Zoom on Tuesday announced rolling out patches for four vulnerabilities in its products, including a severe flaw that allowed zero-click remote code execution (RCE). Impacting Zoom’s clients on all supported platforms, three of the security defects were discovered in the… Read More "Zoom Patches Zero-Click Code Execution Vulnerability"
Microsoft, Apple Release Fresh Security Updates
Microsoft and Apple on Thursday announced fixes for multiple vulnerabilities across their products. The charge was led by Microsoft, which patched over a dozen vulnerabilities across Active Directory, Azure, Entra, SharePoint, Teams, and other products, including critical-severity remote code execution… Read More "Microsoft, Apple Release Fresh Security Updates"
Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability
Threat actors have started exploiting a recently patched vulnerability in JetBrains TeamCity, the US cybersecurity agency CISA warns. A continuous integration and continuous delivery (CI/CD) platform, TeamCity provides automated software building and deployment and is a central component of enterprise… Read More "Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability"
Water Sector Cyberattacks Reportedly Hit at Least 12 States
The number of US states affected by the recent hacking campaign targeting water and wastewater facilities continues to grow. At least 12 states have been hit, according to ABC News, but the names of only a handful of the affected… Read More "Water Sector Cyberattacks Reportedly Hit at Least 12 States"
How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones
BLACK HAT – Two security researchers found a way to exploit vulnerabilities in Samsung software, including the virtual assistant Bixby, to hack mobile devices. The research was conducted by Dimitrios Valsamaras, senior security researcher at Microsoft, and Ken Gannon, head… Read More "How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones "
The Fourth Battlefield: The Growing Role of Cyber Operations in Global Conflict
Cyberspace is now the fourth domain of military conflict. Geopolitics can be summarized as the behavior of a country or region influenced by its location in time (history and current events), and space (geographical proximity to other countries or regions).… Read More "The Fourth Battlefield: The Growing Role of Cyber Operations in Global Conflict"
Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks
Thousands of data centers are at risk of compromise due to a 22-year-old vulnerability in Baseboard Management Controller (BMC) management processors, data center security firm Lava reports. Found in most server platforms, BMCs enable server management operations even without a… Read More "Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks"
New York Awards $9 Million to Strengthen Cybersecurity at 153 Water Systems
New York is awarding more than $9 million to help 153 drinking water and wastewater systems strengthen their defenses against cyberattacks. Governor Kathy Hochul announced the funding Monday through the state’s Strengthening Essential Cybersecurity for Utilities and Resiliency Enhancements (SECURE)… Read More "New York Awards $9 Million to Strengthen Cybersecurity at 153 Water Systems"
US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States
The recent cyber campaign targeting the water and wastewater sector in the United States has hit at least seven states as more information has come to light regarding Iran’s connection to the hacker attacks. Minnesota reported last week that operational… Read More "US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States"
Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations
Anthropic revealed on Thursday that some of its Claude models escaped test environments and hacked into the systems of three organizations while trying to solve a challenge. The admission comes after OpenAI revealed that its models broke out of what… Read More "Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations"