The Cybersecurity Digest
The Cybersecurity Digest
✓

Outlook C2 Framework, VMWare ESXi Vuln, and PKFail leads to UEFI Supply Chain Attacks.

00:24:03
Podcasts
RSS
Link

TIETOJA TÄSTÄ JAKSOSTA

Security Digest for 30 July 2024:

Podcast Requested Feedback: https://forms.gle/w2RB5DRzbbvu3ziS7

Notable News:

WhatsApp for Windows lets Python, PHP scripts execute with no warning (bleepingcomputer.com)

PKfail: Untrusted Platform Keys Undermine Secure Boot on UEFI Ecosystem (binarly.io)
SupplyChainAttacks/PKfail/ImpactedDevices.md at main · binarly-io/SupplyChainAttacks · GitHub

Malicious Python Package Targets macOS Developers (checkmarx.com)

SeleniumGreed Cryptomining Campaign Exploiting Grid Services | Wiz Blog

Scammer Abuses Microsoft 365 Tenants, Relaying Through Proofpoint Servers to Deliver Spam Campaigns | Proofpoint US

HealthEquity says data breach impacts 4.3 million people (bleepingcomputer.com)

Two-Step Phishing Campaign Exploits Microsoft Office Forms (perception-point.io)

Over 1 Million websites are at risk of sensitive information leakage (salt.security)

TrustedSec | Specula - Turning Outlook Into a C2 With One Registry…

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption | Microsoft Security Blog
Support Content Notification - Support Portal - Broadcom support portal

Prevalent Patches:
Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB) - July 2024 | NVIDIA (custhelp.com)

Apple security releases - Apple Support

CISA Corner:
NVD - CVE-2024-4879  (nist.gov)
NVD - CVE-2024-5217 (nist.gov)
NVD - CVE-2023-45249 (nist.gov)
Siemens SICAM Products | CISA
Positron Broadcast Signal Processor | CISA

Tekniikkauutisia
Uutiset
Tekniikka
Englanti
Yhdysvallat
KäytäAPI:tä tämän jakson hakemiseenJSON:ssä

TÄSSÄ EPISODISSA

Muokkaa näitä tunnisteita

TRANSKRIPTIO 🔗

Are you the producer of this podcast? Add a podcast transcript
Need Audio-to-Text? Transcribe with Listen411 in Just 60 Seconds

HAE EDELLISIÄ EPISODEJA

Hae kanavan The Cybersecurity Digest vanhoja jaksoja.
Upota tämä hakupalkki verkkosivustollesi

MUITA jaksoja TÄSSÄ PODCASTISSA

CrowdStrike Catastrophe, GTA6 Beta Scam, and FractalID Data Breach

CrowdStrike Catastrophe, GTA6 Beta Scam, and FractalID Data Breach

Cybersecurity Digest for 22 July 2024 Today we discuss the following items: Crowdstrike Issue: Falcon Content Update Remediation and Guidance Hub | CrowdStrike Helping our customers through the CrowdStrike outage - The Official Microsoft Blog New Recovery Tool to help with CrowdStrike issue imp…
00:15:51
JAA
TALLENNA
AT&T Data Leak, Millions of Email Servers Vulnerable, and Disney's Slack Leaked?

AT&T Data Leak, Millions of Email Servers Vulnerable, and Disney's Slack Leaked?

Today’s Episode Topics for 15 July 2024 AT&T Data Leaks 70%+ of public facing servers could be Vulnerable Apple warns iPhone customers of spyware in certain countries Netgear patches a Stored XSS Vulnerability A look at CrystalRay RiteAid hit with a data breach Disney’s Internal Slack p…
00:12:20
JAA
TALLENNA
Cybersecurity Digest for week of 12 July 2024

Cybersecurity Digest for week of 12 July 2024

This week we talk about  Microsoft patches 140+ vulnerabilities including 2 zero days, in Patch Tuesday; Adobe patches critical issues in several of its products, 10 Billion Passwords leaked, 39,000 Ticket master tickets leaked, Chinese APT 40 hiijack routers Hackers are Targeting Wordpre…
00:12:27
JAA
TALLENNA
MuddyWater’s Cyber Onslaught, AT&T Pays, Trello Leak, and Sys01 Malvertising Campaign

MuddyWater’s Cyber Onslaught, AT&T Pays, Trello Leak, and Sys01 Malvertising Campaign

Cybersecurity Digest for 17 July 2024: Today we discuss: MuddyWater’s Latest Cyber Onslaught and a sneaky backdoor! AT&T Pays Hackers – Was it Worth it? An Update on RiteAid’s Data Breach SEXi Ransomware group rebrands…. Meet APT INC! mSpy Breach SYS01 Stealer Malware: Malvertising acro…
00:15:16
JAA
TALLENNA
Chrome Vulns, Cisco Catastrophes, and Ransomware Revelations: Your Friday Cybersecurity Digest

Chrome Vulns, Cisco Catastrophes, and Ransomware Revelations: Your Friday Cybersecurity Digest

Cybersecurity Digest for 19 July 2024: Today we discuss:   Yet Another Chrome Vulnerability Dual Critical Cisco Vulnerabilities; Including A Max Severity Vulnerability Life360 Data Breach Ivanti EMM Vulnerability New Novel Email Vulnerabilites\ A Report on Fin7 SOC Radar’s Global Ransomw…
00:16:50
JAA
TALLENNA
Vastuuvapautusilmoitus: Tälle sivulle upotettu podcast ja kuvitus ovat peräisin The Cybersecurity Digest LLC:ltä, joka on sen omistajan omaisuutta, eikä se ole sidoksissa Listen Notes, Inc:n tukemaan.
PROMOTED
We’re selling some of our podcast-related domain names, including breaker.fm, Podcast.mov, and Listen.Host. Place your bid on eBay.
We’re selling some of our podcast-related domain names, including breaker.fm, Podcast.mov, and Listen.Host. Place your bid on eBay.
Bid on eBay

SUOSITUKSET
Käytä API:a tämän episodin hakemiseen