November 22, 2023 at 04:41PM The hacker group SiegedSec claims to have breached America’s largest nuclear power lab, Idaho National Laboratory (INL), and stolen records on thousands of employees. Some of the stolen data has already been leaked. INL has acknowledged the cyberattack and is taking immediate action to protect employee data. The lab is … Read more
November 22, 2023 at 03:36PM Hack The Box (HTB) announces its fifth annual University Capture The Flag (CTF) competition, taking place from December 8 to 10, 2023. The CTF aims to upskill university students in cybersecurity as there is a talent shortage. HTB also releases research showing that 75% of cybersecurity and IT students use … Read more
November 22, 2023 at 03:36PM Kiteworks, a company focused on data privacy and compliance, announced its merger with Maytech, a provider of data file transfer solutions. The merger strengthens Kiteworks’ position in the UK market and expands its offering to Maytech customers. The strategic move combines technological strengths and resources, fostering innovation and accelerating research … Read more
November 22, 2023 at 03:06PM Experts say that web shells, which are easy-to-use tools used to issue commands to compromised servers, are becoming more popular among attackers. The use of web shells such as WSO-NG and others by ransomware gangs and in mass exploitation campaigns has been observed. Web shells are difficult to detect and … Read more
November 22, 2023 at 02:45PM Qatar’s National Cyber Security Agency (NCSA) is conducting cyber drills involving around 170 key organizations to assess their cybersecurity readiness and identify weaknesses. The drills aim to measure the ability to address attacks and threats, and improve coordination, expertise, and response capabilities. This is part of Qatar’s National Cyber Security … Read more
November 22, 2023 at 02:45PM A proof of concept exploit has been developed for a critical zero-day vulnerability in Windows SmartScreen technology that allows attackers to bypass Windows Defender SmartScreen checks without triggering alerts. The exploit requires a user to click on a maliciously crafted Internet shortcut or link. The vulnerability affects Windows 10, Windows … Read more
November 22, 2023 at 02:30PM Researchers, with support from Microsoft, have found ways to compromise three common fingerprint readers used in PCs. They were able to exploit the biometric security of Dell, Lenovo, and Microsoft laptops by taking advantage of the communication between the sensors and the devices. The manufacturers have since patched their chips. … Read more
November 22, 2023 at 02:09PM Security researchers discovered vulnerabilities in fingerprint sensors on Dell Inspiron, Lenovo ThinkPad, and Microsoft Surface Pro X laptops. The researchers were able to bypass Windows Hello fingerprint authentication using man-in-the-middle attacks. Microsoft’s Secure Device Connection Protocol (SDCP) was supposed to prevent these attacks, but it was not enabled on two … Read more
November 22, 2023 at 02:09PM Healthcare SaaS provider, Welltok, has experienced a data breach, compromising the personal data of nearly 8.5 million patients in the U.S. The breach occurred after their file transfer program was hacked. Welltok offers services to health service providers, including maintaining online wellness programs and holding patient data. The breach involved … Read more
November 22, 2023 at 01:17PM Amidst the Israel-Gaza conflict, security experts highlight the need for Middle East oil and gas operators to remain vigilant against cyberattacks. A recent report reveals that both sectors are vulnerable, and the consequences could extend beyond the region, impacting global energy supply. If cyberattacks occur, they may go beyond the … Read more