alt=An anonymous hacker intensely focused on a laptop, working diligently to exploit vulnerabilities.

2024-02-02 Post a Comment

UK law could ban Apple security updates across the world in an ‘unprecedented overreach’

ByÂ Allisa James AppleÂ is no stranger to controversy, especially involving government bodies. But a new proposal could aim to be â€œunprecedentedâ€ in its reach over the tech giant. Several amendments to the UKâ€™s Investigatory Powers Act (IPA) have been proposed, one that would require Apple (and any other company) to â€œnotify UK officials of any updates they planned to make that could restrict the UK government’s access to this data, including […]

alt=A snowball in the snow, representing the snowball effect.

Cyber security

2024-02-02 Post a Comment

More Ivanti VPN Zero-Days Fuel Attack Frenzy as Patches Finally Roll

Tara Seals, Managing Editor, News, Dark Reading Both China-backed APTs and ordinary cyberattackers have seized on a pair of Ivanti VPN bugs for global exploitation. Ivanti has finally begun patching a pair of zero-day security vulnerabilities disclosed on Jan. 10 in its Connect Secure VPN appliances. However, it also announced two additional bugs today in the platform, CVE-2024-21888 and CVE-2024-21893 â€” the latter of which is also under active exploitation […]

Cyber security

2024-02-02 Post a Comment

Cloudflare hacked using auth tokens stolen in Okta attack

By Sergiu Gatlan Cloudflare disclosed today that its internal Atlassian server was breached by a suspected ‘nation state attacker’ who accessed its Confluence wiki, Jira bug database, and Bitbucket source code management system. The threat actor first gained access to Cloudflare’s self-hosted Atlassian server on November 14 and then accessed the company’s Confluence and Jira systems following a reconnaissance stage. “They then returned on November 22 and established persistent access […]

Cyber security

2024-02-02 Post a Comment

Week in review: 15 million Trello usersâ€™ scraped data on sale, attackers can steal NTLM hashes

Hereâ€™s an overview of some of last weekâ€™s most interesting news, articles, interviews and videos: The reality of hacking threats in connected car systems In this Help Net Security interview, Ivan Reedman, Director of Secure Engineering at IOActive, discusses how manufacturers, government regulations, and consumers are adapting to these new challenges. Beyond blockchain: Strategies for seamless digital asset integration In this Help Net Security interview, Jean-Philippe Aumasson, CSO at Taurus, […]

alt=A computer screen displaying a green screen, providing a blank canvas for digital content creation.

Cyber security

2024-02-02 Post a Comment

Cisco patches critical vulnerability in Unified Communications products

byÂ Lucian Constantin CSO Senior Writer Cisco Unified Communications customers are urged to patch this high-severity vulnerability or mitigate its risk. Cisco fixed a critical flaw this week that affects multiple Unified Communications and Contact Center Solutions products and could be exploited remotely by unauthenticated attackers to execute arbitrary code on impacted devices. Medium severity vulnerabilities have also been patched in Cisco Small Business Series Switches and Cisco Unity Connection. The […]