News

An individual who posted data allegedly stolen via MOVEit from Amazon and other big-name firms claims not to be malicious

Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited

Fourteen product families affected as 2024 passes an unfortunate milestone

DeFlock is a crowd-sourced project to map license plate scanners.

It only records the fixed scanners, of course. The mobile scanners on cars are not mapped.

The post Mapping License Plate Scanners in the US appeared first on Schneier on Security.

The TA455 phishing campaign used fake job offers on LinkedIn to deploy malware

New phishing tool GoIssue targets GitHub, enabling mass phishing, and has been linked to the GitLoker extortion campaign

Panaseer claims 72% of security leaders are taking out personal indemnity insurance as board scrutiny increases

watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops

Jamf observed North Korean attackers embedding malware within Flutter applications to target macOS devices, potentially to test a new way of weaponizing malware

Halliburton has reported a $35m loss associated with an August ransomware breach