Information security
Information security
[ follow ]
#data-breach #phishing #remote-code-execution #cybersecurity #ransomware #credential-theft #fortinet #cisa-kev
#fortinet
fromThe Hacker News
3 days agoInformation security
Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls
Fortinet confirms active exploitation bypassing FortiCloud SSO patches on fully-patched FortiGate devices, enabling unauthenticated SSO bypass, persistence creation, VPN access changes, and configuration exfiltration.
fromThe Hacker News
4 days agoInformation security
Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations
Automated attackers exploit Fortinet SSO vulnerabilities (CVE-2025-59718, CVE-2025-59719) to create accounts, enable VPN access, and exfiltrate firewall configurations.
fromTheregister
1 hour agoESET: Russia likely behind Poland power grid attack
Russia was probably behind the failed attempts to compromise the systems of Poland's power companies in December, cybersecurity researchers claim. ESET attributed the attack with "medium" confidence to Russia's GRU-run Sandworm unit, after it investigated the attack and its use of wiper malware. The attackers, believed to be state-backed, deployed DynoWiper malware on Poland's national energy systems. Energy minister Milosz Motyka said they attempted to disrupt communication between renewable hardware and power distribution operators, but were unsuccessful.
Information security
fromThe Hacker News
3 hours agoKonni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers
North Korean Konni uses AI-generated PowerShell malware and spear-phishing to target blockchain developers, expand geographically, and deliver EndRAT via disguised links and insecure WordPress sites.
fromTheregister
13 hours agoAutomotive systems get pwned at Pwn2Own Automotive 2026
infosec in brief T'was a dark few days for automotive software systems last week, as the third annual Pwn2Own Automotive competition uncovered 76 unique zero-day vulnerabilities in targets ranging from Tesla infotainment to EV chargers. A record 73 entries were included in this year's competition at Automotive World in Tokyo, and, while not all were successful, Trend Micro's Zero Day Initiative still ended up paying out more than $1 million to successful competitors. For those unfamiliar with the structure of a Pwn2Own competition, ethical hackers and security experts enter with plans to perform a certain exploit, which they must do in a limited time.
fromTechRepublic
5 days agoEU's New Cybersecurity Act Could Ban High-Risk Suppliers - TechRepublic
Yesterday (Jan. 20), the Commission unveiled its revised Cybersecurity Act proposal after months of behind-the-scenes negotiations that reportedly caused substantial friction between officials and member states. This sweeping update introduces measures to identify and potentially exclude "high-risk" third countries and companies from Europe's critical digital infrastructure across 18 essential sectors, including energy systems. As cybersecurity threats continue rising since the original Act took effect seven years ago, the EU is essentially drawing new battle lines in the global tech landscape.
Information security
fromInfoQ
1 day agoTwo Missing Characters: How a Regex Flaw Exposed AWS GitHub Repos to Supply-Chain Risk
Wiz Security's research team identified that a subset of repositories configured regular expressions for AWS CodeBuild webhook filters intended to limit trusted actor IDs, but these filters were insufficient, allowing a predictably acquired actor ID to gain administrative permissions. The four affected repositories that put the AWS Console supply chain at risk were the AWS SDK for JavaScript v3, the general-purpose cryptographic library aws-lc, amazon-corretto-crypto-provider, and awslabs/open-data-registry, a repository of publicly available datasets accessible from AWS resources.
fromMedium
3 weeks agoWhere DFIR Fits in NIST's Cyber AI Profile
The National Institute of Standards and Technology (NIST) recently released NIST IR 8596, the Initial Preliminary Draft of the Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile). The document establishes a structured approach for managing cybersecurity risk related to AI systems and the use of AI in cyber defense, organised around three focus areas: Securing AI System Components (Secure), Conducting AI-Enabled Cyber Defense (Defend), and Thwarting AI-Enabled Cyber Attacks (Thwart).
fromMedium
3 weeks agoLinux Permissions Unleashed: A Deep Dive into Access Control Lists (ACLs)
We have already discussed in the previous two articles about file and folder permissions along with special permissions that are supported in linux. The permissions are effective for many scenarios. But what happens when you need more granularity? How do you grant write access to a file to just one specific user who isn't the owner and isn't in the owning group? How do you allow two different groups read access, but only one of them write access?
Information security
fromArs Technica
1 day agoWiper malware targeted Poland energy grid, but failed to knock out electricity
Poland's electric grid was targeted by wiper malware likely deployed by Russia-aligned Sandworm, aiming to disrupt communications between renewables and power operators but failing.
from24/7 Wall St.
1 day agoCrowdStrike (NASDAQ: CRWD) Stock Price Prediction and Forecast 2025-2030 (Feb 2025)
A U.S. judge recently dismissed a shareholder lawsuit that accused cybersecurity company CrowdStrike Holdings Inc. ( NASDAQ: CRWD) of making false statements about its software testing before the 2024 global outage. Also, it has announced its intent to acquire Seraphic and SGNL, as well as new strategic partnership with Nord Security. The share price is 6.3% lower than a month ago and down 3.9% from six months ago, underperforming the Nasdaq in both time frames.
Information security
Information security
fromThe Hacker News
2 days agoCISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities
CISA added four actively exploited vulnerabilities to its KEV catalog, including high-severity remote file inclusion, authentication bypass, access-control, and npm supply-chain compromise.
fromSecuritymagazine
3 days agoSecurity Vendors, Fortune 500 Companies Exposed and Exploited
Research from Pentera Labs reveals evidence of active exploitation in customer-managed business cloud environments, particularly within Fortune 500 companies and cybersecurity vendors. This exploitation is targeting training applications utilized by said organizations. These are applications typically deployed for security demos and training, including OWASP Juice Shop, DVWA and Hackazon. The research discovered thousands of systems exposed, with several hosted on enterprise infrastructure using Azure, AWS and GCP cloud platforms.
Information security
Information security
fromThe Hacker News
3 days agoMicrosoft Flags Multi-Stage AitM Phishing and BEC Attacks Targeting Energy Firms
Multi‑stage AitM phishing and BEC campaign weaponizes SharePoint and trusted internal accounts to persist via inbox rules and propagate large‑scale internal and external phishing.
fromSearch Engine Roundtable
3 days agoHow To Secure Your Google Ads Accounts Amongst The Account Hijacks
To start, having your Google Ads account hijacked can be devastating, and it is just that much worse on the agency level. Your budgets can be spent, your bank accounts can be depleted, and your account history and reputation can be ruined. All of this can also lead to losing advertising clients and maybe worse. We covered some of this in our November story.
Information security
fromDataBreaches.Net
2 days agoShinyHunters group opens new dark web leak site, claims responsibility for OKTA vishing campaign - DataBreaches.Net
BIG - ShinyHunters confirmed to me that they are behind the recent Okta vishing campaign and have published alleged data from three major victims ( Crunchbase, SoundCloud, and Betterment) on their new blog, stating more are coming. 🔽
Information security
fromTheregister
3 days agoTech support detective solved crime by checking the carpark
"A floor manager responsible for production asked me to fix his PC, which was so slow he could literally make a coffee in the time between double-clicking an icon and having the program open," Parker told On Call. The manager's PC was only a year old and ran Windows XP, a combo that at the time of this tale should have made for decent performance.
Information security
fromSecuritymagazine
3 days agoThe Inaugural Ed Chandler Security Innovation Award Presented to ADRM
Last year, the security consulting community reached a new milestone: the introduction of the Ed Chandler Security Innovation Award. The award, presented for the very first time at CONSULT 2025 and co-sponsored by SecuritySpecifiers and Security magazine, honors the life, legacy and influence of Edmonds (Ed) Chandler Jr. The inaugural award is designed to recognize the innovation that advances both the practice and impact of security consulting.
Information security
Information security
fromFortune
3 days agoAmerica hacked Venezuela's grid to literally turn off the lights on Jan. 3. It could happen here, too | Fortune
State-level and supply-chain cyberattacks target industrial control systems, enabling sabotage or pre-positioning; proactive hunting, secure-by-design, and zero-trust defenses are essential.
Information security
fromThe Hacker News
4 days agoSmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release
An authentication bypass in SmarterMail allows unauthenticated users to reset any system administrator password via /api/v1/auth/force-reset-password, enabling potential full system compromise.
Information security
fromZero Day Initiative
4 days agoZero Day Initiative - Pwn2Own Automotive 2026 - Day Two Results
Julien Cohen-Scali chained an authentication bypass and privilege escalation on Phoenix Contact CHARX SEC-3150, earning $20,000 and 4 Master of Pwn points; Autocrypt failed to demonstrate a Grizzl‑E exploit in time.
Information security
fromLondon Business News | Londonlovesbusiness.com
3 days agoUnderstanding the risks of USB devices in high-security environments - London Business News | Londonlovesbusiness.com
USB removable media remain a persistent, high-risk attack vector that can bypass defenses and cause major IT and OT disruptions, requiring strict policies.
Information security
fromDataBreaches.Net
3 days agoZendesk ticket systems hijacked in massive global spam wave - DataBreaches.Net
Unsecured Zendesk support forms are being abused to send massive volumes of confusing confirmation emails, causing recipients worldwide to receive hundreds of alarming messages.
Information security
fromLondon Business News | Londonlovesbusiness.com
3 days agoMontellis Group reviews The latest security features for traders - London Business News | Londonlovesbusiness.com
Modern security features—2FA, encryption, monitored payments, and risk controls—significantly strengthen CFD trading account and transaction safety.
fromSecuritymagazine
4 days agoWhat Background Checks Miss: The Human Layer Behind Modern Screening
Over the past few years, while applying for security and risk-related roles, I noticed a pattern that surprised me: many background screening vendors only asked for a few years of employment history, minimal address information, minimal educational verification, and returned results within one or two days. In contrast, I also noticed that industries with higher regulatory standards, such as finance and transportation, conduct far deeper checks that can span from weeks to months.
Information security
Information security
fromThe Hacker News
5 days agoChainlit AI Framework Flaws Enable Data Theft via File Read and SSRF Bugs
Critical Chainlit (ChainLeak) vulnerabilities enable arbitrary file reads and SSRF, risking cloud API key exposure, sensitive file theft, privilege escalation, and lateral movement.
[ Load more ]