Critical Cisco ISE Vulnerabilities Allow Remote Code Execution 

Two critical vulnerabilities in Cisco ISE could allow remote attackers to execute arbitrary code with root privileges.

The post Critical Cisco ISE Vulnerabilities Allow Remote Code Execution  appeared first on SecurityWeek.

SecurityWeek – ​Read More

Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across Africa

Cybersecurity researchers are calling attention to a series of cyber attacks targeting financial organizations across Africa since at least July 2023 using a mix of open-source and publicly available tools to maintain access.
Palo Alto Networks Unit 42 is tracking the activity under the moniker CL-CRI-1014, where “CL” refers to “cluster” and “CRI” stands for “criminal motivation.”
It’s suspected

The Hacker News – ​Read More

Protecting Business Data From Unauthorized Encryption Threats

Your business operates in an online environment where unauthorized encryption of data isn’t just possible, it’s probable. The…

Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – ​Read More

CISA Adds 3 Flaws to KEV Catalog, Impacting AMI MegaRAC, D-Link, Fortinet

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three security flaws, each impacting AMI MegaRAC, D-Link DIR-859 router, and Fortinet FortiOS, to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The list of vulnerabilities is as follows –

CVE-2024-54085 (CVSS score: 10.0) – An authentication bypass by spoofing

The Hacker News – ​Read More

Critical Citrix NetScaler Flaw Exploited as Zero-Day

Citrix has released patches for a critical vulnerability in NetScaler ADC and NetScaler Gateway exploited as a zero-day.

The post Critical Citrix NetScaler Flaw Exploited as Zero-Day appeared first on SecurityWeek.

SecurityWeek – ​Read More

Charming Kitten APT Tries Spying on Israeli Cybersecurity Experts

Israel’s cyber pros are having to put theory into practice, as a notorious nation-state APT sponsored by Iran targets them with spear-phishing attacks.

darkreading – ​Read More

WhatsApp Adds AI-Powered Message Summaries for Faster Chat Previews

Popular messaging platform WhatsApp has added a new artificial intelligence (AI)-powered feature that leverages its in-house solution Meta AI to summarize unread messages in chats.
The feature, called Message Summaries, is currently rolling out in the English language to users in the United States, with plans to bring it to other regions and languages later this year.
It “uses Meta AI to

The Hacker News – ​Read More

‘They’re Not Breathing’: Inside the Chaos of ICE Detention Center 911 Calls

Records of hundreds of emergency calls from ICE detention centers obtained by WIRED—including audio recordings—show a system inundated by life-threatening incidents, delayed treatment, and overcrowding.

Security Latest – ​Read More

And Now Malware That Tells AI to Ignore It?

Though rudimentary and largely non-functional, the wryly named “Skynet” binary could be a harbinger of things to come on the malware front.

darkreading – ​Read More

Millions of Brother Printers Hit by Critical, Unpatchable Bug

A slew of vulnerabilities, including a critical CVSS 9.8 that enables an attacker to generate the default admin password, affect hundreds of printer, scanner, and label-maker models made by manufacturer Brother.

darkreading – ​Read More