SecurityWeek Briefing

"Google Cloud to assign CVEs to critical vulnerabilities."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 14 November 2024, 0250 UTC.

Content and Source:  https://www.securityweek.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 

SecurityWeek

81K followers48 articles per week#security#tech

28

Today

Google Cloud to Assign CVEs to Critical Vulnerabilities

by Eduard Kovacs / 8h

Google Cloud will be assigning CVE identifiers to serious cloud vulnerabilities, even ones that don’t require patching. The post appeared first on SecurityWeek .

Citrix, Cisco, Fortinet Zero-Days Among 2023s Most Exploited Vulnerabilities

2023 top exploited vulnerabilities advisory

•

by Ionut Arghire / 10h

Most of the top frequently exploited vulnerabilities in 2023 were initially exploited as zero-days, according to data from government agencies. The post appeared first on SecurityWeek .

Chipmaker Patch Tuesday: Intel Publishes 44 and AMD Publishes 8 New Advisories

by Eduard Kovacs / 13h

Intel and AMD have published November 2024 Patch Tuesday security advisories to inform customers about vulnerabilities found recently in their products. The post appeared first on SecurityWeek .

Ivanti Patches 50 Vulnerabilities Across Several Products

Ivanti issues critical security updates

•

by Ionut Arghire / 13h

Ivanti has released fixes for dozens of vulnerabilities in Endpoint Manager, Avalanche, Connect Secure, Policy Secure, and Secure Access Client. The post appeared first on SecurityWeek .

CISO Forum Virtual Summit is Today

by SecurityWeek News / 14h

Login today for the CISO Forum Virtual Summit as we discuss innovative cybersecurity and risk management strategies. The post appeared first on SecurityWeek .

High-Severity Vulnerabilities Patched in Zoom, Chrome

by Ionut Arghire / 14h

Zoom Apps security updates resolve six vulnerabilities and Chrome 131 stable is rolling out with 12 security fixes. The post appeared first on SecurityWeek .

Chinese Hackers Target Tibetan Websites in Malware Attack, Cybersecurity Group Says

by Associated Press / 14h

A hacking group believed to be Chinese state-sponsored has compromised two websites with ties to the Tibetan community in an attack meant to install malware on computers. The post appeared first on SecurityWeek .

Citrix, Fortinet Patch High-Severity Vulnerabilities

by Ionut Arghire / 14h

Citrix and Fortinet have released patches for multiple vulnerabilities, including high-severity bugs in NetScaler and FortiOS. The post appeared first on SecurityWeek .

ICS Patch Tuesday: Security Advisories Released by CISA, Schneider, Siemens, Rockwell

by Eduard Kovacs / 14h

CISA, Schneider Electric, Siemens, and Rockwell Automation have released November 2024 Patch Tuesday security advisories. The post appeared first on SecurityWeek .

China’s Volt Typhoon Rebuilding Botnet

by Eduard Kovacs / 14h

Security researchers say the botnet created by China’s Volt Typhoon re-emerged recently, leveraging the same core infrastructure and techniques. The post appeared first on SecurityWeek .

Yesterday

Pentagon Secrets Leaker Jack Teixeira Sentenced to 15 Years in Prison by a Federal Judge

Teixeira sentenced for leaking documents

•

by Associated Press / 1d

Teixeira pleaded guilty in March to six counts of the willful retention and transmission of national defense information under the Espionage Act. The post appeared first on SecurityWeek .

Microsoft Confirms Zero-Day Exploitation of Task Scheduler Flaw

2 TTPs

•

by Ryan Naraine / 1d

Patch Tuesday: Microsoft patches 90 security flaws across the Windows ecosystem and warns of zero-day exploitation and code execution risks. The post appeared first on SecurityWeek .

Patch Tuesday: Critical Flaws in Adobe Commerce, Photoshop, InDesign, Illustrator

by Ryan Naraine / 1d

Adobe patches critical-severity bugs in multiple products, including the Adobe Commerce and Magento Open Source platforms. The post appeared first on SecurityWeek .

GitLoker Strikes Again: New “Goissue” Tool Targets GitHub Developers and Corporate Supply Chains

GoIssue phishing tool targets GitHub

•

by Kevin Townsend / 1d

GoIssue is a new tool for cybercriminals that allows attackers to extract email addresses from GitHub profiles and send bulk emails to users. The post appeared first on SecurityWeek .

Ahold Delhaize Cybersecurity Incident Impacts Giant Food, Hannaford

Ahold Delhaize announces buyback program

•

20by Ionut Arghire / 1d

Cybersecurity incident impacts Giant Food, Hannaford, and other Ahold Delhaize USA brands, including pharmacies and e-commerce services. The post appeared first on SecurityWeek .

SAP Patches High-Severity Vulnerability in Web Dispatcher

by Ionut Arghire / 1d

SAP has released eight new security notes on November 2024 patch day, including one addressing a high-severity vulnerability in Web Dispatcher. The post appeared first on SecurityWeek .

Form I-9 Compliance Data Breach Impacts Over 190,000 People

by Eduard Kovacs / 1d

The impact of a data breach suffered by Form I-9 Compliance is growing, with the number of affected individuals reaching 190,000. The post appeared first on SecurityWeek .

Millions of Hot Topic Customers Impacted by Data Breach

Hot Topic data breach affects 350M

•

by Ionut Arghire / 1d

Hot Topic has suffered a data breach impacting approximately 57 million unique email addresses and the personal information of roughly 25 million. The post appeared first on SecurityWeek .

Amazon Employee Data Leaked by Hacker

MOVEit breach exposes employee data

•

by Eduard Kovacs / 1d

Amazon has confirmed that some employee data was compromised as a result of a MOVEit hack last year. The post appeared first on SecurityWeek .

New iOS Security Feature Reboots Devices to Protect User Data: Reports

by Ionut Arghire / 1d

A new feature in the latest iOS release reportedly reboots locked devices that have not been unlocked for longer periods of time. The post appeared first on SecurityWeek .

IP Spoofing Attack Tried to Disrupt Tor Network

Tor network faces IP spoofing attack

•

by Eduard Kovacs / 1d

A coordinated IP spoofing attack that involved port scans tried to disrupt the Tor network by getting relays on blocklists. The post appeared first on SecurityWeek .

Nov 11, 2024

FBI Warns US Organizations of Fake Emergency Data Requests Made by Cybercriminals

Hackers exploit fake legal requests

•

by Ionut Arghire / 2d

The FBI is seeing an increase in threat actors using fake emergency data requests to harvest information from US companies. The post appeared first on SecurityWeek .

Cyberattack Cost Oil Giant Halliburton $35 Million

Halliburton misses profit estimates

•

by Eduard Kovacs / 2d

In its latest financial report, Halliburton said the recent cybersecurity incident has so far cost the company $35 million. The post appeared first on SecurityWeek .

Debt Relief Firm Forth Discloses Data Breach Impacting 1.5 Million People

by Ionut Arghire / 2d

Forth says the personal information of 1.5 million people was compromised in a May 2024 data breach. The post appeared first on SecurityWeek .

Veeam Patches High-Severity Vulnerability as Exploitation of Previous Flaw Expands

by Ionut Arghire / 2d

Veeam has released a hotfix for a high-severity authentication bypass vulnerability in Backup Enterprise Manager. The post appeared first on SecurityWeek .

Law Firm Data Breach Impacts 300,000 Presbyterian Healthcare Patients

Law firm data breach affects patients

•

by Eduard Kovacs / 2d

The information of over 300,000 Presbyterian Healthcare Services patients was compromised as a result of a data breach at law firm Thompson Coburn. The post appeared first on SecurityWeek .

Many Legacy D-Link NAS Devices Exposed to Remote Attacks via Critical Flaw

D-Link won't patch NAS vulnerability

•

by Ionut Arghire / 2d

D-Link warns of a critical-severity command injection vulnerability impacting multiple discontinued NAS models. The post appeared first on SecurityWeek .

Palo Alto Networks Addresses Remote Code Execution Vulnerability Claims

Palo Alto warns of PAN-OS RCE

•

by Eduard Kovacs / 2d

Palo Alto Networks has issued an advisory urging customers to take action in response to claims of an RCE vulnerability in PAN-OS. The post appeared first on SecurityWeek .

End of feed