BleepingComputer.com

"CISA proposes new security requirments to protect government, personal data."

View expressed in this cybersecurity, cyber crime summary are those of the reporters and correspondents.  Accessed on 23 October 202, 1331 UTC.

Content and Source:   https://www.bleepingcomputer.com/

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Latest Articles

• 
   
  Deals

Get an open-box Apple Pencil for only $50 in this deal

• If you need some extra precision and control for drawing, writing, or just basic controls, check out this Apple Pencil. Instead of paying $79 for this precision stylus, you can get an open-box Apple Pencil for just $49.99.

  • BleepingComputer Deals
   
  • October 23, 2024
   
  • 07:16 AM
   
  •  0
• 
   
  Security, Legal

CISA proposes new security requirements to protect govt, personal data

• The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is proposing security requirements to prevent adversary states from accessing American's personal data as well as government-related information.

  • Bill Toulas
   
  • October 22, 2024
   
  • 06:11 PM
   
  •  3
• 
   
  Microsoft

Windows 10 KB5045594 update fixes multi-function printer bugs

• Microsoft has released the optional KB5045594 preview cumulative update for Windows 10 22H2 with fixes for problems printing to multi-function printers and other issues.

  • Lawrence Abrams
   
  • October 22, 2024
   
  • 04:50 PM
   
  •  0
• 
   
  Security, Cloud, Mobile

AWS, Azure auth keys found in Android and iOS apps used by millions

• Multiple popular mobile applications for iOS and Android come with hardcoded, unencrypted credentials for cloud services like Amazon Web Services (AWS) and Microsoft Azure Blob Storage, exposing user data and source code to security breaches.

  • Bill Toulas
   
  • October 22, 2024
   
  • 04:19 PM
   
  •  0
• 
   
  Security

SEC charges tech companies for downplaying SolarWinds breaches

• The SEC has charged four companies—Unisys Corp, Avaya Holdings, Check Point Software, and Mimecast—for allegedly misleading investors about the impact of their breaches during the massive 2020 SolarWinds Orion hack.

  • Lawrence Abrams
   
  • October 22, 2024
   
  • 02:31 PM
   
  •  0
• 
   
  Deals

Learn about free ethical hacking tools and more in this $45 course deal

• Training in cybersecurity is a strategic move for anyone looking to enter or advance in the IT field, and the 2024 All-in-One Ethical Hacking Bundle can help. This 18-course bundle breaks down the fundamentals of ethical hacking, including practical tips like help finding free tools, and it's only $44.99 (reg. $719). 

  • BleepingComputer Deals
   
  • October 22, 2024
   
  • 02:06 PM
   
  •  0
• 
   
  Security, Microsoft

Exploit released for new Windows Server "WinReg" NTLM Relay attack

• Proof-of-concept exploit code is now public for a vulnerability in Microsoft's Remote Registry client that could be used to take control of a Windows domain by downgrading the security of the authentication process.

  • Bill Toulas
   
  • October 22, 2024
   
  • 01:26 PM
   
  •  0
• 
   
  Security

VMware fixes bad patch for critical vCenter Server RCE flaw

• VMware has released another security update for CVE-2024-38812, a critical VMware vCenter Server remote code execution vulnerability that was not correctly fixed in the first patch from September 2024.

  • Bill Toulas
   
  • October 22, 2024
   
  • 10:08 AM
   
  •  0
• 
   
  Deals

Get Word, Excel, PowerPoint, and more for life in this deal

• If you're tired of monthly fees and want a more budget-friendly option, Microsoft Office 2024 is here to save the day as a practical replacement for Microsoft 365.

  • BleepingComputer Deals
   
  • October 22, 2024
   
  • 07:12 AM
   
  •  2
• 
   
  Security

Hackers exploit Roundcube webmail flaw to steal email, credentials

• Threat actors have been exploiting a vulnerability in the Roundcube Webmail client to target government organizations in the Commonwealth of Independent States (CIS) region, the successor of the former Soviet Union.

  • Bill Toulas
   
  • October 21, 2024
   
  • 05:14 PM
   
  •  0
• 
   
  Security

Over 6,000 WordPress hacked to install plugins pushing infostealers

• WordPress sites are being hacked to install malicious plugins that display fake software updates and errors to push information-stealing malware.

  • Lawrence Abrams
   
  • October 21, 2024
   
  • 01:53 PM
   
  •  0
• 
   
  Microsoft, Hardware, Software

Microsoft blocks Windows 11 24H2 on two ASUS models due to crashes

• Microsoft is warning of Windows crashing with the blue screen of death on some ASUS laptop models when trying to upgrade to the latest version of the operating system, Windows 11 version 24H2.

  • Bill Toulas
   
  • October 21, 2024
   
  • 12:42 PM
   
  •  0
• 
   
  Security

Bumblebee malware returns after recent law enforcement disruption

• The Bumblebee malware loader has been spotted in new attacks recently, more than four months after Europol disrupted it during 'Operation Endgame' in May.

  • Bill Toulas
   
  • October 21, 2024
   
  • 11:45 AM
   
  •  0
• 
   
  Deals

Prepare for your first IT job with this $40 CompTIA course bundle

• CompTIA certification exams are expensive, and you have to pay for every attempt. Ace it the first time after studying the Complete CompTIA and IT Exam Training Bundle for $39.97. Sale ends October 27 at 11:59 p.m. PT.

  • BleepingComputer Deals
   
  • October 21, 2024
   
  • 07:17 AM
   
  •  0
• 
   
  Security, Cloud

Severe flaws in E2EE cloud storage platforms used by millions

• Several end-to-end encrypted (E2EE) cloud storage platforms are vulnerable to a set of security issues that could expose user data to malicious actors.

  • Bill Toulas
   
  • October 20, 2024
   
  • 12:06 PM
   
  •  0
• 
   
  Security

Internet Archive breached again through stolen access tokens

• The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens.

  • Lawrence Abrams
   
  • October 20, 2024
   
  • 10:46 AM
   
  •  7
• 
   
  Deals

Ditch the subscriptions—this Koofr cloud storage deal is only $120 for life

• Through October 27 at 11:59 PM Pacific, you can get lifetime access to 1TB of Koofr cloud storage for $119.97 when you enter code KOOFR40 at checkout. Supplies are limited, so act while inventory lasts!

  • BleepingComputer Deals
   
  • October 20, 2024
   
  • 08:19 AM
   
  •  4
• 
   
  Security, Microsoft

Microsoft creates fake Azure tenants to pull phishers into honeypots

• Microsoft is using deceptive tactics against phishing actors by spawning realistic-looking honeypot tenants with access to Azure and lure cybercriminals in to collect intelligence about them.

  • Bill Toulas
   
  • October 19, 2024
   
  • 10:32 AM
   
  •  6
• 
   
  Security

Google Scholar has a 'verified email' for Sir Isaac Newton

• It's true: Google Scholar profile of the renowned former physicist and polymath, Sir Isaac Newton bears a "verified email" note. According to Google Scholar, Isaac Newton is a "Professor of Physics, MIT" with a "Verified email at mit.edu."

  • Ax Sharma
   
  • October 19, 2024
   
  • 09:00 AM
   
  •  4
• 
   
  Deals

Get started in an infosec career with this essential training deal

• If you're looking for a new career, you can try online courses and earn certifications to get your foot in the door. You can get this 5-course Ultimate Cybersecurity Professional bundle for $69.97 (reg. $535) through October 27. 

  • BleepingComputer Deals
   
  • October 19, 2024
   
  • 08:19 AM
   
  •  0

• 1
 
• 2
 
• 3
 
• 4
 
• 5