1890 matches found
Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms
Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology OT environments in Israel and the United States. The malware has been codenamed IOCONTROL by OT cybersecurity company Claroty, highlighting its ability to attack IoT and...
Something to Read When You Are On Call and Everyone Else is at the Office Party
Welcome to this week's edition of the Threat Source newsletter. The new head of the UK's National Cyber Security Centre, Richard Horne, recently remarked that there is a "clearly widening gap between, on the one hand, the threat and our exposure to it and, on the other, the defences that are in...
CVE-2024-53274 GHSL-2024-111: Reflected XSS in /home in habitica
Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The register function in home.vue containsa reflected XSS vulnerability due to an incorrect sanitization function. An attacker can specify a malicious redirectTo parameter...
CVE-2024-490646
creationtimestamp| type| source ---|---|--- 2024-12-10 18:33:29+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2024-0471...
ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies
Today, CISA—in partnership with the Australian Signals Directorate Australian Cyber Security Centre ASD ACSC, and other international partners—released updates to a Secure by Design Alert, Choosing Secure and Verifiable Technologieslink is external. Partners that provided recommendations in this...
Bidirectional communication via polyrhythms and shuffles: Without Jon the beat must go on
Welcome to this week's edition of the Threat Source newsletter. Bidirectional communication is foundational to a well-built team regardless of environment. It's critical in information security to be able to drive a conversation up the ladder and down and not lose the critical elements. One of th...
CVE-2024-490508
creationtimestamp| type| source ---|---|--- 2024-11-12 18:54:00+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2024-0435...
TikTok ordered to close Canada offices following “national security review”
The Government of Canada ordered the TikTok Technology Canada Inc. to close its offices in the country following a national security review. This decision was made in accordance with the Investment Canada Act, which allows for the review of foreign investments that may be injurious to Canada’s...
CVE-2024-52013
creationtimestamp| type| source ---|---|--- 2024-11-05 17:13:16+00:00| seen| https://t.me/cvedetector/9884...
Embarking on a Compliance Journey? Here's How Intruder Can Help
Navigating the complexities of compliance frameworks like ISO 27001, SOC 2, or GDPR can be daunting. Luckily, Intruder simplifies the process by helping you address the key vulnerability management criteria these frameworks demand, making your compliance journey much smoother. Read on to understa...
JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage
CISA, through the Joint Cyber Defense Collaborative JCDC, enabled swift, coordinated response and information sharing in the wake of a significant IT outage caused by a CrowdStrike software update. This outage, which impacted government, critical infrastructure, and industry across the globe, led...
CVE-2015-2863
creationtimestamp| type| source ---|---|--- 2024-10-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-27 2024-11-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-09 2025-01-20 00:00:00+00:00| seen| The Shadowserver...
CVE-2020-15498
creationtimestamp| type| source ---|---|--- 2024-10-26 01:48:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1471 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7081 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7081 2026-07-14 00:00:49+00:00| see...
CVE-2019-19697
creationtimestamp| type| source ---|---|--- 2024-10-14 22:12:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/538...
CVE-2019-16692
creationtimestamp| type| source ---|---|--- 2024-10-11 21:55:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/451...
CVE-2017-7763
creationtimestamp| type| source ---|---|--- 2024-10-11 21:42:45+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/439...
Abusix and Red Sift Form New Partnership, Leveraging Automation to Mitigate Cyber Attacks
Boston and London, U.S. and U.K., 10th October 2024, CyberNewsWire...
Imposter syndrome in cyber security
TL;DR Imposter syndrome is the belief that you are undeserving of your achievements Anyone can be affected by it There are ways to cope What is imposter syndrome? Imposter syndrome is the psychological pattern in which a person downplays their achievements and believes that they are secretly a...
CVE-2024-9466
creationtimestamp| type| source ---|---|--- 2024-10-09 19:50:18+00:00| seen| https://t.me/cvedetector/7507 2024-10-10 12:00:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus24/2024 2024-10-10 13:17:11+00:00| published-proof-of-concept| https://t.me/truesecator/6304 2024-10-1...