alt=A stack of striped fish piled on top of one another, forming a group.

2024-03-30 Post a Comment

Cloud Email Filtering Bypass Attack Works 80% of the Time

A majority of enterprises that employ cloud-based email spam filtering services are potentially at risk, thanks to a rampant tendency to misconfigure them. David Strom,Â Contributing Writer Computer scientists have uncovered a shockingly prevalent misconfiguration in popular enterprise cloud-based email spam filtering services, along with an exploit for taking advantage of it. The findings reveal that organizations are far more open to email-borne cyber threats than they know. In a paper […]

Cyber security

2024-03-30 Post a Comment

Google Confirms 97 Zero-Day Attacks And Points Finger At China For 12

Davey Winder Senior Contributor Veteran cybersecurity and tech analyst, journalist, hacker, author: There were 97 zero-day vulnerabilities seen in the wild in the past year, Googleâ€™s Threat Analysis Group and Mandiant have confirmed. When it comes to government-backed exploitation of zero-day vulnerabilities, there is one clear winner, according to Google: The Peopleâ€™s Republic of China was responsible for exploiting 12 of them in 2023, up from seven in 2022. The […]

alt=Australian government takes action against online scams

Cyber security

2024-03-30 Post a Comment

Australian Government Doubles Down On Cybersecurity in Wake of Major Attacks

John Leyden, Contributing Writer Government proposes more modern and comprehensive cybersecurity regulations for businesses, government, and critical infrastructures providers Down Under. The Australian government is carving out plans to revamp cybersecurity laws and regulations in the wake of a series of damaging high-profile data breaches that rocked the country. Government officials recently released what it called a consultation paper that outlined specific proposals and solicited input from the private sector […]

Cyber security

2024-03-28 Post a Comment

CISA publishes 447-page draft of cyber incident reporting rule

By-Jonathan Greig: The nationâ€™s top cybersecurity agency has unveiled the initial draft of a new rule detailing how critical infrastructure organizations need to report cyberattacks to the federal government. The Cybersecurity and Infrastructure Security Agency (CISA)Â postedÂ the 447-page set of regulations under the Cyber Incident Reporting for Critical Infrastructure Act to the Federal Register, allowing the public to comment on it. The law mandating the rulesÂ was passed in 2022Â and is intended […]

alt=A diagram illustrating the process of hacking DHCP to gain elevated privileges on Windows.

Cyber security

2024-03-26 1 comment

DHCP Hacked To Escalate Privileges In Windows Domains

ByBalaji: Security researchers have uncovered a sophisticated method of exploiting the Dynamic Host Configuration Protocol (DHCP) administrators group to escalate privileges within Windows domains. This technique, dubbed â€œDHCP Coerce,â€ leverages legitimate privileges to compromise entire networks potentially. The vulnerability centers around the DHCP (Dynamic Host Configuration Protocol) service, which is essential for network administration. It automates the assignment of IP addresses, simplifying the management of network connections. However, this convenience […]