BleepingComputer.com

"Cisco warns of password-spraying attacks targeting VPN services."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 28 March 2024, 1658 UTC.

Content and Source:  https://www.bleepingcomputer.com/BleepingComputer.com.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

LATEST ARTICLES

Cisco warns of password-spraying attacks targeting VPN services

  • Cisco has shared a set of recommendations for customers to mitigate password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices.

  • How Pentesting-as-a-Service can Reduce Overall Security Costs
     
    SECURITY
    SPONSORED CONTENT

How Pentesting-as-a-Service can Reduce Overall Security Costs

  • Penetration testing plays a critical role in finding application vulnerabilities before they can be exploited. Learn more from Outpost24 on the costs of Penetration-Testing-as-a-Service vs classic pentest offerings.

  • Visio
     
    DEALS

Diagram better — Microsoft Visio Pro 2021 is $25 through April 2nd

  • Through April 2nd at 11:59 PM PT only, you can get Microsoft Visio Professional 2021 for Windows on sale for just $24.97 (reg. $249) as a part of a limited-time price drop. 

    • BLEEPINGCOMPUTER DEALS
      •  
    • MARCH 28, 2024
      •  
    • 07:11 AM
      •  
    • Comment Count 0
  • Dracula SMS
     
    SECURITY

New Darcula phishing service targets iPhone users via iMessage

  • A new phishing-as-a-service (PhaaS) named 'Darcula' uses 20,000 domains to spoof brands and steal credentials from Android and iPhone users in more than 100 countries.

  • Windows 11
     
    MICROSOFT

Windows 11 22H2 Home and Pro get preview updates until June 26

  • Microsoft reminded customers today that the Windows 11 22H2 Home and Pro editions will continue to receive non-security preview updates until June 26.

  • Google Chrome
     
    SECURITY, GOOGLE

Google fixes Chrome zero-days exploited at Pwn2Own 2024

  • Google fixed seven security vulnerabilities in the Chrome web browser on Tuesday, including two zero-days exploited during the Pwn2Own Vancouver 2024 hacking competition.

  • Security Cybersecurity
     
    DEALS

Price drop: Get an security and IT education for just $39.97

  • Order by 4/2 to get lifetime on-demand access to all 11 courses in this bundle for just $39.97, saving $332 on the original price.

    • BLEEPINGCOMPUTER DEALS
      •  
    • MARCH 27, 2024
      •  
    • 02:11 PM
      •  
    • Comment Count 0
  • NHS Scotland
     
    SECURITY, HEALTHCARE

INC Ransom threatens to leak 3TB of NHS Scotland stolen data

  • The INC Ransom extortion gang is threatening to publish three terabytes of data allegedly stolen after breaching the National Health Service (NHS) of Scotland.

  • SharePoint
     
    SECURITY, MICROSOFT

CISA tags Microsoft SharePoint RCE bug as actively exploited

  • CISA warns that attackers are now exploiting a Microsoft SharePoint code injection vulnerability that can be chained with a critical privilege escalation flaw for pre-auth remote code execution attacks.

  • Kucoin
     
    CRYPTOCURRENCY, LEGAL

KuCoin charged with AML violations that let cybercriminals launder billions

  • The U.S. Department of Justice (DoJ) has charged global cryptocurrency exchange KuCoin and two of its founders for failing to adhere to anti-money laundering (AML) requirements, allowing threat actors to use the platform to launder money.

  • Ransomware as a Service and the Strange Economics of the Dark Web
     
    SECURITY
    SPONSORED CONTENT

Ransomware as a Service and the Strange Economics of the Dark Web

  • Ransomware is quickly changing in 2024, with massive disruptions and large gangs shutting down. Learn from Flare how affiliate competition is changing in 2024, and what might come next.

    • SPONSORED BY FLARE
      •  
    • MARCH 27, 2024
      •  
    • 10:02 AM
      •  
    • Comment Count 1
  • Government spy
     
    SECURITY, GOOGLE

Google: Spyware vendors behind 50% of zero-days exploited in 2023

  • Google's Threat Analysis Group (TAG) and Google subsidiary Mandiant said they've observed a significant increase in the number of zero-day vulnerabilities exploited in attacks in 2023, many of them linked to spyware vendors and their clients.

  • Babbel
     
    DEALS

Speak, read, and write in a new language with $460 off Babbel

  • Learning a new language broadens your mind and opens up new opportunities. A Babbel lifetime subscription gets you started on a new way to speak for $139.97, $460 off the $599 MSRP, a price only available through April 2 11:59pm PST.

    • BLEEPINGCOMPUTER DEALS
      •  
    • MARCH 27, 2024
      •  
    • 07:19 AM
      •  
    • Comment Count 0
  • Windows 11
     
    MICROSOFT

Windows 11 KB5035942 update enables Moment 5 features for everyone

  • Microsoft has released the March 2024 non-security KB5035942 preview update for Windows 11 23H2, which enables Moment 5 features by default and fixes 18 known issues.

  • Windows 10
     
    MICROSOFT

Windows 10 KB5035941 update released with lock screen widgets

  • Microsoft has released the optional KB5035941 preview cumulative update for Windows 10 22H2, introducing widgets on the lock screen, Windows Spotlight on the desktop, and 21 other fixes or changes.

  • Chinese hackers
     
    SECURITY

Finland confirms APT31 hackers behind 2021 parliament breach

  • The Finnish Police confirmed on Tuesday that the APT31 hacking group linked to the Chinese Ministry of State Security (MSS) was behind a breach of the country's parliament disclosed in March 2021.

  • Raspberry Pi
     
    SECURITY, HARDWARE

$700 cybercrime software turns Raspberry Pi into an evasive fraud tool

  • Cybercriminals are selling custom Raspberry Pi software called 'GEOBOX' on Telegram, which allows inexperienced hackers to convert the mini-computers into anonymous cyberattack tools.

  • Exchange Online
     
    SECURITY

Germany warns of 17K vulnerable Microsoft Exchange servers exposed online

  • The German national cybersecurity authority warned on Tuesday that it found at least 17,000 Microsoft Exchange servers in Germany exposed online and vulnerable to one or more critical security vulnerabilities.

  • AI hacker security Artificial Intelligence
     
    SECURITY, ARTIFICIAL INTELLIGENCE

Hackers exploit Ray framework flaw to breach servers, hijack resources

  • A new hacking campaign dubbed "ShadowRay" targets an unpatched vulnerability in Ray, a popular open-source AI framework, to hijack computing power and leak sensitive data from thousands of companies.

  • Project Management
     
    DEALS

Train to become a project manager with $155 off this training bundle

  • Project management is about discipline, on the individual and team level. These five project management training and exam prep courses help you marshal that discipline for $39.99, $155 off the $195 MSRP.

    • BLEEPINGCOMPUTER DEALS
      •  
    • MARCH 26, 2024
      •  
    • 02:06 PM
      •  
    • Comment Count 0
VIEW MORE

Comments

Post a Comment

Please leave a comment about our recent post.

Popular posts from this blog

SecurityWeek Briefing.

Image
"Microsoft offers up to $15,000 in New AI Bug Bounty Program." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 13 October 2023, 2020 UTC.  Content provided by email subscription to "SecurityWeek Briefing." Source:  https://mail.google.com/mail/u/0/#inbox/FMfcgzGtxdZHmrfcBkMDJSSNTtHlmhQX ("SecurityWeek Briefing"). Please click link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). SecurityWeek News Briefing | Friday, October 13, 2023 CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by Ransomware Juniper Networks Patches Over 30 Vulnerabilities in Junos OS In Other News : Ex-Uber Security Chief Appeal, New Offerings From Tech Giants, Crypto Bounty Dozens of Squid Proxy Vulnerabilities Remain Unpatched 2 Years After Disclosure Microsoft Offers Up to $15,000 in New AI Bug Bounty Program Researcher Co
Read more

SecurityWeek Briefing.

Image
"Health Care Solutions giant disrupted by Cyberattack." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 19 October 2023, 2033 UTC.  Content provided by email subscription to "SecurityWeek Briefing." Source:  https://mail.google.com/mail/u/0/?tab=rm&ogbl#inbox/FMfcgzGwHLhdlHbpbQJXqhLLSvQbhdnC ("SecurityWeek Briefing"). Please click link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). SecurityWeek News Briefing | Thursday, October 19, 2023 Healthcare Solutions Giant Disrupted by Cyberattack Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program CipherStash Raises $3 Million for Encryption-in-Use Technology US Government Releases Anti-Phishing Guidance Google Play Protect Gets Real-Time Code Scanning Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,00
Read more

Cyber War News Wire.

Image
 "Navy establishes cyber warfare enlisted rating." Views expressed in this cyber war, cybersecurity, cyber espionage update are those of the reporters and correspondents.  Accessed on 02 July 2023, 2311 UTC.  Content provided by EIN Presswire. Source:  https://mail.google.com/mail/u/0/#inbox/FMfcgzGtvsTbTPlbNrgzDpppFbtXwWxF ("Cyber War News Wire" from EIN Presswire). Please click link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). ·  Subscribe  ·  Unsubscribe My Alerts       Cyber War Newswire Got News to Share? Send 2 FREE Releases ↓ Daily update  ·  July 2, 2023     NEWS     Navy Establishes Cyber Warfare Enlisted Rating  Seapower Magazine ***** ARLINGTON, Va. — The U.S. Navy’s effort to expand its cyber warfare capabilities took another step with the establishment of the Cyber Warfare Technician (CWT) rating in its enlisted force.  The CTWs will conduct both offensive and defensive
Read more