Security News > 2024 > October

Emergency patch: Cisco fixes bug under exploit in brute-force attacks
2024-10-24 18:15

Who doesn't love abusing buggy appliances, really? Cisco has patched an already exploited security hole in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that...

Cisco fixes VPN DoS flaw discovered in password spray attacks
2024-10-24 18:06

Cisco fixed a denial of service flaw in its Cisco ASA and Firepower Threat Defense (FTD) software, which was discovered during large-scale brute force attacks against Cisco VPN devices in April. [...]

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics
2024-10-24 16:38

Cybersecurity researchers have discovered an advanced version of the Qilin ransomware sporting increased sophistication and tactics to evade detection. The new variant is being tracked by...

New Qilin ransomware encryptor features stronger encryption, evasion
2024-10-24 15:19

A new Rust-based variant of the Qilin (Agenda) ransomware strain, dubbed 'Qilin.B,' has been spotted in the wild, featuring stronger encryption, better evasion from security tools, and the ability...

Samsung Galaxy S24 and Sonos Era hacked on Pwn2Own Ireland Day 2
2024-10-24 14:01

On the second day of Pwn2Own Ireland 2024, competing white hat hackers showcased an impressive 51 zero-day vulnerabilities, earning a total of $358,625 in cash prizes. [...]

AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks
2024-10-24 13:00

Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services (AWS) Cloud Development Kit (CDK) that could have resulted in an account takeover under specific...

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack
2024-10-24 12:41

Cisco on Wednesday said it has released updates to address an actively exploited security flaw in its Adaptive Security Appliance (ASA) that could lead to a denial-of-service (DoS) condition. The...

What Is PCI Compliance? A Simple Guide for Businesses
2024-10-24 12:00

Safeguard your customers’ card data using these industry-standard security protocols.

Bitwarden's FOSS halo slips as new SDK requirement locks down freedoms
2024-10-24 11:36

Arguments continue but change suggests it's not Free Software anymore The Bitwarden online credentials storage service is changing its build requirements – which some commentators feel mean it's...

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA
2024-10-24 11:00

Sometimes, it turns out that the answers we struggled so hard to find were sitting right in front of us for so long that we somehow overlooked them. When the Department of Homeland Security,...