Security

New Chrome Features Protect Users Against Threats, Provide More Control Over Personal Data

by

September 12, 2024 at 01:30PM Google announces new Chrome features aimed at enhancing users’ online security and data control. Upgraded Safety Check provides automatic proactive protection, notifications for security issues, and management of notification permissions. Users can also opt out of unwanted website notifications and have additional data control when visiting websites. These updates offer … Read more

Operant AI Lands $10M Investment to Boost Runtime Protection for Cloud and AI

by

September 12, 2024 at 01:30PM Operant AI, a San Francisco startup led by Vrajesh Bhavsar and Priyanka Tembey, secured $10 million in Series A funding from several investors, bringing its total funding to $13.5 million. The company specializes in runtime protection for cloud applications, APIs, and AI systems, aiming to offer real-time security across multiple … Read more

New Android Malware ‘Ajina.Banker’ Steals Financial Data and Bypasses 2FA via Telegram

by

September 12, 2024 at 01:12PM Bank customers in Central Asia are under threat from a new Android malware named Ajina.Banker, aimed at stealing financial information and thwarting two-factor authentication. The malware is distributed through Telegram channels and targets countries such as Armenia, Azerbaijan, and Russia. The attackers use localized promotions and themed messages to maximize … Read more

Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution

by

September 12, 2024 at 01:12PM GitLab released security updates addressing 17 vulnerabilities, including a critical flaw (CVE-2024-6678) enabling an attacker to run pipeline jobs as an arbitrary user. This is the fourth flaw patched in the past year. Users are urged to apply the patches immediately. There is no evidence of active exploitation, but caution … Read more

UK arrests teen linked to Transport for London cyber attack

by

September 12, 2024 at 12:43PM The U.K.’s National Crime Agency has arrested a 17-year-old teenager in connection to the cyberattack on Transport for London, the city’s public transportation agency. Based on the meeting notes, the key takeaways are: 1. The U.K.’s National Crime Agency has made an arrest in connection to the cyberattack on Transport … Read more

Hackers targeting WhatsUp Gold with public exploit since August

by

September 12, 2024 at 12:43PM Hackers are utilizing publicly available exploit code to target two critical vulnerabilities in the WhatsUp Gold network monitoring solution from Progress Software. Based on the meeting notes, it appears that hackers have been exploiting two critical vulnerabilities in the WhatsUp Gold network availability and performance monitoring solution from Progress Software … Read more

Google Chrome gets a mind of its own for some security fixes

by

September 12, 2024 at 12:04PM Google has empowered Chrome’s Safety Check to take security decisions on the user’s behalf. This feature now automatically runs in the background, revoking unneeded permissions, canceling deceptive notifications, and notifying users about security issues. It also provides more control over website permissions and extensions, aiming to improve user safety and … Read more

Transport for London confirms customer data stolen in cyberattack

by

September 12, 2024 at 11:20AM Transport for London (TfL) has reported a cyberattack on September 1 which compromised customer data such as names, contact details, email addresses, and home addresses. It appears that Transport for London (TfL) has concluded that the cyberattack on September 1 has affected customer data, specifically impacting names, contact details, email … Read more

Transport for London confirms 5,000 user’ bank data exposed, pulls large chunks of IT infra offline

by

September 12, 2024 at 11:04AM Transport for London (TfL) is facing a serious cyber incident, with potential access to customer data and bank details. The organization is taking measures to reset 30,000 employee passwords in person and has pulled large parts of its IT infrastructure offline. TfL is contacting affected customers as a precaution and … Read more

Realm.Security Emerges From Stealth With $5 Million in Seed Funding

by

September 12, 2024 at 10:54AM Realm.Security, a Boston-based company, recently came out of stealth mode with $5 million in seed funding. Founded by cybersecurity experts, the company aims to efficiently manage security data using AI and data processing technology. Their platform is designed to integrate with various cybersecurity products and address the increasing challenge of … Read more