In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw
The flaw enables server-side request forgery (SSRF) and escalates privileges to root, impacting Cisco Unified CM and Unified CM SME deployments.
Aggregator
Russian APT 'Gamaredon' Upgrades Its Arsenal, Requiring New Defenses
5 days 23 hours ago
The FSB state-sponsored operation has gotten a lot better at loading its malware and hiding its servers.
Nate Nelson
Tata Electronics Confirms Data Breach After 630GB Leak Claim Targets Apple and Tesla
5 days 23 hours ago
Tata Electronics confirmed a data breach after hackers claimed to steal 630GB of data, including alleged Apple supplier and Tesla documents. Tata Electronics, a major supplier to Apple and Tesla, has confirmed a cybersecurity breach weeks after stolen data was advertised on a hacker forum. Tata Electronics confirmed a cyberattack affected parts of its IT […]
Pierluigi Paganini
EdTech Attackers Shift From Schools to Their Software Suppliers
5 days 23 hours ago
Educational institutions, the edtech companies they rely on, and, more concerningly, the challenges they pose for schools are the focus of the latest Reporters' Notebook video series.
Arielle Waldman
Leroy Merlin Spain Customer Database of Nearly 55,000 Records Allegedly Leaked
5 days 23 hours ago
A threat actor using the alias Saturne has posted what they describe as the customer database of leroymerlin.es, the official Spanish e-commerce site of Leroy Merlin, a major home-improvement and DIY retail chain.
Dark Web Informer
FCC passes new cybersecurity rules for emergency systems, undersea cables
6 days ago
The new rules would overhaul national emergency systems to protect against hijacking and update federal security review rules for undersea cables providers
The post FCC passes new cybersecurity rules for emergency systems, undersea cables appeared first on CyberScoop.
djohnson
Order-tracking app Shop abused to push callback phishing attacks
6 days ago
Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order histories to trick them into providing sensitive data or installing remote access software. [...]
Bill Toulas
Cisco security advisory (AV26-547) – Update 1
6 days ago
Canadian Centre for Cyber Security
Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet
6 days 1 hour ago
Curl fixed 18 vulnerabilities, including a 25-year-old bug, with issues spanning auth bypass, memory safety, and host validation in libcurl. Curl maintainers addressed eighteen vulnerabilities with a single update, and one of them goes back 25 years. That’s not a typo, it really sat there since the early 2000s. curl is a widely used open-source […]
Pierluigi Paganini
Local Police Collusion Hampers Crackdown on Asian Scam Centers
6 days 1 hour ago
With tens of billions of dollars flowing into regional economies from cybercrime, scam centers continue to flourish, despite international and law-enforcement efforts.
Robert Lemos
Возрастной рейтинг 16+ на сериале — это не формальность. Новое исследование объясняет почему
6 days 1 hour ago
Фильмы и сериалы влияют на сексуальные установки подростков раньше, чем они попадают на запрещенные сайты.
DHS chief says president has met with likely CISA nominee; agency plans to hire 600
6 days 1 hour ago
Once a new CISA director is in place, the agency will ramp up hiring efforts, Homeland Security Secretary Markwayne Mullin told lawmakers. The White House has not yet announced a nominee.
Microsoft quietly extends free Windows 10 ESU support to October 2027
6 days 1 hour ago
Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled devices to continue receiving security updates until October 12, 2027. [...]
Lawrence Abrams
«Прорыв» или самообман? Nature выпустил статью, которая ставит под сомнение главную квантовую ставку Microsoft
6 days 1 hour ago
Microsoft снова приходится защищать свои «майорановские» кубиты.
Anubis
6 days 1 hour ago
You must login to view this content
cohenido
Insomnia
6 days 2 hours ago
You must login to view this content
cohenido
Interlock
6 days 2 hours ago
You must login to view this content
cohenido
CIS Controls Accreditation Drives Global Cybersecurity Standards
6 days 2 hours ago
CIS Controls Accreditation is raising global cybersecurity standards, setting a trusted benchmark for excellence, resilience, and best practices.
Russia Used Cellebrite Tool to Hack Activist’s iPhone Despite Contract Cancellation
6 days 2 hours ago
Russian authorities deployed Cellebrite’s Universal Forensic Extraction Device (UFED) to breach the iPhone of opposition politician Andrey Pivovarov in June 2021, months after the Israeli surveillance firm publicly announced it had terminated all contracts with Russian customers, according to a forensic investigation published by the Citizen Lab at the University of Toronto. On May 31, […]
The post Russia Used Cellebrite Tool to Hack Activist’s iPhone Despite Contract Cancellation appeared first on Cyber Security News.
Guru Baran
Почему мы до сих пор не нашли инопланетян? Новое исследование даёт неожиданный ответ: мы слушали не так
6 days 2 hours ago
Неправильные фильтры на телескопах могли помешать человечеству встретиться в космическими соседями.