Tags → #stories

Vulnerabilities
VPN Vulnerabilities Highlighted in Recent Security Research
Nov 21, 2024 Research indicates that over half of enterprises have faced attacks exploiting vulnerabilities in popular VPN clients, particularly highlighting security concerns with Fortinet's VPN solution.
Vulnerabilities
Vulnerability Discovered in Drugs.com Authentication System
Nov 21, 2024 A recently identified vulnerability in the Drugs.com vulnerability disclosure program has raised concerns about the security risks associated with inadequate authentication logic, particularly the ability to bypass multi-factor authentication.
Tools
BARK Tool Assists Research on Azure Key Vault Operations
Nov 20, 2024 BARK is a tool designed to assist in research related to adversarial tradecraft involving Azure Key Vault, offering various functions for token acquisition, key vault management, and data encryption and decryption.
Threats
Concerns Raised Over Digital Advertising Data and National Security
Nov 20, 2024 An investigation has raised concerns about the implications of digital advertising data collection on U.S. national security, particularly regarding the tracking of military personnel stationed in Germany.
Cybercrime
Concerns Rise Over New NFC Fraud Tactic "Ghost Tap"
Nov 20, 2024 Financial institutions are increasingly alarmed by the emergence of a cash-out tactic known as "Ghost Tap," which utilizes NFC technology to facilitate fraudulent transactions without physical presence at the point of sale.
Threats
CrowdStrike Executive to Testify on Cyber Threats from China
Nov 20, 2024 Adam Meyers of CrowdStrike is set to testify before the U.S. Senate Judiciary Subcommittee on November 19, 2024, regarding the cyber threats posed by the state-sponsored actor LIMINAL PANDA, which has been active since at least 2020 and primarily targets telecommunications entities.
Education
Cybersecurity Training Tool SCORPION Introduced for Education
Nov 20, 2024 The SCORPION platform, an innovative Cyber Range, aims to enhance cybersecurity training through automated scenario creation and adaptive learning modules, addressing the growing need for effective security measures amid rising cyberattacks.
Threats
Cybersecurity: Understanding Malware Persistence Mechanisms
Nov 20, 2024 Persistence mechanisms in cybersecurity allow malware or intruders to maintain access to compromised systems over time, enabling activities such as data theft and further malware propagation.
Vulnerabilities
Evolution of Earth Observation Missions and Security Strategies
Nov 20, 2024 The article discusses the implications of communication technology advancements for military and civil security, emphasizing the need for secure-by-design strategies in Earth observation missions following the Viasat cyberattack.
Tools
Innovative Watermarking Scheme Developed for Generative Image Models
Nov 20, 2024 A new undetectable watermarking scheme for generative image models has been developed, ensuring robustness and image quality while addressing challenges in AI-generated content.