BleepingComputer.com

"How to reduce cyber risk during employee onboarding."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 19 September 2024, 1409 UTC.

Content and Source:   https://www.bleepingcomputer.com/

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

How to reduce cyber risk during employee onboarding

  • Onboarding new employees is an important time for any organization but comes with a unique set of security risks. Learn more from Specops Software about these risks and how to mitigate them.

  • Love cloud
     

Mysterious "LOVE" packet storms flood the internet since 2020

  • Internet intelligence firm GreyNoise reports that it has been tracking large waves of "Noise Storms" containing spoofed internet traffic since January 2020. However, despite extensive analysis, it has not concluded its origin and purpose.

  • Babbel
     

Lifetime access to this language learning app is now $400 off in this deal

  • Learn as much of a new language as you need. Get a lifetime subscription to Babbel Language Learning for $149.97. 

    • BleepingComputer Deals
    •  
    • September 19, 2024
    •  
    • 07:12 AM
    •  
    • Comment Count 0
  • GitHub
     

Clever 'GitHub Scanner' campaign abusing repos to push malware

  • A clever threat campaign is abusing GitHub repositories to distribute the Lumma Stealer password-stealing malware targeting users who frequent an open source project repository or are subscribed to email notifications from it.

  • Discord
     

Discord rolls out end-to-end encryption for audio, video calls

  • Discord has introduced the DAVE protocol, a custom end-to-end encryption (E2EE) protocol designed to protect audio and video calls on the platform from unauthorized interceptions.

  • Ghost
     

Europol takes down "Ghost" encrypted messaging platform used for crime

  • Europol and law enforcement from nine countries successfully dismantled an encrypted communications platform called "Ghost," which was used by organized crime such as drug trafficking and money laundering.

  • Twitter X logo flare
     

X hacking spree fuels "$HACKED" crypto token pump-and-dump

  • An X account hacking spree has fueled a successful pump-and-dump scheme for the $HACKED Solana token, with people rushing to buy the coin.

  • Hospital
     

Microsoft: Vanilla Tempest hackers hit healthcare with INC ransomware

  • ​Microsoft says a ransomware affiliate it tracks as Vanilla Tempest now targets U.S. healthcare organizations in INC ransomware attacks.

  • GitLab
     

GitLab releases fix for critical SAML authentication bypass flaw

  • GitLab has released security updates to address a critical SAML authentication bypass vulnerability impacting self-managed installations of the GitLab Community Edition (CE) and Enterprise Edition (EE).

  • Cybersecurity Lock World
     

Check out this cybersecurity course bundle before paying for expensive classes

  • Get the 2024 Cybersecurity Mastermind Training Course Bundle, a beginner-friendly guide to cybersecurity fundamentals, and it's marked down to $39.99 (from $300).

    • BleepingComputer Deals
    •  
    • September 18, 2024
    •  
    • 02:09 PM
    •  
    • Comment Count 0
  • Windows 11
     

Microsoft may have revealed Windows 11 24H2 is coming this month

  • Microsoft may have accidentally confirmed that Windows 11 24H2 (Windows 11 2024 Update) is arriving on September 24 as part of the optional preview update, with it rolling out to more people as part of the mandatory October Patch Tuesday updates.

  • Apple
     

Apple pulls iPadOS 18 update bricking M4 iPad Pro devices

  • Apple has paused the rollout of iPadOS 18 on iPad Pro tablets with the M4 chip after numerous owners reported the update is "bricking" their devices, with no way to turn them on after performing the update.

  • Cyberattack ddos network cybersecurity
     

Chinese botnet infects 260,000 SOHO routers, IP cameras with malware

  • The FBI and cybersecurity researchers have disrupted a massive Chinese botnet called "Raptor Train" that infected over 260,000 networking devices to target critical infrastructure in the US and in other countries.

  • Dr.Web hacker
     

Russian security firm Dr.Web disconnects all servers after breach

  • On Tuesday, Russian anti-malware company Doctor Web (Dr.Web) disclosed a security breach after its systems were targeted in a cyberattack over the weekend.

  • 4 Top Security Automation Use Cases: A Detailed Guide
     
    Security· Sponsored Content

4 Top Security Automation Use Cases: A Detailed Guide

  • Learn about the top 4 security automation use cases that can streamline your cybersecurity efforts. This guide covers reducing enriching indicators of compromise (IoCs), monitoring external attack surface(s), scanning for web application vulnerabilities and monitoring for leaked user credentials - specifically email addresses.

  • Nip one travel stress in the bud with this 100W power bank deal
     

Nip one travel stress in the bud with this 100W power bank deal

  • With its built-in safety features like over-current, over-voltage, and short circuit protection, you can travel with peace of mind knowing your devices are safe. Pick up a Flash Pro Plus 100W Portable Power Bank for $199.97.

    • BleepingComputer Deals
    •  
    • September 18, 2024
    •  
    • 07:18 AM
    •  
    • Comment Count 0
  • Temu
     

Temu denies breach after hacker claims theft of 87 million data records

  • Temu denies it was hacked or suffered a data breach after a threat actor claimed to be selling a stolen database containing 87 million records of customer information.

  • VMware
     

Broadcom fixes critical RCE bug in VMware vCenter Server

  • Broadcom has fixed a critical VMware vCenter Server vulnerability that attackers can exploit to gain remote code execution on unpatched servers via a network packet.

  • Construction
     

Construction firms breached in brute force attacks on accounting software

  • Hackers are brute-forcing passwords for highly privileged accounts on exposed Foundation accounting servers, widely used in the construction industry, to breach corporate networks.

  • Cloudflare
     

Cloudflare outage cuts off access to websites in some regions

  • A rolling Cloudflare outage is impacting access to web sites worldwide, including BleepingComputer, with sites working in some regions and not others.

Comments

Popular posts from this blog

BleepingComputer.com

The Cyberwire Daily Briefing

SecurityWeek Briefing