About the security content of macOS Sequoia 15.2 – Apple Support

December 11, 2024 at 01:33PM Multiple security vulnerabilities have been identified in macOS Sequoia 15.2. Issues range from unauthorized access to user data, memory handling problems, and permissions misconfigurations. Updates have been made to address these vulnerabilities, enhancing overall system security. The release date for the update is set for December 11, 2024. ### Meeting … Read more

Krispy Kreme cyberattack impacts online orders and operations

December 11, 2024 at 09:46AM Krispy Kreme experienced a cyberattack in November, which disrupted various business operations, including the ability to place online orders. **Meeting Takeaways:** 1. **Incident Overview:** Krispy Kreme experienced a cyberattack in November. 2. **Impact on Operations:** The attack specifically affected parts of the company’s business operations, notably online ordering capabilities. 3. … Read more

OpenWrt Sysupgrade flaw let hackers push malicious firmware images

December 9, 2024 at 05:33PM A vulnerability in OpenWrt’s Attended Sysupgrade feature for creating custom firmware images may have enabled the distribution of malicious firmware packages, posing a security threat to users. **Meeting Notes Takeaways:** 1. **Issue Identified**: A flaw exists in OpenWrt’s Attended Sysupgrade feature. 2. **Impact**: The flaw could potentially enable the distribution … Read more

Cybercrime gang arrested after turning Airbnbs into fraud centers

December 9, 2024 at 11:56AM Eight members of an international cybercrime network were arrested in Belgium and the Netherlands for stealing millions of Euros from victims and establishing fraudulent Airbnb centers. **Meeting Takeaways:** 1. **Arrests Made**: Eight members of an international cybercrime network have been apprehended. 2. **Scope of Crime**: The network was involved in … Read more

Name That Edge Toon: Shackled!

December 2, 2024 at 02:09PM Submit your best cybersecurity-related captions by December 31 for a chance to win a $25 gift card. Post your ideas on X, Facebook, or LinkedIn. Last month’s winner, Matthew Tompkins, received the prize for his creative caption. Thank you to all who participated! **Meeting Takeaways:** 1. **Caption Contest:** Participants are … Read more

Phishing Prevention Framework Reduces Incidents by Half

November 25, 2024 at 04:47PM The FS-ISAC launched a Phishing Prevention Framework aimed at reducing phishing and fraud for businesses, especially in financial services. Successful pilot programs cut phishing complaints in half. The framework emphasizes understanding fraud origins, collaborative data collection, and partnerships with telecom providers to enhance defenses against evolving phishing tactics. ### Meeting … Read more

Halliburton Remains Optimistic Amid $35M Data Breach Losses

November 11, 2024 at 05:17PM Halliburton Company reported $35 million in losses following a ransomware attack in August. The breach, attributed to the RansomHub gang, led to unauthorized data access and system shutdowns. Despite the incident, Halliburton anticipates minimal financial impact, with only a $0.02 per share effect on adjusted earnings. Investigations continue. ### Meeting … Read more

Pharma Giant Johnson & Johnson Discloses Data Breach

October 22, 2024 at 04:54AM Johnson & Johnson has reported a data breach that affects the personal information of thousands of individuals. This incident highlights ongoing concerns regarding data security in large corporations. The details of the breach have been shared by SecurityWeek. **Meeting Takeaways:** 1. **Incident**: Johnson & Johnson has disclosed a data breach. … Read more

Cyprus Thwarted a Digital Attack Against the Government’s Main Online Portal

October 20, 2024 at 06:29PM Cyprus successfully thwarted a DDoS attack targeting its central online government portal, ensuring continued access for users. **Meeting Takeaways:** 1. **Incident Report**: Cyprus successfully defended against a DDoS (Distributed Denial of Service) attack. 2. **Target**: The attack was aimed at disrupting access to the government’s central online portal. 3. **Outcome**: … Read more

Hackers blackmail Globe Life after stealing customer data

October 17, 2024 at 10:39AM Globe Life reported an extortion attempt by an unknown threat actor who demanded payment to prevent the release of stolen data from earlier this year. The breach could affect over 5,000 customers of its subsidiary, American Income Life Insurance Company. However, the company claims operations and financials remain largely unaffected. … Read more