Apple Issues Emergency Security Update for Actively Exploited ...
Nov 20, 2024 · Apple has urged customers to apply emergency security updates, which fixes two actively exploited vulnerabilities on its devices. The fixes are included in the iOS 18.1.1 and iPadOS 18.1.1, Safari 18.1.1, visionOS 2.1.1 and macOS Sequoia 15.1.1 updates, available across a range of Apple devices, including iPhones, iPads, macOS and Apple Vision Pro.
Information Security and IT Security News - Infosecurity Magazine
Dec 20, 2024 · Ransomware Attack Exposes Data of 5.6 Million Ascension Patients 23 Dec 2024. US healthcare giant Ascension revealed that 5.6 million individuals have had their personal, medical and financial information breached in a ransomware attack
Fortinet Confirms Exploitation of Critical FortiManager Zero-Day
Oct 24, 2024 · Fortinet has confirmed that a critical zero-day vulnerability affecting its FortiManager network management solution is being exploited in the wild.. In an October 23 security advisory, the cybersecurity provider shared more information on CVE-2024-47575, a vulnerability allowing threat actors to use a compromised FortiManager device to execute arbitrary code or commands against other ...
MITRE Unveils Top 25 Most Critical Software Flaws
Nov 22, 2024 · Cross-site scripting has been identified as the most critical software flaw of the past year, according to a recent report from MITRE. The nonprofit’s latest Top 25 Most Dangerous Software Weaknesses ranking was published on November 20. It covers the most critical flaws listed in the Common Weakness Enumeration (CWEs) …
American Water Hit by Cyber-Attack, Billing Systems Disrupted
Oct 8, 2024 · American Water, the largest publicly regulated water and wastewater utility in the US, has disclosed on Monday that it had fallen victim to a cyber-attack, affecting certain internal systems.
Russia's SVR Targets Zimbra, TeamCity Servers for Cyber Espionage
Oct 11, 2024 · Hackers at Russia’s Foreign Intelligence Service (SVR) have been spying on US, European and global entities for years to collect intelligence and enable future cyber operations, according to US and UK intelligence agencies.
Data Breach at MC2 Data Leaves 100 Million at Risk of Fraud
Sep 26, 2024 · A massive data leak exposing the personal information of over 100 million US citizens has been reportedly uncovered by security researchers. The breach, discovered by Cybernews and attributed to a misconfigured database at background check firm MC2 Data, allegedly left 2.2TB of sensitive data accessible online without password protection.
Microsoft Fixes Five Zero-Days in October Patch Tuesday
Oct 9, 2024 · Microsoft has patched two zero-day bugs under active exploitation and a further three that were publicly disclosed in this month’s Patch Tuesday update round.
NIST Scraps Passwords Complexity and Mandatory Changes
Sep 26, 2024 · Using a mixture of character types in your passwords and regularly changing passwords are officially no longer best password management practices according to new guidelines published by the US National Institute of Standards and Technology (NIST).
Over Six Million Hit by Ransomware Breach at Infosys McCamish …
Jul 1, 2024 · A cyber-attack on outsourcer Infosys McCamish Systems last year impacted more than six million customers, according to a new filing with data protection authorities.