alt=A stack of striped fish piled on top of one another, forming a group.

2024-03-30 Post a Comment

Cloud Email Filtering Bypass Attack Works 80% of the Time

A majority of enterprises that employ cloud-based email spam filtering services are potentially at risk, thanks to a rampant tendency to misconfigure them. David Strom,Â Contributing Writer Computer scientists have uncovered a shockingly prevalent misconfiguration in popular enterprise cloud-based email spam filtering services, along with an exploit for taking advantage of it. The findings reveal that organizations are far more open to email-borne cyber threats than they know. In a paper […]

Cyber security

2024-03-30 Post a Comment

Google Confirms 97 Zero-Day Attacks And Points Finger At China For 12

Davey Winder Senior Contributor Veteran cybersecurity and tech analyst, journalist, hacker, author: There were 97 zero-day vulnerabilities seen in the wild in the past year, Googleâ€™s Threat Analysis Group and Mandiant have confirmed. When it comes to government-backed exploitation of zero-day vulnerabilities, there is one clear winner, according to Google: The Peopleâ€™s Republic of China was responsible for exploiting 12 of them in 2023, up from seven in 2022. The […]

alt=Australian government takes action against online scams

Cyber security

2024-03-30 Post a Comment

Australian Government Doubles Down On Cybersecurity in Wake of Major Attacks

John Leyden, Contributing Writer Government proposes more modern and comprehensive cybersecurity regulations for businesses, government, and critical infrastructures providers Down Under. The Australian government is carving out plans to revamp cybersecurity laws and regulations in the wake of a series of damaging high-profile data breaches that rocked the country. Government officials recently released what it called a consultation paper that outlined specific proposals and solicited input from the private sector […]

Cyber security

2024-03-28 Post a Comment

CISA publishes 447-page draft of cyber incident reporting rule

By-Jonathan Greig: The nationâ€™s top cybersecurity agency has unveiled the initial draft of a new rule detailing how critical infrastructure organizations need to report cyberattacks to the federal government. The Cybersecurity and Infrastructure Security Agency (CISA)Â postedÂ the 447-page set of regulations under the Cyber Incident Reporting for Critical Infrastructure Act to the Federal Register, allowing the public to comment on it. The law mandating the rulesÂ was passed in 2022Â and is intended […]

Cyber security

2024-03-28 1 comment

2M+ WordPress Sites Hit By Essential Addons For Elementor Vulnerability

SEJ STAFF-Roger Montti: XSS vulnerabilities in Essential Addons for Elementor could allow attackers to inject malicious scripts into WordPress websites Security researchers published an advisory on the popular Essential Addons For Elementor WordPress plugin which was discovered to contain a Stored Cross-Site Scripting vulnerability affecting over 2 million websites. Flaws in two different widgets that are a part of the plugin are responsible for the vulnerabilities. Two Widgets That Lead […]