[ad_1] Cisco today notified customers of a high-severity vulnerability affecting certain models of data center switches that allow attackers to tamper with encrypted traffic. Tracked as CVE-2023-20185, the flaw was discovered during internal security testing in the ACI Multi-Site CloudSec…
[ad_1] Technical information has emerged for a serious vulnerability affecting several versions of the Linux kernel that could be triggered with "minimal capabilities". The security issue is called StackRot (CVE-2023-3269) and can be used to compromise the kernel and elevate…
[ad_1] Security researchers warn that tens of thousands of photovoltaic (PV) monitoring and diagnostic systems are accessible on the public web, making them potential targets for hackers. These systems are used for remote performance monitoring, troubleshooting, system optimization and other…
[ad_1] Microsoft is again offering an update to Defender Antivirus (first released in April and retired in May) that fixes a known issue triggering Windows security warnings that Local Security Authority (LSA) protection is disabled. Microsoft recognized this issue affects…
[ad_1] Law enforcement has arrested a suspect believed to be a key member of cybercrime group OPERA1ER, which has targeted mobile banking and financial institutions in malware, phishing and email compromise campaigns professionals (BEC). The gang, also known as NX$M$,…
[ad_1] A member of the US Navy's Red Team has released a tool called TeamsPhisher that exploits an unresolved security issue in Microsoft Teams to circumvent restrictions for incoming files from users outside a targeted organization, self- called external tenants.…
[ad_1] Nagoya Port, Japan's largest and busiest port, has been the target of a ransomware attack that is currently affecting the operation of container terminals. The port accounts for about 10% of Japan's total trade volume. It operates 21 quays…
[ad_1] The Swedish Privacy Authority (Integritetsskyddsmyndigheten - IMY) has fined two companies SEK 12.3 million (€1 million/$1.1 million) for using Google Analytics and warned two others against the same practice. In a decision published yesterday, the agency explains that by…
[ad_1] A security researcher and system administrator has developed a tool that can help users check for obvious incompatibilities in JavaScript NPM software registry packages. Last week, a former engineering lead at GitHub and NPM, Darcy Clarke, warned against problems…
[ad_1] Microsoft has denied claims by so-called "Anonymous Sudan" hacktivists that they hacked into the company's servers and stole the credentials of 30 million customer accounts. Anonymous Sudan is notorious for its debilitating Distributed Denial of Service (DDoS) attacks against…
