Bleepingcomputer.com

"Veeam warns of critical RCE flaw in backup & replication software."

Views expressed in this cybersecurity and cyber crime update are those of the reporters and correspondents.  Accessed on 05 September 2024, 1516 UTC.

Content and Source:   https://www.bleepingcomputer.com/

Please check link or scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Latest Articles

Veeam warns of critical RCE flaw in Backup & Replication software

  • Veeam has released security updates for several of its products as part of a single September 2024 security bulletin that addresses 18 high and critical severity flaws in Veeam Backup & Replication, Service Provider Console, and One.

  • Save on a refurbished Chromebook now marked down to $80
     
    Deals

Save on a refurbished Chromebook now marked down to $80

  • These are no-frill computers that can manage basic tasks and don't look out of place stuffed in a backpack, and this Chromebook 4 is the perfect example for the right price. It's also only $80. 

    • BleepingComputer Deals
      •  
    • September 05, 2024
      •  
    • 07:16 AM
      •  
    • Comment Count 0
  • OnlyFans
     
    Security

Fake OnlyFans cybercrime tool infects hackers with malware

  • Hackers are targeting other hackers with a fake OnlyFans tool that claims to help steal accounts but instead infects threat actors with the Lumma stealer information-stealing malware.

  • Planned Parenthood
     
    Security, Healthcare

Planned Parenthood confirms cyberattack as RansomHub claims breach

  • Planned Parenthood has confirmed it suffered a cyberattack affecting its IT systems, forcing it to take parts of its infrastructure offline to contain the damage.

  • Microchip Technology
     
    Security

Microchip Technology confirms data was stolen in cyberattack

  • American semiconductor supplier Microchip Technology Incorporated has confirmed that employee information was stolen from systems compromised in an August cyberattack, which was later claimed by the Play ransomware gang.

  • red hacker grin
     
    Security

Red team tool ‘MacroPack’ abused in attacks to deploy Brute Ratel

  • The MacroPack framework, initially designed for Red Team exercises, is being abused by threat actors to deploy malicious payloads, including Havoc, Brute Ratel, and PhatomCore.

  • Russian hackers
     
    Security

US cracks down on Russian disinformation before 2024 election

  • The FBI seized 32 web domains used by the Doppelgänger Russian-linked influence operation network in a disinformation campaign targeting the American public ahead of this year's presidential election.

  • Cisco
     
    Security

Cisco fixes root escalation vulnerability with public exploit code

  • Cisco has fixed a command injection vulnerability in the Identity Services Engine (ISE) with public exploit code that lets attackers escalate privileges to root on vulnerable systems.

  • CompTIA
     
    Deals

Get started in IT and cybersecurity with this CompTIA course bundle deal

  • If you're looking for a low-cost information technology and cybersecurity course bundle with just as much exhaustive material as the expensive ones, check out the Complete 2024 CompTIA Course Super Bundle.

    • BleepingComputer Deals
      •  
    • September 04, 2024
      •  
    • 02:07 PM
      •  
    • Comment Count 0
  • Lock
     
    Security

New Eucleak attack lets threat actors clone YubiKey FIDO keys

  • A new "EUCLEAK" flaw found in FIDO devices using the Infineon SLE78 security microcontroller, like Yubico's YubiKey 5 Series, allows attackers to extract Elliptic Curve Digital Signature Algorithm (ECDSA) secret keys and clone the FIDO device.

  • Cisco
     
    Security

Cisco warns of backdoor admin account in Smart Licensing Utility

  • Cisco has removed a backdoor account in the Cisco Smart Licensing Utility (CSLU) that can be used to log into unpatched systems with administrative privileges.

  • Cisco
     
    Security

Hackers inject malicious JS in Cisco store to steal credit cards, credentials

  • Cisco's site for selling company-themed merchandise is currently offline and under maintenance due to hackers compromising it with JavaScript code that steals sensitive customer details provided at checkout.

  • Android
     
    Security, Google, Mobile

Google backports fix for Pixel EoP flaw to other Android devices

  • Google has released the September 2024 Android security updates to fix 34 vulnerabilities, including CVE-2024-32896, an actively exploited elevation of privilege flaw that was previously fixed on Pixel devices.

  • Criminal IP Earns PCI DSS v4.0 Certification for Top-Level Security
     
    Security· Sponsored Content

Criminal IP Earns PCI DSS v4.0 Certification for Top-Level Security

  • AI Spera has achieved PCI DSS v4.0 certification for its threat intel search engine solution, Criminal IP. Learn more from the Criminal IP cyber threat intelligence search engine.

  • Package Container
     
    Security

Revival Hijack supply-chain attack threatens 22,000 PyPI packages

  • Threat actors are utilizing an attack called "Revival Hijack," where they register new PyPi projects using the names of previously deleted packages to conduct supply chain attacks.

  • Get massive portable storage with this 512GB USB-C thumb drive deal
     
    Deals

Get massive portable storage with this 512GB USB-C thumb drive deal

  • Whether you're upgrading your file security, need to backup your phone, or just need extra storage, you can get dual USB-C/USB-A 512GB Flash Drive for $47.99.

    • BleepingComputer Deals
      •  
    • September 04, 2024
      •  
    • 07:16 AM
      •  
    • Comment Count 0
  • bitcoin hacker
     
    Security

FTC: Over $110 million lost to Bitcoin ATM scams in 2023

  • ​The U.S. Federal Trade Commission (FTC) has reported a massive increase in losses to Bitcoin ATM scams, nearly ten times the amount from 2020 and reaching over $110 million in 2023.

  • Zyxel
     
    Security, Hardware

Zyxel warns of critical OS command injection flaw in routers

  • Zyxel has released security updates to address a critical vulnerability impacting multiple models of its business routers, potentially allowing unauthenticated attackers to perform OS command injection.

  • Windows
     
    Microsoft

New Windows PowerToy launches, repositions apps to saved layouts

  • ​Microsoft has released a new Workspaces PowerToy that helps launch sets of applications using custom desktop layouts and configurations with a mouse click.

  • Hackers cryptocurrency
     
    Security, CryptoCurrency

FBI warns crypto firms of aggressive social engineering attacks

  • The FBI warns of North Korean hackers aggressively targeting cryptocurrency companies and their employees in sophisticated social engineering attacks, aiming to deploy malware that steals their crypto assets.

Comments

Post a Comment

Please leave a comment about our recent post.

Popular posts from this blog

SecurityWeek Briefing.

Image
"Microsoft offers up to $15,000 in New AI Bug Bounty Program." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 13 October 2023, 2020 UTC.  Content provided by email subscription to "SecurityWeek Briefing." Source:  https://mail.google.com/mail/u/0/#inbox/FMfcgzGtxdZHmrfcBkMDJSSNTtHlmhQX ("SecurityWeek Briefing"). Please click link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). SecurityWeek News Briefing | Friday, October 13, 2023 CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by Ransomware Juniper Networks Patches Over 30 Vulnerabilities in Junos OS In Other News : Ex-Uber Security Chief Appeal, New Offerings From Tech Giants, Crypto Bounty Dozens of Squid Proxy Vulnerabilities Remain Unpatched 2 Years After Disclosure Microsoft Offers Up to $15,000 in New AI Bug Bounty Program Researcher Co
Read more

SecurityWeek Briefing.

Image
"Health Care Solutions giant disrupted by Cyberattack." Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 19 October 2023, 2033 UTC.  Content provided by email subscription to "SecurityWeek Briefing." Source:  https://mail.google.com/mail/u/0/?tab=rm&ogbl#inbox/FMfcgzGwHLhdlHbpbQJXqhLLSvQbhdnC ("SecurityWeek Briefing"). Please click link or scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). SecurityWeek News Briefing | Thursday, October 19, 2023 Healthcare Solutions Giant Disrupted by Cyberattack Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program CipherStash Raises $3 Million for Encryption-in-Use Technology US Government Releases Anti-Phishing Guidance Google Play Protect Gets Real-Time Code Scanning Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,00
Read more

Cyber War Newswire

Image
"Fears Russian 'space weapon' could be used for cyberwarfare and sabotage." Views expressed in this cybersecurity and cyberespionage update are those of the reporters and correspondents.  Accessed on 23 May 2024, 2016 UTC. Content and Source:  https://cyberwar.einnews.com/news/cyber-war-news?n=2&code=FA9GNesSTpp2rjO1&utm_source=NewsletterNews&utm_medium=email&utm_campaign=Cyber+War+News&utm_content=navig/Cyber War News-EIN Presswire. Please scroll down to read your selections.  Thanks for joining us today. Russ Roberts (https://www.hawaiicybersecurityjournal.net). CYBER WAR NEWS MONITORING Get by    Email    •     RSS Published on  May 22, 2024 Fears Russian 'space weapon' could be used for cyberwarfare and sabotage The US has accused Russia of launching an anti-satellite weapon into space and placing it in the same orbit as an American probe, leading to fears of possible sabotage and cyber warfare. Pentagon spokesman Brigadier General Pat
Read more