Cloud Security Alliance News Clipping Site

Tag: cybercriminal

  • The Register: Fore-get about privacy, golf tech biz leaves 32M data records on the fairway

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/10/10/trackman_unprotected_database/ Source: The Register Title: Fore-get about privacy, golf tech biz leaves 32M data records on the fairway Feedly Summary: Researcher spots 110 TB of sensitive info sitting in unprotected database Nearly 32 million records belonging to users of tech from Trackman were left exposed to the internet, sitting in a non-password protected…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/09/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection…

  • Microsoft Security Blog: Cybersecurity Awareness Month: Securing our world—together

    —

    by

    system automation
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2024/10/01/cybersecurity-awareness-month-securing-our-world-together/ Source: Microsoft Security Blog Title: Cybersecurity Awareness Month: Securing our world—together Feedly Summary: To help our global cyberdefenders, Microsoft has put together the Be Cybersmart Kit, designed to educate everyone, on best practices for going passwordless, not falling for sophisticated phishing or fraud, device protection, AI safety, and more. The post Cybersecurity…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/08/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability…

  • Slashdot: National Public Data Published Its Own Passwords

    —

    by

    system automation
    in

    Source URL: https://yro.slashdot.org/story/24/08/20/0021202/national-public-data-published-its-own-passwords Source: Slashdot Title: National Public Data Published Its Own Passwords Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant data breach at National Public Data (NPD), highlighting that sensitive consumer information, including Social Security Numbers and personal details, was leaked online. The breach also involved exposed login credentials…