Collaborate Disseminate
Varonis finds one vulnerability and three attack methods that can be used to obtain NTLM hashes via Outlook and two Windows programs.
The post New NTLM Hash Leak Attacks Target Outlook, Windows Programs appeared first on SecurityWeek.
Continue reading New NTLM Hash Leak Attacks Target Outlook, Windows Programs
Noteworthy stories that might have slipped under the radar: WhatsApp privacy issue remains unpatched, spying via tablet ambient light sensors, and the Bigpanzi botnet.
The post In Other News: WhatsApp Privacy Issue, Spying via Ambient Light Sensor, Bi… Continue reading In Other News: WhatsApp Privacy Issue, Spying via Ambient Light Sensor, Bigpanzi Botnet
US charges Russian cybercriminals, including man allegedly involved in hacking of Neiman Marcus and Michaels Stores in 2013.
The post US Charges Russian Involved in 2013 Hacking of Neiman Marcus, Michaels appeared first on SecurityWeek.
Continue reading US Charges Russian Involved in 2013 Hacking of Neiman Marcus, Michaels
The number of Ivanti VPN appliances compromised through exploitation of recent flaws increases and another vulnerability is added to exploited list.
The post Ivanti EPMM Vulnerability Targeted in Attacks as Exploitation of VPN Flaws Increases appeared … Continue reading Ivanti EPMM Vulnerability Targeted in Attacks as Exploitation of VPN Flaws Increases
VMware warns customers that CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, is being exploited in the wild.
The post VMware vCenter Server Vulnerability Exploited in Wild appeared first on SecurityWeek.
Continue reading VMware vCenter Server Vulnerability Exploited in Wild
Seven vulnerabilities found in Rapid SCADA could be exploited to gain access to sensitive industrial systems, but they remain unpatched.
The post Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks appeared first on Securit… Continue reading Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks
Russian threat group ColdRiver has developed Spica, a malware that enables it to compromise systems and steal information.
The post Russian APT Known for Phishing Attacks Is Also Developing Malware, Google Warns appeared first on SecurityWeek.
Continue reading Russian APT Known for Phishing Attacks Is Also Developing Malware, Google Warns
Foxsemicon’s website defaced with a message from the LockBit ransomware group, which claims to have stolen 5 Tb of data.
The post Ransomware Group Targets Foxconn Subsidiary Foxsemicon appeared first on SecurityWeek.
Continue reading Ransomware Group Targets Foxconn Subsidiary Foxsemicon
Researchers show how a new attack named LeftoverLocals, which impacts GPUs from AMD, Apple and Qualcomm, can be used to obtain AI data.
The post AI Data Exposed to ‘LeftoverLocals’ Attack via Vulnerable AMD, Apple, Qualcomm GPUs appeared fi… Continue reading AI Data Exposed to ‘LeftoverLocals’ Attack via Vulnerable AMD, Apple, Qualcomm GPUs
Citrix is aware of attacks exploiting two new NetScaler ADC and Gateway zero-day vulnerabilities tracked as CVE-2023-6548 and CVE-2023-6549.
The post Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation appeared first on SecurityWeek.
Continue reading Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation