"ESET flags prototype UEFI Bootkit targeting Linux."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 28 November 2024, 0359 UTC.

Content and Source:  Email subscription via https://feedly.com.  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 

SecurityWeek

81K followers46 articles per week#security#tech

20

Today

ESET Flags Prototype UEFI Bootkit Targeting Linux

10 TTPs

•

by Ryan Naraine / 10h

•

Bootkitty first UEFI bootkit for Linux

ESET warns of a new reality: “UEFI bootkits are no longer confined to Windows systems alone.” The post appeared first on SecurityWeek .

Source Code of $3,000-a-Month macOS Malware ‘Banshee Stealer’ Leaked

4 TTPs

•

by Eduard Kovacs / 15h

•

Banshee Stealer source code leaked

The Banshee Stealer macOS malware operation, which emerged earlier this year, was reportedly shut down following a source code leak. The post appeared first on SecurityWeek .

ProjectSend Vulnerability Exploited in the Wild

5 TTPs

•

by Ionut Arghire / 16h

•

CVE-2024-11680

VulnCheck warns of widespread exploitation of a year-and-a-half-old ProjectSend vulnerability for which multiple public exploits exist. The post appeared first on SecurityWeek .

Bipartisan Legislation Seeks Stronger Healthcare Cybersecurity

Bipartisan bill enhances healthcare cybersecurity

•

by Ionut Arghire / 16h

US senators introduce new legislation to protect health data and strengthen the cybersecurity of the country’s healthcare sector. The post appeared first on SecurityWeek .

Yesterday

New VPN Attack Demonstrated Against Palo Alto Networks, SonicWall Products

6 TTPs

•

by Eduard Kovacs / 18h

Palo Alto Networks and SonicWall VPNs affected by vulnerabilities allowing remote code execution and privilege escalation. The post appeared first on SecurityWeek .

Russian APT Chained Firefox and Windows Zero-Days Against US and European Targets

5 TTPs

•

by Ionut Arghire / 18h

The Russia-linked RomCom APT has been observed chaining two zero-days in Firefox and Windows for backdoor delivery. The post appeared first on SecurityWeek .

Interpol Clamps Down on Cybercrime and Arrests Over 1,000 Suspects in Africa

Interpol arrests 1006 cybercriminals in Africa

•

by Associated Press / 1d

Operation Serengeti targeted criminal suspects in Africa behind ransomware, business email compromise, digital extortion and scams. The post appeared first on SecurityWeek .

VMware Patches High-Severity Vulnerabilities in Aria Operations

2 TTPs

•

by Ryan Naraine / 1d

The company warns that malicious hackers can craft exploits to elevate privileges or launch cross-site scripting attacks. The post appeared first on SecurityWeek .

IBM Patches RCE Vulnerabilities in Data Virtualization Manager, Security SOAR

5 TTPs

•

by Ionut Arghire / 1d

IBM has released patches for two high-severity remote code execution vulnerabilities in Data Virtualization Manager and Security SOAR. The post appeared first on SecurityWeek .

Chinese Hackers Exploiting Critical Vulnerability in Array Networks Gateways

Persistence (Enterprise TA0003)

•

by Ionut Arghire / 1d

CISA warns about attacks exploiting CVE-2023-28461, a critical vulnerability in Array Networks AG and vxAG secure access gateways. The post appeared first on SecurityWeek .

New York Fines Geico and Travelers $11 Million Over Data Breaches

GEICO Travelers fined 11M$ data breach

•

by Ionut Arghire / 1d

New York has announced $11 million settlements with Geico and Travelers over data breaches affecting 120,000 people. The post appeared first on SecurityWeek .

Critical Vulnerabilities Found in Anti-Spam Plugin Used by 200,000 WordPress Sites

2 TTPs

•

by Ionut Arghire / 1d

Two vulnerabilities in the Anti-Spam by CleanTalk WordPress plugin allowed attackers to execute arbitrary code remotely. The post appeared first on SecurityWeek .

Nov 25, 2024

Starbucks, Grocery Stores Hit by Blue Yonder Ransomware Attack

Blue Yonder hit by ransomware attack

•

by Eduard Kovacs / 1d

Supply chain management software provider Blue Yonder has been targeted in a ransomware attack that caused significant disruptions for some customers. The post appeared first on SecurityWeek .

Recent Zyxel Firewall Vulnerability Exploited in Ransomware Attacks

5 TTPs

•

by Ionut Arghire / 2d

A ransomware group has been observed exploiting a recently patched command injection vulnerability in Zyxel firewalls for initial access. The post appeared first on SecurityWeek .

Vulnerabilities Expose mySCADA myPRO Systems to Remote Hacking

by Eduard Kovacs / 2d

Critical vulnerabilities patched by mySCADA in its myPRO HMI/SCADA product can allow remote and unauthenticated takeover of the system. The post appeared first on SecurityWeek .

Halcyon Raises $100 Million at $1 Billion Valuation

Halcyon secures 100M funding round

•

by Mike Lennon / 2d

Series C Funding round brings the total amount raised by the ransomware protection firm to $190 million. The post appeared first on SecurityWeek .

Viso Trust Raises $7 Million for Third-Party Risk Management Platform

VISO TRUST secures 24M funding

•

by Ionut Arghire / 2d

San Francisco-based third-party risk management provider Viso Trust has raised $7 million in venture funding. The post appeared first on SecurityWeek .

North Korea Deploying Fake IT Workers in China, Russia, Other Countries

6 TTPs

•

by Ionut Arghire / 2d

•

Microsoft updates on North Korean threats

The North Korean fake IT workers have infiltrated businesses in China, Russia, and other countries aside from the US. The post appeared first on SecurityWeek .

Microlise Confirms Data Breach as Ransomware Group Steps Forward

SafePay ransomware targets Microlise data

•

by Ionut Arghire / 2d

The SafePay ransomware group claims to have stolen over 1 terabyte of data from vehicle tracking solutions provider Microlise. The post appeared first on SecurityWeek .

Nov 24, 2024

Russian Cyberspies Hacked Building Across Street From Target for Wi-Fi Attack

4 TTPs

•

by Eduard Kovacs / 2d

•

Russian hackers breach US Wi-Fi

Russian cyberspy group APT28 conducted a Nearest Neighbor Attack, where it hacked into the building across the street from the victim for a Wi-Fi attack. The post appeared first on SecurityWeek .

End of feed