"Head of U.S. Cybersecurity Agency says she hopes to keep up election work under Trump."

Views expressed are those of the reporters and correspondents.  Accessed on 16 January 2025, 0335 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

83K followers34 articles per week#security#tech

11

Today

Head of US Cybersecurity Agency Says She Hopes It Keeps up Election Work Under Trump

Cybersecurity chief hopes election work continues

•

by Associated Press / 1h

Jen Easterly hopes CISA is allowed to continue its election-related work under new leadership despite “contentiousness” around that part of its mission. The post appeared first on SecurityWeek .

FBI Uses Malware’s Own ‘Self-Delete’ Trick to Erase Chinese PlugX From US Computers

3 TTPs

•

by Ryan Naraine / 7h

•

US France eliminate China malware

Law enforcement turns the PlugX malware’s own self-delete mechanism against it, nuking the China-linked trojan from thousands of US machines. The post appeared first on SecurityWeek .

DORA’s Deadline Looms: Navigating the EU’s Mandate for Threat Led Penetration Testing

by Trevin Edgeworth / 10h

With DORA’s January 2025 compliance deadline approaching, financial institutions must embrace rigorous testing, tailored threat profiles, and continuous vigilance to safeguard against cyber threats. The post appeared first on SecurityWeek .

Cyber Insights 2025: Open Source and Software Supply Chain Security

by Kevin Townsend / 12h

Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge. The post appeared first on SecurityWeek .

Google OAuth Flaw Leads to Account Takeover When Domain Ownership Changes

Google OAuth vulnerability exposes millions

•

by Ionut Arghire / 12h

A vulnerability in Google’s OAuth implementation allows takeover of old employee accounts when domain ownership changes. The post appeared first on SecurityWeek .

Chrome 132 Patches 16 Vulnerabilities

by Ionut Arghire / 14h

Google has released Chrome 132 with fixes for 16 vulnerabilities, including multiple high-severity security defects. The post appeared first on SecurityWeek .

Nvidia, Zoom, Zyxel Patch High-Severity Vulnerabilities

4 TTPs

•

by Ionut Arghire / 14h

•

CVE-2024-12398

Nvidia, Zoom, and Zyxel have released patches for multiple high-severity vulnerabilities across their products. The post appeared first on SecurityWeek .

US, Japan, South Korea Blame North Korean Hackers for $660M Crypto Heists

2 TTPs

•

by Ionut Arghire / 15h

•

North Korea steals 659 million dollars

The US, Japan, and South Korea say North Korean hackers stole roughly $660 million in cryptocurrency last year. The post appeared first on SecurityWeek .

Ivanti Patches Critical Vulnerabilities in Endpoint Manager

3 TTPs

•

by Ionut Arghire / 15h

Ivanti has released patches for multiple vulnerabilities in Endpoint Manager (EPM), including four critical-severity flaws. The post appeared first on SecurityWeek .

Fortinet Confirms New Zero-Day Exploitation

6 TTPs

•

by Eduard Kovacs / 16h

Fortinet patches critical vulnerabilities, including a zero-day that has been exploited in the wild since at least November 2024. The post appeared first on SecurityWeek .

ICS Patch Tuesday: Security Advisories Published by Schneider, Siemens, Phoenix Contact, CISA

3 TTPs

•

by Eduard Kovacs / 17h

•

PatchTuesday

Schneider Electric, Siemens, CISA, and Phoenix Contact have released January 2025 Patch Tuesday ICS security advisories. The post appeared first on SecurityWeek .

End of feed