Ever heard of a “pig butchering” scam? Or a DDoS attack so big it could melt your brain? This week’s cybersecurity recap has it all – government showdowns, sneaky malware,… Read More »THN Cybersecurity Recap: Top Threats and Trends (Sep 30 – Oct 6)
A critical security flaw has been disclosed in the Apache Avro Java Software Development Kit (SDK) that, if successfully exploited, could allow the execution of arbitrary code on susceptible instances.… Read More »Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications
Cybersecurity researchers have discovered a new botnet malware family called Gorilla (aka GorillaBot) that is a variant of the leaked Mirai botnet source code. Cybersecurity firm NSFOCUS, which identified the… Read More »New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries
The interest in passwordless authentication has increased due to the rise of hybrid work environments and widespread digitization. This has led to a greater need for reliable data security and… Read More »Modernization of Authentication: Webinar on MFA, Passwords, and the Shift to Passwordless
Europe’s top court has ruled that Meta Platforms must restrict the use of personal data harvested from Facebook for serving targeted ads even when users consent to their information being… Read More »E.U. Court Limits Meta’s Use of Personal Facebook Data for Targeted Ads
Apple has released iOS and iPadOS updates to address two security issues, one of which could have allowed a user’s passwords to be read out aloud by its VoiceOver assistive… Read More »Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability
Microsoft and the U.S. Department of Justice (DoJ) on Thursday announced the seizure of 107 internet domains used by state-sponsored threat actors with ties to Russia to facilitate computer fraud… Read More »U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown
A new high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable malicious actors to execute arbitrary JavaScript code under certain conditions. The flaw,… Read More »WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks
Cloudflare has disclosed that it mitigated a record-breaking distributed denial-of-service (DDoS) attack that peaked at 3.8 terabits per second (Tbps) and lasted 65 seconds. The web infrastructure and security company… Read More »Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors
Continuous Threat Exposure Management (CTEM) is a strategic framework that helps organizations continuously assess and manage cyber risk. It breaks down the complex task of managing security threats into five… Read More »How to Get Going with CTEM When You Don’t Know Where to Start