Cybersecurity

Source: www.infosecurity-magazine.com – Author: 1 A new phishing kit dubbed Tycoon 2FA has raised significant concerns in the cybersecurity community.  Discovered by the Sekoia Threat Detection & Research (TDR) team in October 2023 and discussed in an advisory published today, the kit is associated with the Adversary-in-The-Middle (AiTM) technique and allegedly utilized by multiple threat […]

cross-posted from: https://lemmy.world/post/13547352

cross-posted from: https://lemmy.ml/post/13524329

Part 1: https://venturebeat.com/security/security-expert-chris-krebs-on-tiktok-ai-and-the-key-to-survival/ Part 2: https://venturebeat.com/security/security-expert-chris-krebs-on-tiktok-ai-and-the-key-to-survival-part-2/

cross-posted from: https://lemmy.world/post/13478707

Kimsuky shifts tactics, now using CHM files to deliver malware, targeting sensitive data globally.

German authorities shut down Nemesis Market, an underground marketplace for drugs, stolen data, and cybercrime services.

New AcidPour variant can attack a significantly broader range of targets including IoT devices, storage area networks, and handhelds.

Microsoft has released emergency out-of-band (OOB) updates to fix a known issue causing Windows domain controllers to crash after installing the March 2024 Windows Server security updates.

CVE-2024-29943: Out-of-bounds access via Range Analysis bypass CVE-2024-29944: Privileged JavaScript Execution via Event Handlers

The parent company of British Airways and Iberia on Thursday said in an email sent to Air Europa’s consumer base that the data breach exposed names, birthdays, nationalities, ID cards or passport information and phone numbers of customers.