U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog

GlobalDefenseBot 1 December

2 minutes

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an OpenPLC ScadaBR flaw, tracked as CVE-2021-26829 (CVSS score of 5.4), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is a cross-site scripting (XSS) flaw that impacts Windows and Linux versions via system_settings.shtm. […]

breaking news

Security Affairs newsletter Round 552 by Pierluigi Paganini – INTERNATIONAL EDITION

GlobalDefenseBot 30 November

3 minutes

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Attackers stole member data from French Soccer Federation Thousands of sensitive secrets published on JSONFormatter and […]

If many IT or security pros were hacking other companies, but weren’t getting caught, how would we know?

CySecBot 30 November

1 minute

Is there an empirical study researchers could do to test this? What about a series of studies? ChatGPT and google cite studies that show Mr. Robot personality types are rare compared to insider threats, students, or organized crime. The reason is there…

Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malware

GlobalDefenseBot 30 November

4 minutes

North Korea-linked actors behind Contagious Interview uploaded 197 new malicious npm packages to distribute a new OtterCookie malware version. North Korea-linked threat actors added 197 new malicious npm packages to spread updated OtterCookie malware as part of the ongoing Contagious Interview campaign, cybersecurity firm Socket warns. The Contagious Interview campaign, active since November 2023 and linked to […]

I made a fully open source handheld hacking device! (It runs Linux)

CySecBot 29 November

1 minute

submitted by /u/Machinehum [link] [comments]

HashJack Attack Uses URL ‘#’ to Control AI Browser Behavior

CySecBot 29 November

1 minute

Cybersecurity firm Cato Networks reveals HashJack, a new AI browser vulnerability using the ‘#’ symbol to hide malicious commands. Microsoft and Perplexity fixed the flaw, but Google’s Gemini remains at risk.

breaking news

Attackers stole member data from French Soccer Federation

GlobalDefenseBot 29 November

2 minutes

The French Soccer Federation (FFF) disclosed a data breach after hackers used a compromised account to steal member data. A compromised account allowed attackers to breach the French Soccer Federation (FFF), stealing data belonging to its members. The organization confirmed the cyberattack on Thursday, but did not disclose the number of members impacted. “The FFF […]

breaking news

Thousands of sensitive secrets published on JSONFormatter and CodeBeautify

GlobalDefenseBot 28 November

3 minutes

Users of JSONFormatter and CodeBeautify leaked thousands of sensitive secrets, including credentials and private keys, WatchTowr warns. WatchTowr’s latest research reveals massive leaks of passwords, secrets, and keys across developer formatting platforms like JSONFormatter and CodeBeautify. Despite past incidents, exposed credentials remain rampant, sometimes even for critical systems. WatchTowr researchers highlight how easily sensitive data […]

breaking news

New Mirai variant ShadowV2 tests IoT exploits amid AWS disruption

GlobalDefenseBot 28 November

2 minutes

ShadowV2, a new Mirai-based botnet, briefly targeted vulnerable IoT devices during October’s AWS outage, likely as a test run. During the late-October AWS disruption, FortiGuard Labs researchers observed the Mirai-based ‘ShadowV2’ malware exploiting IoT vulnerabilities across multiple countries and industries. The botnet was active only during the outage, suggesting a test run for future attacks. […]

breaking news

Asahi says crooks stole data of approximately 2M customers and employees

GlobalDefenseBot 27 November

4 minutes

Asahi says hackers stole data of approximately 2M customers and employees before a ransomware attack crippled its Japan operations. Threat actors hit Asahi with a ransomware attack in September, stealing personal data on about 2 million customers and employees and severely disrupting the company’s operations in Japan. Asahi Group Holdings, Ltd (commonly called Asahi) is […]