PAM Provider Delinea Acquires Israeli Startup Authomize

The integration of Authomize’s cross-cloud identity capabilities into Delinea’s platform will enable customers to detect and mitigate active identity threats across various applications and infrastructure.

Cyware News – Latest Cyber News – ​Read More

SEC Twitter Hacked to Push Fake News of Bitcoin ETF Approval

The incident highlights concerns over the security of the SEC’s social media accounts and the need for better protections against market manipulation through false tweets.

Cyware News – Latest Cyber News – ​Read More

Microsoft January 2024 Patch Tuesday Fixes 49 Flaws, 12 RCE Bugs

Microsoft’s January 2024 Patch Tuesday includes security updates for 49 flaws and 12 remote code execution vulnerabilities. Two critical vulnerabilities were fixed, including a Windows Kerberos Security Feature Bypass and a Hyper-V RCE.

Cyware News – Latest Cyber News – ​Read More

Vulnerabilities Found in High-Power Bosch Wrenches Popular With Carmakers

The vulnerabilities in the wrenches could lead to production line stoppages, causing large-scale financial losses, and enable malicious actors to introduce sub-optimal tightening or excessive damage.

Cyware News – Latest Cyber News – ​Read More

CISA Flags 6 Vulnerabilities – Apple, Apache, Adobe , D-Link, Joomla Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
This includes CVE-2023-27524 (CVSS score: 8.9), a high-severity vulnerability impacting the Apache Superset open-source data visualization software that could enable remote code execution.

The Hacker News – ​Read More

Microsoft’s January 2024 Windows Update Patches 48 New Vulnerabilities

Microsoft has addressed a total of 48 security flaws spanning its software as part of its Patch Tuesday updates for January 2024.
Of the 48 bugs, two are rated Critical and 46 are rated Important in severity. There is no evidence that any of the issues are publicly known or under active attack at the time of release, making it the second consecutive Patch Tuesday with no zero-days.
The

The Hacker News – ​Read More

SEC Chair Says Account on X Was Hacked

The SEC said that a post on X, announcing that the securities regulator had approved the trading of exchange-traded funds holding bitcoin was fake, and that the agency’s account had been “compromised.”

The post SEC Chair Says Account on X Was Hacked appeared first on SecurityWeek.

SecurityWeek – ​Read More

The SEC’s Official X Account Was ‘Compromised’ and Used to Post Fake Bitcoin News

The US financial regulator says its official @SECGov account was “compromised,” resulting in an “unauthorized” post about the status of Bitcoin ETFs.

Security Latest – ​Read More

Path Traversal Bug Besets Popular Kyocera Office Printers

A printer bug could lead to much worse, in IT networks without proper segmentation.

darkreading – ​Read More

Patch Now: Critical Windows Kerberos Bug Bypasses Microsoft Security

A second, easy-to-exploit critical security vulnerability in Microsoft’s first 2024 Patch Tuesday allows RCE within Hyper-Virtualization.

darkreading – ​Read More