Month: December 2024

 Thomas Cook (India) Ltd, a leading travel services provider, has fallen victim to a cyber attack targeting its IT infrastructure, the company announced on Tuesday. The breach has led to…

 It has been discovered that over 3.3 million POP3 and a similar number of IMAP services are operating without the necessary encryption protocols, leaving usernames and passwords vulnerable to interception.…

AI tools will enable significant productivity and efficiency benefits for organizations in the coming year, but they also will exacerbate privacy, governance, and security risks. Read More  

The U.S. Department of Justice (DoJ) has issued a final rule carrying out Executive Order (EO) 14117, which prevents mass transfer of citizens' personal data to countries of concern such as China (including Hong Kong and Macau), Cuba, Iran, North Korea, Russia, and Venezuela. "This final rule is a crucial step forward in addressing the extraordinary national security threat posed of our

 Cloudflare, a leader in Internet performance and security, has unveiled a powerful new open-source tool named h3i, designed to enhance testing and debugging for the HTTP/3 protocol. Built as part of…

 A newly discovered vulnerability in Veritas/Arctera Data Insight software (versions 7.1 and prior) highlights a significant security concern, allowing attackers to execute arbitrary SQL commands on the application’s back-end database.…

 Harley-Davidson, the iconic American motorcycle manufacturer, has reportedly fallen victim to a significant data breach orchestrated by a cybercriminal group known as “888.” According to alarming claims made on the…

The United States Treasury Department said it suffered a "major cybersecurity incident" that allowed suspected Chinese threat actors to remotely access some computers and unclassified documents.  "On December 8, 2024, Treasury was notified by a third-party software service provider, BeyondTrust, that a threat actor had gained access to a key used by the vendor to secure a cloud-based

Cybersecurity researchers have uncovered three security weaknesses in Microsoft's Azure Data Factory Apache Airflow integration that, if successfully exploited, could have allowed an attacker to gain the ability to conduct various covert actions, including data exfiltration and malware deployment. "Exploiting these flaws could allow attackers to gain persistent access as shadow administrators

 Cisco has confirmed the authenticity of a 4.45GB data leak posted online by the hacker known as IntelBroker. The leaked files, released on December 25, 2024, via BreachForums, are part…

 A Chinese state-sponsored hacker has successfully breached the US Treasury Department’s systems, gaining access to employee workstations and unclassified documents, American officials revealed on Monday. The intrusion occurred in early…

In what's being called a 'major cybersecurity incident,' Beijing-backed adversaries broke into cyber vendor BeyondTrust to access US Department of Treasury workstations and steal unclassified data, according to a letter…

 In the ongoing battle against cyber threats, the Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical vulnerability in Palo Alto Networks’ PAN-OS software that could leave enterprise firewalls…