17665 matches found
Building a Custom Risk Prioritization and Risk Scoring Methodology with Surface Command
Over the 15 years I spent as a practitioner and consultant prior to joining Rapid7, a metric that I found to be ever elusive was a true custom prioritization score. You could get close- with enough time, energy, spreadsheets, and logs. But even then it wasn’t without fault. There were still...
Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?
Artificial Intelligence AI has rapidly evolved from a futuristic concept to a potent weapon in the hands of bad actors. Today, AI-based attacks are not just theoretical threats—they're happening across industries and outpacing traditional defense mechanisms. The solution, however, is not...
Cisco Releases Security Bundle for Cisco ASA, FMC, and FTD Software
Cisco released its October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication to address vulnerabilities in Cisco ASA, FMC, and FTD. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users an...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation , as confirmed by Fortinet. CVE-2024-47575link is external Fortinet FortiManager Missing Authentication Vulnerability These types of vulnerabilities are frequent attack...
Attackers Use Encoded JavaScript to Deliver Malware
Cyber attackers are using encoded JavaScript files to hide malware, abusing Microsoft's Script Encoder to disguise harmful scripts…...
INE Security Launches New Training Solutions to Enhance Cyber Hygiene for SMBs
Cary, NC, 22nd October 2024, CyberNewsWire...
Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain
The prolific Chinese nation-state actor known as APT41 aka Brass Typhoon, Earth Baku, Wicked Panda, or Winnti has been attributed to a sophisticated cyber attack targeting the gambling and gaming industry. "Over a period of at least six months, the attackers stealthily gathered valuable informati...
Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant
The Russian threat actor known as RomCom has been linked to a new wave of cyber attacks aimed at Ukrainian government agencies and unknown Polish entities since at least late 2023. The intrusions are characterized by the use of a variant of the RomCom RAT dubbed SingleCamper aka SnipBot or RomCom...
Oracle Releases Quarterly Critical Patch Update Advisory for October 2024
Oracle released its quarterly Critical Patch Update Advisory for October 2024 to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-40711link is external Veeam Backup and Replication Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...
CVE-2024-49392
Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...
CVE-2024-49390
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...
CVE-2024-49392
Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...
CVE-2024-49391
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...
CVE-2024-49391
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...
CVE-2024-49390
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...
CVE-2024-49389
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...
CVE-2024-49389
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...