaster and LoadMaster Multi-Tenant (MT) Hypervisor products that allows attackers to remotely execute commands on the device. Bill Toulas   September 08, 2024   10:11 AM     0   Deals Get started learning about cybersecurity with this course bundle deal Take a real step towards a job in information security with this intro to cybersecurity. Get the 2024 Cybersecurity Essentials Bundl
Read more

SecurityWeek Briefing

Image
"New RAMBO attack allows air-gapped data theft." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 10 September 2024, 0035 UTC. Content and Source:  https://www.securityweek.com Please check link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net).   Monday, September 9 , 2024 Are you worried about unmanaged devices and apps? LATEST CYBERSECURITY HEADLINES New RAMBO Attack Allows Air-Gapped Data Theft Predator Spyware Resurfaces With Fresh Infrastructure Google Pushes Rust in Legacy Firmware to Tackle Memory Safety Flaws 300,000 Impacted by Data Breach at Car Rental Firm Avis One Million US Kaspersky Customers Transferred to Pango’s UltraAV Two Indicted in US for Running Dark Web Marketplaces Offering Stolen Information Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks CISA Breaks Silence on Controversial ‘Airp
Read more