Share

RSS

More Articles…

• From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company
• NIS: what it is and how it protects cybersecurity
• Advanced persistent threats (APTs): what they are and how to defend yourself
• Penetration Testing and MFA: A Dual Strategy to Maximize Security
• Penetration Testing: Where to Strike to Protect Your IT Network
• Ransomware: a plague that brings companies and institutions to their knees. Should you pay the ransom? Here is the answer.
• Why IT audit and log management are important for Cybersecurity
• Red Team, Blue Team and Purple Team: what are the differences?

Categories …

• Backup as a Service (18)
  • Acronis Cloud Backup (11)
  • Veeam Cloud Connect (4)
• Cloud Conference (3)
• Cloud CRM (1)
• Cloud Server/VPS (22)
• Conferenza Cloud (4)
• Cyberfero (15)
• ICT Monitoring (5)
• Log Management (2)
• News (25)
• ownCloud (4)
• Privacy (7)
• Security (203)
  • Cyber Threat Intelligence (CTI) (8)
  • Deception (4)
  • Ethical Phishing (11)
  • Netwrix Auditor (2)
  • Penetration Test (11)
  • Posture Guard (3)
  • SOCaaS (65)
    • EDR (3)
    • SIEM (13)
    • SOAR (5)
    • UEBA (10)
  • Vulnerabilities (84)
• Web Hosting (15)

Tags

darkreading

• QR Phishing Scams Gain Motorized Momentum in UK September 18, 2024
  Criminal actors are finding their niche in utilizing QR phishing codes, otherwise known as "quishing," to victimize unsuspecting tourists in Europe and beyond.
• FCC: AT&T Didn't Adequately Protect Customers' Cloud Data September 18, 2024
  Regulators fine AT&T $13 million for failing to protect customer information held by a third-party vendor, and extend consumer data protections to the cloud.
• Thousands of ServiceNow KB Instances Expose Sensitive Corporate Data September 18, 2024
  Despite security updates to protect data, 45% of total enterprise instances of the cloud-based IT management platform leaked PII, internal system details, and active credentials over the past year.
• How Shifts in Cyber Insurance Are Affecting the Security Landscape September 18, 2024
  Ultimately, the goal of businesses and cyber insurers alike is to build more resilient IT environments to avoid cyberattacks and the ransom, downtime, and reputation hit that come along with them.
• Infostealers: An Early Warning for Ransomware Attacks September 18, 2024
  Can cyber defenders use the presence of infostealers as a canary in the coal mine to preempt ransomware attacks?
• As Geopolitical Tensions Mount, Iran's Cyber Operations Grow September 18, 2024
  Increasing attacks by the OilRig/APT34 group linked to Iran's Ministry of Intelligence and Security show that the nation's capabilities are growing, and targeting regional allies and enemies alike.
• CISA Urges Software Makers to Eliminate XSS Flaws September 17, 2024
  The latest Secure by Design alert from CISA outlines recommended actions security teams should implement to reduce the prevalence of cross-site scripting vulnerabilities in software.
• Zero-Click RCE Bug in macOS Calendar Exposes iCloud Data September 17, 2024
  A researcher bypassed the Calendar sandbox, Gatekeeper, and TCC in a chain attack that allowed for wanton theft of iCloud photos.
• 'Marko Polo' Creates Globe-Spanning Cybercrime Juggernaut September 17, 2024
  The Eastern European group is actively expanding its financial fraud activities, with its pipelines representing a veritable Silk Road for the transfer of cryptocurrency, and lucrative and exploitable data.
• RT News Hosted Russian Cyber Spy Unit, US Says September 17, 2024
  US State Department warns that Kremlin-backed media outlets in democracies around the world are hiding Russian cyber spies and actively working to sow discord.

Full Disclosure

• SEC Consult blog :: Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey (CVE-2024-38014) + msiscan tool release September 17, 2024
  Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Sep 16The SEC Consult Vulnerability Lab published a new blog post titled: "Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey" covering the recent Microsoft September 2024 patch for CVE-2024-38014. Blog URL: --------- https://r.sec-consult.com/msi Author: ------- Michael Baer, SEC Consult Vulnerability Lab Abstract: […]
• Stored XSS to Account Takeover - htmlyv2.9.9 September 17, 2024
  Posted by Andrey Stoykov on Sep 16# Exploit Title: Stored XSS to Account Takeover - htmlyv2.9.9 # Date: 9/2024 # Exploit Author: Andrey Stoykov # Version: 2.9.9 # Tested on: Ubuntu 22.04 # Blog: https://msecureltd.blogspot.com/2024/08/friday-fun-pentest-series-9-stored-xss.html Description: - It was found that the application suffers from stored XSS - Low level user having an "author" role […]
• APPLE-SA-09-16-2024-10 macOS Ventura 13.7 September 17, 2024
  Posted by Apple Product Security via Fulldisclosure on Sep 16APPLE-SA-09-16-2024-10 macOS Ventura 13.7 macOS Ventura 13.7 addresses the following issues. Information about the security content is also available at https://support.apple.com/121234. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accounts Available for: macOS Ventura Impact: An app may […]
• APPLE-SA-09-16-2024-9 macOS Sonoma 14.7 September 17, 2024
  Posted by Apple Product Security via Fulldisclosure on Sep 16APPLE-SA-09-16-2024-9 macOS Sonoma 14.7 macOS Sonoma 14.7 addresses the following issues. Information about the security content is also available at https://support.apple.com/121247. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accounts Available for: macOS Sonoma Impact: An app may […]
• APPLE-SA-09-16-2024-8 iOS 17.7 and iPadOS 17.7 September 17, 2024
  Posted by Apple Product Security via Fulldisclosure on Sep 16APPLE-SA-09-16-2024-8 iOS 17.7 and iPadOS 17.7 iOS 17.7 and iPadOS 17.7 addresses the following issues. Information about the security content is also available at https://support.apple.com/121246. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accessibility Available for: iPhone XS […]
• APPLE-SA-09-16-2024-7 Xcode 16 September 17, 2024
  Posted by Apple Product Security via Fulldisclosure on Sep 16APPLE-SA-09-16-2024-7 Xcode 16 Xcode 16 addresses the following issues. Information about the security content is also available at https://support.apple.com/121239. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. IDE Documentation Available for: macOS Sonoma 14.5 and later Impact: A […]
• APPLE-SA-09-16-2024-6 Safari 18 September 17, 2024
  Posted by Apple Product Security via Fulldisclosure on Sep 16APPLE-SA-09-16-2024-6 Safari 18 Safari 18 addresses the following issues. Information about the security content is also available at https://support.apple.com/121241. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. WebKit Available for: macOS Ventura and macOS Sonoma Impact: Visiting a […]
• APPLE-SA-09-16-2024-5 visionOS 2 September 17, 2024
  Posted by Apple Product Security via Fulldisclosure on Sep 16APPLE-SA-09-16-2024-5 visionOS 2 visionOS 2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121249. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. APFS Available for: Apple Vision Pro Impact: A malicious app with […]
• APPLE-SA-09-16-2024-4 watchOS 11 September 17, 2024
  Posted by Apple Product Security via Fulldisclosure on Sep 16APPLE-SA-09-16-2024-4 watchOS 11 watchOS 11 addresses the following issues. Information about the security content is also available at https://support.apple.com/121240. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accessibility Available for: Apple Watch Series 6 and later Impact: An […]
• APPLE-SA-09-16-2024-3 tvOS 18 September 17, 2024
  Posted by Apple Product Security via Fulldisclosure on Sep 16APPLE-SA-09-16-2024-3 tvOS 18 tvOS 18 addresses the following issues. Information about the security content is also available at https://support.apple.com/121248. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Game Center Available for: Apple TV HD and Apple TV 4K […]