A Secure User Authentication Method – Planning is More Important than Ever

A Secure User Authentication Method – Planning is More Important than Ever,

When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability. Organizations cannot always be judged on those metrics alone. There is an increasing need to evaluate company ownership, policies and the stability, or instability, that it brings.
How Leadership Change Affects Stability
In recent months, a salient example

,

When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability. Organizations cannot always be judged on those metrics alone. There is an increasing need to evaluate company ownership, policies and the stability, or instability, that it brings.
How Leadership Change Affects Stability
In recent months, a salient example

, ,
https://thehackernews.com/2023/01/a-secure-user-authentication-method.html

CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers

CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories warning of critical security flaws affecting products from Sewio, InHand Networks, Sauter Controls, and Siemens.
The most severe of the flaws relate to Sewio’s RTLS Studio, which could be exploited by an attacker to « obtain unauthorized access to the server, alter

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories warning of critical security flaws affecting products from Sewio, InHand Networks, Sauter Controls, and Siemens.
The most severe of the flaws relate to Sewio’s RTLS Studio, which could be exploited by an attacker to « obtain unauthorized access to the server, alter

, ,
https://thehackernews.com/2023/01/cisa-warns-for-flaws-affecting.html

New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild

New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild

,

Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency (CIA)’s Hive multi-platform malware suite, the source code of which was released by WikiLeaks in November 2017.
« This is the first time we caught a variant of the CIA Hive attack kit in the wild, and we named it xdr33 based on its embedded Bot-side certificate CN=xdr33, »

,

Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency (CIA)’s Hive multi-platform malware suite, the source code of which was released by WikiLeaks in November 2017.
« This is the first time we caught a variant of the CIA Hive attack kit in the wild, and we named it xdr33 based on its embedded Bot-side certificate CN=xdr33, »

, ,
https://thehackernews.com/2023/01/new-backdoor-created-using-leaked-cias.html

Norton : des milliers de comptes piratés, les mots de passe dans la nature

Norton : des milliers de comptes piratés, les mots de passe dans la nature,

cadenas securite mot de passe

Norton, l’entreprise derrière le célèbre antivirus, a annoncé à ses clients que leur compte a été compromis au cours des dernières semaines. Une faille de sécurité qui a également permis aux pirates d’accéder au gestionnaire de mot de passe proposé par la marque.

,

cadenas securite mot de passe

Norton, l’entreprise derrière le célèbre antivirus, a annoncé à ses clients que leur compte a été compromis au cours des dernières semaines. Une faille de sécurité qui a également permis aux pirates d’accéder au gestionnaire de mot de passe proposé par la marque.

, ,
https://www.01net.com/actualites/norton-des-milliers-de-comptes-pirates-les-mots-de-passe-dans-la-nature.html

Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident

Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident

,

DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee’s laptop and leveraged malware to steal their two-factor authentication-backed credentials to breach the company’s systems and data last month.
The CI/CD service CircleCI said the « sophisticated attack » took place on December 16, 2022, and that the malware went undetected by its antivirus

,

DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee’s laptop and leveraged malware to steal their two-factor authentication-backed credentials to breach the company’s systems and data last month.
The CI/CD service CircleCI said the « sophisticated attack » took place on December 16, 2022, and that the malware went undetected by its antivirus

, ,
https://thehackernews.com/2023/01/malware-attack-on-circleci-engineers.html

Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability

Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability,

A majority of internet-exposed Cacti servers have not been patched against a recently patched critical security vulnerability that has come under active exploitation in the wild.
That’s according to attack surface management platform Censys, which found only 26 out of a total of 6,427 servers to be running a patched version of Cacti (1.2.23 and 1.3.0).
The issue in question relates to 

,

A majority of internet-exposed Cacti servers have not been patched against a recently patched critical security vulnerability that has come under active exploitation in the wild.
That’s according to attack surface management platform Censys, which found only 26 out of a total of 6,427 servers to be running a patched version of Cacti (1.2.23 and 1.3.0).
The issue in question relates to 

, ,
https://thehackernews.com/2023/01/cacti-servers-under-attack-as-majority.html

TikTok Fined $5.4 Million by French Regulator for Violating Cookie Laws

TikTok Fined $5.4 Million by French Regulator for Violating Cookie Laws,

Popular short-form video hosting service TikTok has been fined €5 million (about $5.4 million) by the French data protection watchdog for breaking cookie consent rules, making it the latest platform to face similar penalties after Amazon, Google, Meta, and Microsoft since 2020.
« Users of ‘tiktok[.]com’ could not refuse cookies as easily as accepting them and they were not informed in a

,

Popular short-form video hosting service TikTok has been fined €5 million (about $5.4 million) by the French data protection watchdog for breaking cookie consent rules, making it the latest platform to face similar penalties after Amazon, Google, Meta, and Microsoft since 2020.
« Users of ‘tiktok[.]com’ could not refuse cookies as easily as accepting them and they were not informed in a

, ,
https://thehackernews.com/2023/01/tiktok-fined-54-million-by-french.html

Cisco Issues Warning for Unpatched Vulnerabilities in EoL Business Routers

Cisco Issues Warning for Unpatched Vulnerabilities in EoL Business Routers,

Cisco has warned of two security vulnerabilities affecting end-of-life (EoL) Small Business RV016, RV042, RV042G, and RV082 routers that it said will not be fixed, even as it acknowledged the public availability of proof-of-concept (PoC) exploit.
The issues are rooted in the router’s web-based management interface, enabling a remote adversary to sidestep authentication or execute malicious

,

Cisco has warned of two security vulnerabilities affecting end-of-life (EoL) Small Business RV016, RV042, RV042G, and RV082 routers that it said will not be fixed, even as it acknowledged the public availability of proof-of-concept (PoC) exploit.
The issues are rooted in the router’s web-based management interface, enabling a remote adversary to sidestep authentication or execute malicious

, ,
https://thehackernews.com/2023/01/cisco-issues-warning-for-unpatched.html

Beware: Tainted VPNs Being Used to Spread EyeSpy Surveillanceware

Beware: Tainted VPNs Being Used to Spread EyeSpy Surveillanceware,

Tainted VPN installers are being used to deliver a piece of surveillanceware dubbed EyeSpy as part of a malware campaign that started in May 2022.
It uses « components of SecondEye – a legitimate monitoring application – to spy on users of 20Speed VPN, an Iranian-based VPN service, via trojanized installers, » Bitdefender said in an analysis.
A majority of the infections are said to originate in

,

Tainted VPN installers are being used to deliver a piece of surveillanceware dubbed EyeSpy as part of a malware campaign that started in May 2022.
It uses « components of SecondEye – a legitimate monitoring application – to spy on users of 20Speed VPN, an Iranian-based VPN service, via trojanized installers, » Bitdefender said in an analysis.
A majority of the infections are said to originate in

, ,
https://thehackernews.com/2023/01/beware-tainted-vpns-being-used-to.html

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar,

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive (JAR) files, once again highlighting how threat actors are continuously finding new ways to fly under the radar.
« Attackers now use the polyglot technique to confuse security solutions that don’t properly validate the JAR file format, » Deep Instinct security researcher

,

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive (JAR) files, once again highlighting how threat actors are continuously finding new ways to fly under the radar.
« Attackers now use the polyglot technique to confuse security solutions that don’t properly validate the JAR file format, » Deep Instinct security researcher

, ,
https://thehackernews.com/2023/01/cybercriminals-using-polyglot-files-in.html