Tag: update

CISA Urges Patching For ‘Critical’ Ivanti VPN Flaw Exploited In Attacks

Apr 4, 2025 11:42 PM

by

Andy Stern

in SecurityNews

Tags: advisory, attack, cisa, exploit, flaw, ivanti, update, vpn, vulnerability

Exploitation of a critical-severity Ivanti Connect Secure vulnerability prompted CISA to issue an advisory Friday, urging organizations to implement patches to fix the issue. First seen on crn.com Jump to article: www.crn.com/news/security/2025/cisa-urges-patching-for-critical-ivanti-vpn-flaw-exploited-in-attacks
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 10:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
ISMG Editors: Who Will Shore Up Trump’s Federal Cyber Cuts?

Apr 4, 2025 9:42 PM

by

Andy Stern

in SecurityNews

Tags: ai, cyber, cybersecurity, data, finance, privacy, ransomware, update

Also: 23andMe’s Privacy Meltdown, Investors’ $500M AI Bet on ReliaQuest. In this week’s update, ISMG editors discussed the Trump administration’s cybersecurity funding cuts and potential impact on state and local ransomware defense. 23andMe’s bankruptcy and the FTC’s stance on genetic data privacy, ReliaQuest’s $500 million raise and what it means for AI-led SecOps. First seen…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 9:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 8:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 7:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Ivanti warns customers of new critical flaw exploited in the wild

Apr 4, 2025 6:42 PM

by

Andy Stern

in SecurityNews

Tags: cve, detection, exploit, flaw, ivanti, mandiant, tool, update

Remediation: Organizations are urged to immediately update their Ivanti Connect Secure appliances to version 22.7R2.6 released in February or later to address CVE-2025-22457. Customers should also use the external version of the Integrity Checker Tool and look for web server crashes.”If your ICT result shows signs of compromise, you should perform a factory reset on…
Call Records of Millions Exposed by Verizon App Vulnerability

Apr 4, 2025 6:42 PM

by

Andy Stern

in SecurityNews

Tags: data-breach, update, vulnerability

A patch has been released for a serious information disclosure vulnerability affecting a Verizon call filtering application. The post Call Records of Millions Exposed by Verizon App Vulnerability appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/call-records-of-millions-exposed-by-verizon-app-vulnerability/
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 6:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 5:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Big hole in big data: Critical deserialization bug in Apache Parquet allows RCE

Apr 4, 2025 4:42 PM

by

Andy Stern

in SecurityNews

Tags: apache, attack, cve, data, exploit, flaw, github, malicious, nist, nvd, rce, remote-code-execution, service, threat, update, vulnerability

No known exploits yet: Neither Endor Labs nor NIST’s NVD entry reported any exploit attempts using CVE-2025-30065 as of publication of this article. Apache silently pushed a fix with the release of 1.15.1 on March 16, 2025, with a GitHub redirect to changes made in the update.Endor Labs advised prompt patching of the vulnerability, which…
Frida Penetration Testing Toolkit Updated with Advanced Threat Monitoring APIs

Apr 4, 2025 9:42 AM

by

Andy Stern

in SecurityNews

Tags: api, cyber, monitoring, penetration-testing, software, threat, update

In a significant update to the popular dynamic instrumentation toolkit Frida, developers have introduced powerful new APIs for advanced threat monitoring and software analysis. These enhancements, released on April 4, 2025, offer security researchers and penetration testers unprecedented capabilities in tracking thread activity, module loading, and performance profiling. Thread Observation Made Easy One of the…
April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft

Apr 4, 2025 8:42 AM

by

Andy Stern

in SecurityNews

Tags: ai, cybersecurity, microsoft, strategy, update

Microsoft is continuing to build on their AI cybersecurity strategy and this month announced the introduction of new agents in Microsoft Security Copilot. They are introducing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/04/april-2025-patch-tuesday-forecast/
$500,000 stolen in Australian super fund data breach

Apr 4, 2025 8:42 AM

by

Andy Stern

in SecurityNews

Tags: breach, cyber, cybersecurity, data, data-breach, election, email, hacker, hacking, update

Super industry’s peak body says majority of hacking attempts stopped but money lost by a small number of customers<ul><li><a href=”https://www.theguardian.com/australia-news/live/2025/apr/04/australia-election-2025-live-peter-dutton-anthony-albanese-labor-coalition-poll-tariffs-trump-interest-rates-rba-ntwnfb”>Election 2025 live updates: Australia federal election campaign</li><li>Get our <a href=”https://www.theguardian.com/email-newsletters?CMP=cvau_sfl”>afternoon election email, <a href=”https://app.adjust.com/w4u7jx3″>free app or <a href=”https://www.theguardian.com/australia-news/series/full-story?CMP=cvau_sfl”>daily news podcast</li></ul>Hackers have targeted Australian superannuation funds this week, with a small number of customers losing a…
HSCC Urges White House to Shift Gears on Health Cyber Regs

Apr 3, 2025 11:42 PM

by

Andy Stern

in SecurityNews

Tags: cyber, healthcare, HIPAA, update

The Health Sector Coordinating Council is urging the Trump administration to drop work on a proposed HIPAA security rule update and instead engage in a collaborative dialogue with healthcare sector leaders to create alternative cyber requirements, said Greg Garcia, executive director of HSCC. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/hscc-urges-white-house-to-shift-gears-on-health-cyber-regs-i-5472
China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March

Apr 3, 2025 10:42 PM

by

Andy Stern

in SecurityNews

Tags: china, exploit, flaw, group, ivanti, remote-code-execution, threat, update, vulnerability, zero-day

Ivanti addressed a critical remote code execution flaw in Connect Secure, which has been exploited since at least mid-March 2025. Ivanti released security updates to address a critical Connect Secure remote code execution vulnerability tracked as CVE-2025-22457. The vulnerability has been exploited by a China-linked threat actor since at least mid-March 2025. Ivanti did not disclose…
Ivanti patches Connect Secure zero-day exploited since mid-March

Apr 3, 2025 8:42 PM

by

Andy Stern

in SecurityNews

Tags: china, espionage, exploit, ivanti, malware, remote-code-execution, update, vulnerability, zero-day

Ivanti has released security updates to patch a critical Connect Secure remote code execution vulnerability exploited by a China-linked espionage actor to deploy malware since at least mid-March 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ivanti-patches-connect-secure-zero-day-exploited-since-mid-march/
An Update on QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share

Apr 3, 2025 5:42 PM

by

Andy Stern

in SecurityNews

Tags: attack, data, google, rce, remote-code-execution, update, vulnerability

See how a SafeBreach Labs researcher discovered a bypass for a fix to a critical vulnerability they previously reported in Google’s Quick Share data transfer utility. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/an-update-on-quickshell-sharing-is-caring-about-an-rce-attack-chain-on-quick-share/
An Update on QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share

Apr 3, 2025 4:42 PM

by

Andy Stern

in SecurityNews

Tags: attack, data, google, rce, remote-code-execution, update, vulnerability

See how a SafeBreach Labs researcher discovered a bypass for a fix to a critical vulnerability they previously reported in Google’s Quick Share data transfer utility. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/an-update-on-quickshell-sharing-is-caring-about-an-rce-attack-chain-on-quick-share/
Google Quick Share Bug Bypasses Allow Zero-Click File Transfer

Apr 3, 2025 4:42 PM

by

Andy Stern

in SecurityNews

Tags: attack, cve, google, rce, remote-code-execution, update, windows

Google addresses patch bypasses for CVE-2024-38272 and CVE-2024-38271, part of the previously announced QuickShell silent RCE attack chain against Windows users. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/google-quick-share-bug-bypasses-zero-click-file-transfer
iOS 19: Diese iPhones könnten das Update nicht mehr bekommen

Apr 3, 2025 4:42 PM

by

Andy Stern

in SecurityNews

Tags: iphone, update

First seen on t3n.de Jump to article: t3n.de/news/ios-19-diese-iphones-koennten-das-update-nicht-mehr-bekommen-1680943/
An Update on QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share

Apr 3, 2025 3:42 PM

by

Andy Stern

in SecurityNews

Tags: attack, data, google, rce, remote-code-execution, update, vulnerability

See how a SafeBreach Labs researcher discovered a bypass for a fix to a critical vulnerability they previously reported in Google’s Quick Share data transfer utility. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/an-update-on-quickshell-sharing-is-caring-about-an-rce-attack-chain-on-quick-share/
An Update on QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share

Apr 3, 2025 2:42 PM

by

Andy Stern

in SecurityNews

Tags: attack, data, google, rce, remote-code-execution, update, vulnerability

See how a SafeBreach Labs researcher discovered a bypass for a fix to a critical vulnerability they previously reported in Google’s Quick Share data transfer utility. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/an-update-on-quickshell-sharing-is-caring-about-an-rce-attack-chain-on-quick-share/
An Update on QuickShell: Sharing Is Caring about an RCE Attack Chain on Quick Share

Apr 3, 2025 1:42 PM

by

Andy Stern

in SecurityNews

Tags: attack, data, google, rce, remote-code-execution, update, vulnerability

See how a SafeBreach Labs researcher discovered a bypass for a fix to a critical vulnerability they previously reported in Google’s Quick Share data transfer utility. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/an-update-on-quickshell-sharing-is-caring-about-an-rce-attack-chain-on-quick-share/
Google Released Second Fix for Quick Share Flaws After Patch Bypass

Apr 3, 2025 11:42 AM

by

Andy Stern

in SecurityNews

Tags: flaw, google, remote-code-execution, update, vulnerability, windows

Google’s patches for Quick Share for Windows vulnerabilities leading to remote code execution were incomplete and could be easily bypassed. The post Google Released Second Fix for Quick Share Flaws After Patch Bypass appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/google-released-second-fix-for-quick-share-flaws-after-patch-bypass/
Still Using an Older Version of iOS or iPadOS? Update Now to Patch These Critical Security Vulnerabilities

Apr 2, 2025 10:47 PM

by

Andy Stern

in SecurityNews

Tags: apple, macOS, update, vulnerability

Apple has also fixed vulnerabilities in iPadOS 17.7.6, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5, as well as its recently released iOS 18.4. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-apple-security-fixes-ios-15-16/
3 Ways the UK Government Plans to Tighten Cyber Security Rules with New Bill

Apr 2, 2025 8:56 PM

by

Andy Stern

in SecurityNews

Tags: attack, country, cyber, government, infrastructure, ransomware, regulation, resilience, service, update

Amid a sharp spike in ransomware attacks disrupting essential services and critical infrastructure, the U.K. government has set out the scope of its upcoming Cyber Security and Resilience Bill for the first time. It aims to patch the holes in the country’s existing cyber regulations and protect critical infrastructure from ransomware and other attack types.…
Microsoft adds hotpatching support to Windows 11 Enterprise

Apr 2, 2025 8:56 PM

by

Andy Stern

in SecurityNews

Tags: business, microsoft, update, windows

Microsoft has announced that hotpatch updates are now available for business customers using Windows 11 Enterprise 24H2 on x64 (AMD/Intel) systems, starting today. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-adds-hotpatching-support-to-windows-11-enterprise/
Unhealthy Cybersecurity Postures

Apr 2, 2025 6:55 PM

by

Andy Stern

in SecurityNews

Tags: cybersecurity, healthcare, identity, ransomware, threat, update

Updates from Enzoic’s Threat Research Team In the last Enzoic research update, we briefly discussed the travails of the healthcare industry and their challenges in establishing a successful cybersecurity posture in the face of a salivating cadre of identity thieves and ransomware operators. In the intervening few weeks, more analyses have been published, including the……
Microsoft’s AI tool catches critical GRUB2, U-boot bootloader flaws

Apr 2, 2025 4:56 PM

by

Andy Stern

in SecurityNews

Tags: access, ai, control, cybersecurity, exploit, firmware, flaw, Hardware, microsoft, mitigation, monitoring, risk, soc, supply-chain, tool, update, vulnerability, vulnerability-management, zero-day

AI-powered discovery changes the cybersecurity landscape: Microsoft’s Security Copilot tool significantly accelerated the vulnerability identification process, with a particular focus on filesystem implementations due to their high vulnerability potential.”Using Security Copilot, we were able to identify potential security issues in bootloader functionalities, focusing on filesystems due to their high vulnerability potential,” the blog stated. “This…