Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild.
The high-severity vulnerability, tracked as CVE-2024-43047 (CVSS score: 7.8), has been described as a user-after-free bug in the Digital Signal Processor (DSP) Service that could lead to “memory corruption

The Hacker News – ​Read More

Southeast Asian cyber-fraud industry ‘outpacing’ law enforcement with new tools: UN

Transnational criminal groups in Southeast Asia are incorporating new tools like artificial intelligence and deepfake technology to expand their cyber fraud capabilities, the United Nations Office on Drugs and Crime said Monday.

The Record from Recorded Future News – ​Read More

Cyberattack on American Water Shuts Down Customer Portal, Halts Billing

American Water faces a cyberattack, disrupting its customer portal and billing operations. The company assures that water services…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

MoneyGram says hackers stole customers’ personal information and transaction data

The money transfer giant said hackers also stole some customer Social Security numbers during the September cyberattack.

© 2024 TechCrunch. All rights reserved. For personal use only.

Security News | TechCrunch – ​Read More

GorillaBot Goes Ape With 300K Cyberattacks Worldwide

Among those affected by all this monkeying around with DDoS in September were some 4,000 organizations in the US.

darkreading – ​Read More

American Water Confirms Hack: Customer Portal and Billing Services Suspended

The largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.

The post American Water Confirms Hack: Customer Portal and Billing Services Suspended appeared first on SecurityWeek.

SecurityWeek – ​Read More

Recently spotted Trinity ransomware spurs federal warning to healthcare industry

Trinity ransomware, which bears similarities to previously spotted strains known as 2023Lock and Venus, appears to be an immediate threat to healthcare entities, according to the Department of Health and Human Services’ cyber coordination office.

The Record from Recorded Future News – ​Read More

Timeline: Top 15 Notable Cyberattacks and Data Breaches

These 15 cyber attacks or data breaches impacted large swaths of users across the United States and changed what was possible in cybersecurity.

Security | TechRepublic – ​Read More

Salt Typhoon APT Subverts Law Enforcement Wiretapping: Report

The Chinese state-sponsored cyberattack threat managed to infiltrate the “lawful intercept” network connections that police use in criminal investigations.

darkreading – ​Read More

MFA Isn’t Failing, But It’s Not Succeeding: Why a Trusted Security Tool Still Falls Short

Multi-factor authentication is a necessary safeguard, but its limitations show why organizations can’t rely on it alone to prevent breaches.

The post MFA Isn’t Failing, But It’s Not Succeeding: Why a Trusted Security Tool Still Falls Short appeared first on SecurityWeek.

SecurityWeek – ​Read More