securityweek.com

Remember IE5 days? ;)

Google releases Chrome 125 to the stable channel with patches for nine vulnerabilities, including a zero-day.

MITRE has shared more details on the recently disclosed hack, including the new malware involved in the attack, attribution information, and a timeline of the attacker’s activities.

#Tierrasapiens #es #Noticias #Actualidad #Informacion #Mundo #Sociedad #Interes #Ciencias #Cibernoticias #Tecnologia y+ para #Hispanoparlantes

CVE-2024-3385: High-severity vulnerability that allows a remote and unauthenticated attacker to reboot hardware-based firewalls by sending specially crafted packets. If repeated, the attacks can force the firewall into maintenance mode, requiring manual intervention for reactivation. It only affects PA-5400 and PA-7000 firewalls...

Hundreds of websites misconfigured Google Firebase, leaking more than 125 million user records, including plaintext passwords, security researchers warn....

French Government Services Hit by Intense Cyberattacks: Anonymous Sudan Claims Responsibility for the Denial-of-Service Assaults with Significant Online Disruption

Security firm Avast observed attacks last year and developed a proof-of-concept (PoC) exploit and sent it to Microsoft in August 2023. It took Microsoft six months to make a patch (until February 2024) and didn’t mark it as a zero day in Microsoft Vulnerability Management.

:/

US government reportedly disabled parts of a botnet-powered cyber campaign conducted by the Chinese threat actor Volt Typhoon.

US government reportedly disabled parts of a botnet-powered cyber campaign conducted by the Chinese threat actor Volt Typhoon.

I’m hearing its more than just first American

A new attack technique named SMTP Smuggling can allow malicious actors to send out spoofed emails that bypass authentication mechanisms.

Firmware security company Binarly on Wednesday disclosed the details of an attack method that can be used to compromise many consumer and enterprise devices by leveraging malicious UEFI logo images....

Cyberattack cripples Ace Hardware’s internal systems, resulting in shipment delays, suspended online orders.