To Customer Support To Customer Support

Events
Leaderboard
Customer Support

📊 2023 OpenText Cybersecurity Threat Report

2 months ago

Home
Community overview
Welcome

Welcome

News, Announcements, Tech Discussions

41017 Topics

Recently active

Most replies Most views Newest first

ConnorMThreat Research Analyst

published in Security Industry News

Multiple flaws in Teltonika industrial cellular router expose OT networks to hack

May 17, 2023 By Pierluigi Paganini Experts found multiple vulnerabilities in Teltonika industrial cellular routers that could expose OT networks to cyber attacks.A joint analysis conducted by industrial cybersecurity firms Claroty and Otorio discovered multiple flaws in Teltonika Networks’ IIoT products that can expose OT networks to remote attacks.Teltonika Networks is a leading manufacturer of networking solutions, widely adopted in industrial environments, including gateways, LTE routers, and modems.The researchers discovered eight vulnerabilities that impact thousands of internet-connected devices worldwide. The experts demonstrated multiple attack vectors, including the exploitation of flaws in internet-exposed services, cloud account takeover, and the exploitation of flaws in the cloud infrastructure. >> Full Article <<

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Cisco warns of critical switch bugs with public exploit code

May 17, 2023 By Sergiu Gatlan Cisco warned customers today of four critical remote code execution vulnerabilities with public exploit code affecting multiple Small Business Series Switches.All four security flaws received almost maximum severity ratings with CVSS base scores of 9.8/10. Successful exploitation allows unauthenticated attackers to execute arbitrary code with root privileges on compromised devices.The vulnerabilities—tracked as CVE-2023-20159, CVE-2023-20160, CVE-2023-20161, and CVE-2023-20189—are caused by improper validation of requests sent to the targeted switches' web interfaces. >> Full Article <<

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Hackers infect TP-Link router firmware to attack EU entities

May 16, 2023 By Bill Toulas A Chinese state-sponsored hacking group named "Camaro Dragon" infects residential TP-Link routers with a custom "Horse Shell" malware used to attack European foreign affairs organizations.The backdoor malware is deployed in a custom and malicious firmware designed specifically for TP-Link routers so that the hackers can launch attacks appearing to originate from residential networks."It is worth noting that this kind of attack is not aimed specifically at sensitive networks, but rather at regular residential and home networks," explains the Check Point report. >> Full Article <<

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Open-source Cobalt Strike port 'Geacon' used in macOS attacks

May 16, 2023 By Bill Toulas Geacon, a Go-based implementation of the beacon from the widely abused penetration testing suite Cobalt Strike, is being used more and more to target macOS devices.Both Geacon and Cobalt Strike are utilities that legitimate organizations use to simulate attacks against their networks and improve defenses, but threat actors have also relied on them for attacks.In the case of Cobalt Strike, threat actors have been abusing it to compromise Windows systems for years, with the infosec industry making a continuous effort to fight it.Security researchers at SentinelOne monitoring Geacon activity in the wild have noticed an increased number of payloads on VirusTotal lately. Although some of them showed signs of being part of a red team operation, others had the traits of malicious attacks. >> Full Article <<

14 days ago

TripleHelixModerator

posted in Security Industry News

CVEs have been published or revised in the Security Update Guide May 16, 2023

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:CVE-2023-24953· Title: Microsoft Excel Remote Code Execution Vulnerability· Version: 1.1· Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.· Originally released: May 9, 2023· Last updated: May 15, 2023· Aggregate CVE Severity Rating: ImportantCVE-2023-29344· Title: Microsoft Office Remote Code Execution Vulnerability· Version: 1.1· Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac softwar

14 days ago

ProTruckDriverModerator

posted in Tech Talk

How to Use ChatGPT on iPhone

by: Jamie Cuevas Want to use ChatGPT on your iPhone? It’s easy to tap into the incredible power of ChatGPT from anywhere, as long as you have your iPhone with you. ChatGPT will generate human-like text and responses that is leaps and bounds far more impressive than anything offered by Siri (or Alexa for that matter), offering you an assistant for virtually anything you can think to ask a question of.Despite what you may have read or heard elsewhere, you do not need to download any apps or use anything particularly fancy to access and use ChatGPT right on your iPhone. Using ChatGPT from iPhone is a lot easier than you may think, so let’s dive in and take a look. ⇨⇨ Full Article ⇦⇦

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Parental control app with 5 million downloads vulnerable to attacks

May 16, 2023 By Bill Toulas Image: Gaelle MarcelKiddowares 'Parental Control – Kids Place' app for Android is impacted by multiple vulnerabilities that could enable attackers to upload arbitrary files on protected devices, steal user credentials, and allow children to bypass restrictions without the parents noticing.The Kids Place app is a parental control suite with 5 million downloads on Google Play, offering monitoring and geolocation capabilities, internet access and purchasing restrictions, screen time management, harmful content blocking, remote device access, and more. >> Full Article <<

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Russian Ransomware Perp Charged After High-Profile Hive, Babuk & LockBit Hits

LockBit, Babuk, and Hive ransomware used by Russian to target critical US organizations, DOJ says. May 16, 2023 By Dark Reading Staff Russian national Mikahail Pavlovich Matveev has been charged by the US Department of Justice (DoJ) for launching ransomware attacks on critical organizations including law enforcement agencies, healthcare operations, and more.Matveev is estimated by the DoJ to have demanded as much as $400 million in ransom payments from his victims over his years as a ransomware operator, and to have actually collected as much as $200 million in extortion money. >> Full Article <<

14 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Qilin Ransomware Operation Outfits Affiliates With Sleek, Turnkey Cyberattacks

Researchers infiltrate a ransomware operation and discover slick services behind Qilin's Rust-based malware variant. May 16, 2023 By Dark Reading Staff Ransomware-as-a-service (RaaS) operation Qilin has been arming its affiliates with malware and supporting services to target education, healthcare, and other critical sectors of the worldwide economy, paying out an industry-leading 80% to 85% of takings to the partners.Researchers from Group-IB were able to infiltrate the Qilin operation in March, and what they found was a one-stop shop for aspiring cybercriminals to get their hands on advanced, customizable ransomware, a defined payment structure, and encryption services to support double-extortion operations (i.e., demanding money to decrypt the data, as well as an additional fee not to release the data on a Wark Web leak site). >> Full Article <<

15 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Fraudsters send fake invoice, follow up with fake exec confirmation

May 16, 2023 By Zeljka Zorz Fraudsters are trying out a new approach to convince companies to pay bogus invoices: instead of hijacking existing email threads, they are creating convincing ones themselves. A clever payment request fraudThe fraud attempt begins with an email containing a payment request for a fake invoice.The recipient – an employee in the company’s finance department – reads the email and checks who sent it.The sender’s email address looks like it belongs to one of the company’s trusted vendors, and the VP of Finance has been CC-ed! Soon after, the VP of Finance replies to the email thread, and asks the employee (by name!) to “please pay this at the earliest convenience.” The attackers impersonate a trusted executive (Source: Armorblox) >> Full Article <<

15 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Re-Victimization from Police-Auctioned Cell Phones

May 16, 2023 By Brian Krebs Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them erased, a practice that can lead to crime victims being re-victimized, a new study found. In response, the largest online marketplace for items seized in U.S. law enforcement investigations says it now ensures that all phones sold through its platform will be data-wiped prior to auction.Researchers at the University of Maryland last year purchased 228 smartphones sold “as-is” from PropertyRoom.com, which bills itself as the largest auction house for police departments in the United States. Of phones they won at auction (at an average of $18 per phone), the researchers found 49 had no PIN or passcode; they were able to guess an additional 11 of the PINs by using the top-40 most popular PIN or swipe patterns. >> Full Article <<

15 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Microsoft is scanning the inside of password-protected zip files for malware

If you think a password prevents scanning in the cloud, think again.DAN GOODIN - 5/16/2023 Microsoft cloud services are scanning for malware by peeking inside users’ zip files, even when they’re protected by a password, several users reported on Mastodon on Monday.Compressing file contents into archived zip files has long been a tactic threat actors use to conceal malware spreading through email or downloads. Eventually, some threat actors adapted by protecting their malicious zip files with a password the end user must type when converting the file back to its original form. Microsoft is one-upping this move by attempting to bypass password protection in zip files and, when successful, scanning them for malicious code.While analysis of password-protected files in Microsoft cloud environments is well-known to some people, it came as a surprise to Andrew Brandt. The security researcher has long archived malware inside password-protected zip files before exchanging them with other resear

15 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Toyota Discloses Decade-Long Data Leak Exposing 2.15M Customers' Data

A misconfigured cloud instance exposed vehicle data, but not personally identifiable information, the car maker says. May 15, 2023 By Dark Reading Staff Toyota has disclosed that for more than 10 years, a misconfigured cloud bucket left more 2.15 million customer records exposed to the open Internet.According to the disclosure, the sensitive data from Toyota's cloud-based Connected services was open to unauthorized access from November 2013 to this April. The Toyota Connected offering allows drivers to stream entertainment, use location data to find stolen vehicles, receive flash maintenance reminders, and send for emergency help in case of an accident. >> Full Article <<

15 days ago

Jasper_The_RasperModerator

posted in Security Industry News

PharMerica data breach impacts more than 5.8 million individuals

May 15, 2023 By Pierluigi Paganini National pharmacy network PharMerica discloses a data breach that impacted more than 5.8 million individuals.National pharmacy network PharMerica disclosed a data breach that exposed the personal information of 5,815,591 individuals. The incident took place in March and the company started notifying the impacted individuals via letter.The company is the second largest in the institutional pharmacy services market, with revenues of $1.9 billion and a customer base of 330,000 “beds” in 41 U.S. states. PharMerica provides its services to senior living communities, nursing facilities, public health organizations and post-acute care organizations. >> Full Article <<

15 days ago

Jasper_The_RasperModerator

posted in Security Industry News

Update: Mysterious Intel patch released for almost every modern CPU

We don't know what Intel's patch fixes, and its schedule and scope is a little worrying. May 15, 2023 By Mark Hachman Update: This story has been updated at 12:04 PM to include Intel’s explanation of the new microcode.If your PC includes an Intel processor, it will likely receive a mysterious new update originally pushed out by the company on Friday.Three things about this release are somewhat concerning. First, Intel released the new CPU microcode as an “out of band” or unscheduled release. Second, it covers just about everything Intel has on the market today — dating all the way back to the 2017 8th-gen Core (“Coffee Lake”) chips. (The code itself is on the Intel GitHub page, listing all of the affected processors up to and including Intel’s most recent 13th-gen Core chips. Intel Xeons are affected, too.) Finally, the secretive and sudden nature of this patch raises eyebrows. >> Full Article <<

15 days ago

TylerMSr. Security Analyst & Community Manager

published in Water Cooler

🎬 Cybersecurity Cringe in TV, Movies & Pop Culture: Share, Facepalm, and Win! 🏆Giveaway

Happy Wednesday, cybersecurity buffs! 🌐 We all know that TV shows, movies, and popular culture sometimes miss the mark when it comes to accurately portraying cybersecurity. So, let's have some fun and share our favorite cringe-worthy moments from Hollywood and beyond! 🎥 Masterful NCIS cringeThe participant who shares the most amusing and cringe-inducing example will win a $25 Amazon Gift card 🏆 4 winners will be announced Thursday (tomorrow).What will you win? Here's how to join the fun:1️⃣ Share a specific scene or example from a TV show, movie, or popular culture that made you cringe due to its inaccurate portrayal of cybersecurity.2️⃣ Explain why it was so cringe-worthy and what they got wrong.3️⃣ Engage with fellow participants by reacting to their examples and sharing your thoughts. While we enjoy pointing out the inaccuracies, let's also remember that these moments can spark conversations and raise awareness about the importance of cybersecurity. So, let's laugh, facepalm, and

856

15 days ago

Jasper_The_RasperModerator

posted in Security Industry News

WordPress Field Builder Plugin Vulnerability Exploited in Attacks Two Days After Patch

PoC exploit targeting an XSS vulnerability in the Advanced Custom Fields WordPress plugin started being used in malicious attacks two days after patch. May 15, 2023 By Ionut Arghire Threat actors were seen adopting public proof-of-concept (PoC) exploit code targeting a cross-site scripting (XSS) vulnerability in the Advanced Custom Fields WordPress plugin only two days after a patch was released, Akamai reports.Tracked as CVE-2023-30777, the high-severity vulnerability could allow attackers to inject malicious scripts and other payloads into vulnerable websites. The code would be executed when guests visit the website. >> Full Article <<

15 days ago

ProTruckDriverModerator

posted in Water Cooler

The Battle With Cancer Begins

I remember when [b]TripleHelix[/b] and I joined this forum there were only a few members. It sure has grown within a year. During the end of last year[b] TH[/b] and I communicated by PM’s about my health problem. The beginning of last year my white blood count was elevated. Another blood test was done near the end of the year and it was still elevated. I had a bone marrow biopsy done and on October 26 I was diagnosed to have [u]Chronic Lymphocytic Leukemia[/u]. The cancer is in the early stage and as of now I don’t need Chemotherapy. I have found the hardest part after going through the initial shock of getting this bad news is telling family members and friends that you have it. I still haven’t told my sister because she has gone through enough last year with her husband passing away after 50 years of marriage. The reason for posting this is because I believe some members have seen a slow down with my activity on the forum. Just wanted to let you know [b]Webroot is the Best[/b] and I

125

15 days ago

Jasper_The_RasperModerator

posted in Security Industry News

New RA Group ransomware gang is the latest group using leaked Babuk source code

May 15, 2023 By Pierluigi Paganini A previously unknown ransomware group known as RA Group is targeting companies in U.S. and South Korea with leaked Babuk source code.Cisco Talos researchers recently discovered a new ransomware operation called RA Group that has been active since at least April 22, 2023. The group has already compromised three organizations in the U.S. and one in South Korea.The researchers assess with high confidence that the group is using the leaked Babuk ransomware source code. >> Full Article <<

15 days ago

1
2
3
4
5
6
7
8
...
1641

Page 5 / 1641

Badges

Petrovichas earned the badge Beta To The Max
TylerMhas earned the badge Have 50 answers marked as "solved"!
tasystemshas earned the badge Posted 100 comments!
Tarnakhas earned the badge Beta To The Max
andrea.raniolohas earned the badge News: Posted 10 comments!

Show all badges

Join the Conversation

Tweets by Webroot

Terms & Conditions

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

Customer Support
Webroot.com
Blog
Status Page
Community Guidelines
Legal
Privacy
Cookie Preferences

We have recently updated our Privacy Policies. We encourage you to read the full terms here.

Welcome

Cyber News Rundown: Royal Ransomware takes down City of DallasNews

🎬 Cybersecurity Cringe in TV, Movies & Pop Culture: Share, Facepalm, and Win! 🏆Giveaway

Badges

Join the Conversation

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded