Recent Security News

  • Exploitation of Critical ownCloud Vulnerability Begins

    November 28, 2023 at 10:00AM Threat actors are actively exploiting a critical information disclosure vulnerability in ownCloud’s Graphapi app. The vulnerability allows attackers to retrieve sensitive credentials and system information. The flaw affects Graphapi versions 0.2.0 to 0.3.0 and cannot be mitigated by disabling the app alone. Administrators are urged to follow the mitigation steps…

    Read More

  • Helping companies defend what attackers want most – their data

    November 28, 2023 at 09:22AM Athena AI, integrated into the Varonis Data Security Platform, provides generative AI capabilities to enhance data protection. It enables security teams to conduct investigations, remediate threats, and strengthen their security posture effectively. With features like an AI SOC analyst and natural language search, customers can quickly respond to incidents, identify…

    Read More

  • Critical Vulnerability Found in Ray AI Framework 

    November 28, 2023 at 09:06AM Ray, an open source compute framework for AI, has a critical vulnerability that allows unauthorized access to all nodes, warns cybersecurity firm Bishop Fox. The bug, known as CVE-2023-48023, exists because Ray does not properly enforce authentication on its dashboard and client components. Attackers can exploit this vulnerability to submit…

    Read More

  • Los Angeles SIM Swapper Sentenced to 8 Years in Prison

    November 28, 2023 at 09:06AM Amir Hossein Golshan, a cybercriminal from Los Angeles, has been sentenced to 96 months in prison for engaging in multiple cybercrime schemes. He caused approximately $740,000 in losses to hundreds of victims through online scams and unauthorized account access. Golshan used SIM swapping to take control of victims’ social media…

    Read More

  • Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets

    November 28, 2023 at 09:06AM Amazon Web Services (AWS) has announced Amazon One Enterprise, a palm-based identity service for accessing physical and digital assets. It enables secure access to locations such as offices and data centers, as well as digital resources like HR records. The palm-recognition technology boasts 99.9999% accuracy and cannot be replicated or…

    Read More