2024-10-09 12:00 UTC
Government
NIST Cybersecurity Insights · Jeff Marron · indexed 2026-08-15 20:45 UTC
This blog is part of a larger NIST series during the month of October for Cybersecurity Awareness Month , called 'Staff Stories Spotlight.' Throughout the month of October this year, Q&A style blogs will be published featuring some of our unique staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This year’s Cybersecurity Awareness Month theme is ‘Secure our World.’ How does this theme resonate with you, as someone working in cybersecurit…
P0
2024-10-09 00:00 UTC
Other
Cloud Vuln DB · indexed 2026-09-07 17:30 UTC
A vulnerability in GitLab Pages allowed attackers to take over dangling custom domains pointing to 'instanceX.gitlab.io'. The issue occured when adding an unverified custom domain to GitLab Pages, which serves content for 7 days before disabling. This could lead to cookie stealing, phishing campaigns, and bypassing of Content-Security Policies and CORS.
P0
2024-10-08 12:00 UTC
Government
NIST Cybersecurity Insights · Joseph Near, David Darais, Mark Durkee · indexed 2026-08-15 20:45 UTC
This post is part of a series on privacy-preserving federated learning. The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), previously known as the Centre for Data Ethics and Innovation. Learn more and read all the posts published to date at NIST’s Privacy Engineering Collaboration Space or RTA’s blog . Introduction In this post, we talk with Dr. Xiaowei Huang and Dr. Yi Dong (University of Liverpool), Dr. Mat Weldon (UK Office of Natio…
P0
2024-10-08 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Learn how to prevent business email compromise attacks and learn how to communicate this emerging cyber threat to your employees.
P0
2024-10-08 00:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Get to know 2024’s three biggest cyber threats—RMM abuse, BYOVD attacks, and WebDAV abuse—and learn how to defend your business from these rising risks.
P0
2024-10-07 06:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Discover the key triggers for implementing effective security awareness training in your organization. Learn how to enhance employee vigilance, reduce security risks, and foster a culture of cybersecurity awareness by visiting the Huntress Blog.
P0
2024-10-03 00:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Join Huntress Threat Hunters as they unpack the password-spraying techniques of threat actors, exposing how they target everything from small businesses to giants like Microsoft.
P0
2024-10-02 05:55 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
In this article, Group-IB specialists uncovered a large-scale fraud campaign involving fake trading apps targeting Apple iOS and Android users across multiple regions through the UniApp framework, and distributed through official app stores and phishing sites.
P0
2024-10-01 12:00 UTC
Government
NIST Cybersecurity Insights · Jess Dickson · indexed 2026-08-15 20:45 UTC
This blog is part of a larger NIST series during the month of October for Cybersecurity Awareness Month , called 'Staff Stories Spotlight.' Throughout the month of October this year, Q&A style blogs will be published featuring some of our unique staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This year’s Cybersecurity Awareness Month theme is ‘Secure our World.’ How does this theme resonate with you, as someone working in cybersecurit…
P0
2024-10-01 00:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Our hottest security tips, tricks, and opinions to kick this Cybersecurity Awareness Month off right.
P0
2024-09-27 00:00 UTC
Government
CERT-FR Alerts · indexed 2026-09-07 17:35 UTC
**[Mise à jour du 10 octobre 2024]** Le 28 septembre 2024, Elastic Security Labs a publié des règles de détection au format propriétaire de l'éditeur (cf. section Documentation), qui sont confirmées par les analyses du CERT-FR pour la détection des attaques connues. **[Publication initiale]** De...
P0
2024-09-26 00:00 UTC
Other
Cloud Vuln DB · indexed 2026-09-07 17:30 UTC
Multiple "pwn request" vulnerabilities were discovered in Google Cloud Data Fusion, which is based on open-source CDAP code. These vulnerabilities affect GitHub Actions and allow for remote code execution (RCE) and compromise of build artifacts. The issues potentially impact both the Google Cloud platform and GitHub's CI/CD infrastructure.
P15
2024-09-26 00:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Huntress made security awareness training (SAT) engaging, relatable, and enjoyable with Managed SAT. Instead of long, dull training sessions, you gain animated, story-based episodes that captivate your learners and improve your organization’s security posture.
P0
2024-09-25 07:00 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
In this blog, we look at the DragonForce ransomware group, which poses a severe threat with two variants—a LockBit fork and a customized Conti fork with advanced features and SystemBC malware.
P15
2024-09-25 00:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Learn how our Smart Filtering Engine changes the game on how you view log data ingestion and management.
P0
2024-09-22 16:48 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Huntress analysts see a number of attacks on a daily and weekly basis, some of which include ransomware attacks. Now and again, Huntress analysts will observe a ransomware attack that stands out in some novel manner.
P15
2024-09-20 00:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Tracking various indicators associated with different attacks, Huntress analysts have been able to identify specific indicators (threat actor workstation names, passwords associated with new user account creation or current account modification, CloudFlare tunnel tokens) that are associated with Akira ransomware infections. By detecting these indicators much earlier in the attack chain, organizations can inhibit or even obviate file encryption malware deployment.
P15
2024-09-19 12:00 UTC
Government
NIST Cybersecurity Insights · Katerina Megas · indexed 2026-08-15 20:45 UTC
The rapid proliferation of Artificial Intelligence (AI) promises significant value for industry, consumers, and broader society, but as with many technologies, new risks from these advancements in AI must be managed to realize it’s full potential. The NIST AI Risk Management Framework (AI RMF) was developed to manage the benefits and risks to individuals, organizations, and society associated with AI and covers a wide range of risk ranging from safety to lack of transparency and accountability.…
P0
2024-09-18 18:32 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Read up on the key cybersecurity terms and acronyms every security professional should know and understand.
P0
2024-09-18 18:25 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Grab some popcorn and hold onto your seats: we’re headed back to the dark web.
P0
2024-09-18 06:56 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
Investigations into recent campaigns may suggest the reemergence of TeamTNT in 2023 to present day, since evaporating in 2022.
P0
2024-09-17 00:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Threat actors have been successful in gaining entry using accounting software commonly used by construction companies.
P0
2024-09-16 17:49 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Uncover top cyber challenges for mid-sized businesses in 2023; from lack of time and skills, human vulnerabilities, and budget constraints.
P0
2024-09-16 06:55 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
Group-IB dark web investigations: To avoid prying eyes, find out how adversaries increasingly shift from the dark web to social media to execute attacks, leak credentials, share exploitable vulnerabilities, and more.
P0
2024-09-16 00:00 UTC
Other
Cloud Vuln DB · indexed 2026-09-07 17:30 UTC
Google Cloud Composer is a managed service for Apache Airflow. Tenable discovered that the Cloud Composer package was vulnerable to dependency confusion, which could have allowed attackers to inject malicious code when the package was compiled from source. This could have led to remote code execution on machines running Cloud Composer, which include various other GCP services as well as internal servers at Google. The dependency confusion stemmed from Google's risky recommendation in their docu…
P15
2024-09-16 00:00 UTC
Other
Cloud Vuln DB · indexed 2026-09-07 17:30 UTC
The Document AI service unintentionally allows users to read any Cloud Storage object in the same project, in a way that isn't properly documented. The Document AI service agent is auto-assigned with excessive permissions, allowing it to access all objects from Cloud Storage buckets in the same project. Malicious actors can exploit this to exfiltrate data from Cloud Storage by indirectly leveraging the service agent's permissions. This vulnerability is an instance of transitive access abuse, a …
P0
2024-09-15 00:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Biometrics: the hero and villain of cybersecurity. Discover how this cutting-edge tech boosts security while posing serious risks. Is it a game-changer or a ticking time bomb? Let’s break it down.
P0
2024-09-13 00:00 UTC
Other
Cloud Vuln DB · indexed 2026-09-07 17:30 UTC
A vulnerability in Azure API Management allowed users with Reader access to escalate privileges to Contributor level by accessing admin user keys via the ARM API. This permitted full management capabilities through the Direct Management API, including reading secrets and modifying configurations.
P0
2024-09-12 04:53 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
Discovered by Group-IB in May 2024, the Ajina.Banker malware is a major cyber threat in the Central Asia region, disguising itself as legitimate apps to steal banking information and intercept 2FA messages.
P0
2024-09-12 00:00 UTC
Other
Cloud Vuln DB · indexed 2026-09-07 17:30 UTC
A security flaw in AWS Transit Gateway Peering attachments allowed unauthorized acceptance of peering requests between regions. The exploit bypassed the approval step, granting potential unauthorized access to networks. AWS patched the issue on August 7, 2024, after being notified on July 25, 2024.
P0
