5 Reasons Why Access Management is the Key to Securing the Modern Workplace

5 Reasons Why Access Management is the Key to Securing the Modern Workplace,

The way we work has undergone a dramatic transformation in recent years. We now operate within digital ecosystems, where remote work and the reliance on a multitude of digital tools is the norm rather than the exception. This shift – as you likely know from your own life – has led to superhuman levels of productivity that we wouldn’t ever want to give up. But moving fast comes at a cost. And for

,

The way we work has undergone a dramatic transformation in recent years. We now operate within digital ecosystems, where remote work and the reliance on a multitude of digital tools is the norm rather than the exception. This shift – as you likely know from your own life – has led to superhuman levels of productivity that we wouldn’t ever want to give up. But moving fast comes at a cost. And for

, ,
https://thehackernews.com/2023/06/5-reasons-why-access-management-is-key.html

Stealth Soldier: A New Custom Backdoor Targets North Africa with Espionage Attacks

Stealth Soldier: A New Custom Backdoor Targets North Africa with Espionage Attacks,

A new custom backdoor dubbed Stealth Soldier has been deployed as part of a set of highly-targeted espionage attacks in North Africa.
« Stealth Soldier malware is an undocumented backdoor that primarily operates surveillance functions such as file exfiltration, screen and microphone recording, keystroke logging and stealing browser information, » cybersecurity company Check Point said in a

,

A new custom backdoor dubbed Stealth Soldier has been deployed as part of a set of highly-targeted espionage attacks in North Africa.
« Stealth Soldier malware is an undocumented backdoor that primarily operates surveillance functions such as file exfiltration, screen and microphone recording, keystroke logging and stealing browser information, » cybersecurity company Check Point said in a

, ,
https://thehackernews.com/2023/06/stealth-soldier-new-custom-backdoor.html

Experts Unveil Exploit for Recent Windows Vulnerability Under Active Exploitation

Experts Unveil Exploit for Recent Windows Vulnerability Under Active Exploitation,

Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileges on affected systems.
The vulnerability, tracked as CVE-2023-29336, is rated 7.8 for severity and concerns an elevation of privilege bug in the Win32k component.
« An attacker who successfully exploited this vulnerability could gain

,

Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileges on affected systems.
The vulnerability, tracked as CVE-2023-29336, is rated 7.8 for severity and concerns an elevation of privilege bug in the Win32k component.
« An attacker who successfully exploited this vulnerability could gain

, ,
https://thehackernews.com/2023/06/experts-unveil-poc-exploit-for-recent.html

Clop Ransomware Gang Likely Exploiting MOVEit Transfer Vulnerability Since 2021

Clop Ransomware Gang Likely Exploiting MOVEit Transfer Vulnerability Since 2021,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have published a joint advisory regarding the active exploitation of a recently disclosed critical flaw in Progress Software’s MOVEit Transfer application to drop ransomware.
« The Cl0p Ransomware Gang, also known as TA505, reportedly began exploiting a previously unknown SQL injection

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have published a joint advisory regarding the active exploitation of a recently disclosed critical flaw in Progress Software’s MOVEit Transfer application to drop ransomware.
« The Cl0p Ransomware Gang, also known as TA505, reportedly began exploiting a previously unknown SQL injection

, ,
https://thehackernews.com/2023/06/clop-ransomware-gang-likely-exploiting.html

How to Improve Your API Security Posture

How to Improve Your API Security Posture,

APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectivity doesn’t come without major risks. Hackers can exploit vulnerabilities in APIs to gain unauthorized access to sensitive data or even take control of the entire system. Therefore, it’s essential to have a robust API security posture to

,

APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectivity doesn’t come without major risks. Hackers can exploit vulnerabilities in APIs to gain unauthorized access to sensitive data or even take control of the entire system. Therefore, it’s essential to have a robust API security posture to

, ,
https://thehackernews.com/2023/06/how-to-improve-your-api-security-posture.html

Urgent Security Updates: Cisco and VMware Address Critical Vulnerabilities

Urgent Security Updates: Cisco and VMware Address Critical Vulnerabilities,

VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution.
The most critical of the three vulnerabilities is a command injection vulnerability tracked as CVE-2023-20887 (CVSS score: 9.8) that could allow a malicious actor with network access to achieve remote code execution.
Also patched by

,

VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution.
The most critical of the three vulnerabilities is a command injection vulnerability tracked as CVE-2023-20887 (CVSS score: 9.8) that could allow a malicious actor with network access to achieve remote code execution.
Also patched by

, ,
https://thehackernews.com/2023/06/urgent-security-updates-cisco-and.html

Kimsuky Targets Think Tanks and News Media with Social Engineering Attacks

Kimsuky Targets Think Tanks and News Media with Social Engineering Attacks,

The North Korean nation-state threat actor known as Kimsuky has been linked to a social engineering campaign targeting experts in North Korean affairs with the goal of stealing Google credentials and delivering reconnaissance malware.
« Further, Kimsuky’s objective extends to the theft of subscription credentials from NK News, » cybersecurity firm SentinelOne said in a report shared with The

,

The North Korean nation-state threat actor known as Kimsuky has been linked to a social engineering campaign targeting experts in North Korean affairs with the goal of stealing Google credentials and delivering reconnaissance malware.
« Further, Kimsuky’s objective extends to the theft of subscription credentials from NK News, » cybersecurity firm SentinelOne said in a report shared with The

, ,
https://thehackernews.com/2023/06/kimsuky-targets-think-tanks-and-news.html

Barracuda Urges Immediate Replacement of Hacked ESG Appliances

Barracuda Urges Immediate Replacement of Hacked ESG Appliances,

Enterprise security company Barracuda is now urging customers who were impacted by a recently disclosed zero-day flaw in its Email Security Gateway (ESG) appliances to immediately replace them.
« Impacted ESG appliances must be immediately replaced regardless of patch version level, » the company said in an update, adding its « remediation recommendation at this time is full replacement of the

,

Enterprise security company Barracuda is now urging customers who were impacted by a recently disclosed zero-day flaw in its Email Security Gateway (ESG) appliances to immediately replace them.
« Impacted ESG appliances must be immediately replaced regardless of patch version level, » the company said in an update, adding its « remediation recommendation at this time is full replacement of the

, ,
https://thehackernews.com/2023/06/barracuda-urges-immediate-replacement.html

Microsoft to Pay $20 Million Penalty for Illegally Collecting Kids’ Data on Xbox

Microsoft to Pay $20 Million Penalty for Illegally Collecting Kids’ Data on Xbox

,

Microsoft has agreed to pay a penalty of $20 million to settle U.S. Federal Trade Commission (FTC) charges that the company illegally collected and retained the data of children who signed up to use its Xbox video game console without their parents’ knowledge or consent.
« Our proposed order makes it easier for parents to protect their children’s privacy on Xbox, and limits what information

,

Microsoft has agreed to pay a penalty of $20 million to settle U.S. Federal Trade Commission (FTC) charges that the company illegally collected and retained the data of children who signed up to use its Xbox video game console without their parents’ knowledge or consent.
« Our proposed order makes it easier for parents to protect their children’s privacy on Xbox, and limits what information

, ,
https://thehackernews.com/2023/06/microsoft-to-pay-20-million-penalty-for.html

Winning the Mind Game: The Role of the Ransomware Negotiator

Winning the Mind Game: The Role of the Ransomware Negotiator,

Get exclusive insights from a real ransomware negotiator who shares authentic stories from network hostage situations and how he managed them.
The Ransomware Industry
Ransomware is an industry. As such, it has its own business logic: organizations pay money, in crypto-currency, in order to regain control over their systems and data.
This industry’s landscape is made up of approximately 10-20

,

Get exclusive insights from a real ransomware negotiator who shares authentic stories from network hostage situations and how he managed them.
The Ransomware Industry
Ransomware is an industry. As such, it has its own business logic: organizations pay money, in crypto-currency, in order to regain control over their systems and data.
This industry’s landscape is made up of approximately 10-20

, ,
https://thehackernews.com/2023/06/winning-mind-game-role-of-ransomware.html