Latest Cybersecurity News and Articles
15 November 2023
Millions of browser-based cryptocurrency wallets face a potential $1 billion theft risk due to the Randstorm vulnerability in Bitcoin JS 0.13, affecting wallets created between 2011 and 2015. Notable affected vendors include Blockchain.com, Bitgo, and BitPay, prompting recommendations for users to transition to new wallets and vendors to conduct audits for enhanced security.
15 November 2023
The vulnerability, known as "Randstorm," is a result of programming mistakes and weaknesses in random number generation in the BitcoinJS library, making Bitcoin private keys more vulnerable to attacks.
15 November 2023
US government announces the takedown of the IPStorm proxy service botnet and the guilty plea of its creator, a Russian/Moldovan national.
The post US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea appeared first on SecurityWeek.
15 November 2023
The UK’s critical infrastructure (CNI) providers face a persistent and critical threat from emboldened state-backed and aligned actors, a leading UK cybersecurity agency has warned. The NCSC issued the warning in its Annual Review 2023.
15 November 2023
The agreement, which focuses on information security, was made between the State Service for Special Communication and Information Security of Azerbaijan and the Turkmenistan agency of Transport and Communications.
15 November 2023
Google researchers independently discovered the vulnerability and identified "very strange behavior" related to how redundant prefixes are interpreted by the CPU, leading to potential security bypasses.
15 November 2023
SAP released a hotfix for a critical-severity improper access control vulnerability in Business One product installation.
The post SAP Patches Critical Vulnerability in Business One Product appeared first on SecurityWeek.
15 November 2023
The new agreement was signed by the EU security agency ENISA, Ukraine’s National Cybersecurity Coordination Center (NCCC), and the Administration of the State Service of Special Communications and Information Protection of Ukraine (SSSCIP).
15 November 2023
By embracing a strategy that combines technological advancements with critical thinking skills, collaboration, and a culture of continuous learning, organizations can safeguard against AI's disruptive effects.
The post Addressing the State of AI’s Impact on Cyber Disinformation/Misinformation appeared first on SecurityWeek.
15 November 2023
The breach, which occurred between August 30 and September 1, resulted in the unauthorized access of files containing patient names, medication type, demographic information, and prescribing physician names.
15 November 2023
RADICL, a cybersecurity startup specializing in providing threat protection to SMBs, secured an additional $9 million in early-stage funding, adding to $3 million that the company had raised previously.
The post RADICL Adds $9 Million in Funding to Fortify Cyber Defenses of SMBs in Defense Industrial Base appeared first on SecurityWeek.
15 November 2023
The IPStorm botnet evolved since 2019, targeting Windows, Linux, Mac, and Android devices, using the InterPlanetary File System (IPFS) network to hide its activities and offering access to thousands of compromised systems for a high price.
15 November 2023
What do basketball teams, government agencies, and car manufacturers have in common?
Each one has been breached, having confidential, proprietary, or private information stolen and exposed by insiders. In each case, the motivations and methods varied, but the risk remained the same: insiders have access to too much data with too few controls.
Insider threats continue to prove difficult for
15 November 2023
The AUKUS partnership, with its focus on nuclear submarines and other advanced military capabilities, is likely a target for state actors looking to steal intellectual property.
The post State-Backed Hackers a Threat to Australia, Agency Warns appeared first on SecurityWeek.
15 November 2023
The three actively exploited zero-day vulnerabilities, including a Windows SmartScreen bypass and privilege escalation flaws, emphasize the need for users to exercise caution when interacting with internet shortcuts and hyperlinks.
15 November 2023
Intel and AMD have informed their customers about a total of more than 130 vulnerabilities found in their products.
The post Chipmaker Patch Tuesday: Intel, AMD Address Over 130 Vulnerabilities appeared first on SecurityWeek.
15 November 2023
VMware has disclosed a critical authentication bypass vulnerability (CVE-2023-34060) affecting its Cloud Director appliance deployments. The flaw only affects upgraded versions of the VCD Appliance 10.5.
15 November 2023
A new Intel CPU vulnerability tracked as Reptar and CVE-2023-23583 can be exploited for DoS attacks and possibly privilege escalation.
The post New Intel CPU Vulnerability ‘Reptar’ Can Allow DoS Attacks, Privilege Escalation appeared first on SecurityWeek.
15 November 2023
The attackers upload a malicious DLL as a User-Defined Function library, allowing them to execute commands and deploy the Ddostf malware. The malware collects system information and waits for commands to launch DDoS attacks.
15 November 2023
Users are advised to avoid exposing Azure CLI output in logs, regularly rotate keys and secrets, and review best practices for securing Azure Pipelines and GitHub Actions to prevent accidental exposure of sensitive information.