Security News

ALPHV ransomware claims loanDepot, Prudential Financial breaches
2024-02-16 23:46

The ALPHV/Blackcat ransomware gang has claimed responsibility for the recent network breaches of Fortune 500 company Prudential Financial and mortgage lender loanDepot. LoanDepot revealed on January 22 that at least 16.6 million people had their personal information stolen in the ransomware attack they confirmed on January 8, two days after disclosing it as a "Cyber incident" on January 6.

Friday Squid Blogging: Vegan Squid-Ink Pasta
2024-02-16 22:04

It is a simple idea but probably never seen before, since it is the opposite of what most people usually want: website owners want the most data they can get and players want to choose their username/avatar. In the context of privacy, doxing and child-friendly websites, I believe this is the least amount of players' information needed to keep a leaderboard interesting.

Wyze investigating 'security issue' amid ongoing outage
2024-02-16 21:42

Wyze Labs is investigating a security issue while experiencing a service outage that has been causing connectivity issues since this morning. "We are aware of an issue with our AWS partner which has impacted device connection and caused login difficulties. We are taking steps to mitigate the problem on our end as we work with AWS to resolve the issue," the company said.

OpenAI’s Sora Generates Photorealistic Videos
2024-02-16 21:37

OpenAI released on Feb. 15 an impressive new text-to-video model called Sora that can create photorealistic or cartoony moving images from natural language text prompts. Sora isn't available to the public yet; instead, OpenAI released Sora to red teamers - security researchers who mimic techniques used by threat actors - to assess possible harms or risks.

Okta vs. Microsoft Entra ID (Azure Active Directory) 2024: IAM Software Comparison
2024-02-16 20:56

This all makes IAM solutions critical to any modern business, and two popular options in that category are Okta and Microsoft Entra ID. Okta vs. Microsoft Entra ID: Comparison. Entra ID Free Entra ID P1 Entra ID P2 Entra ID Governance Free $6.00 per user, per month $9 per user, per month $7 per user, per month Identity governance.

SolarWinds fixes critical RCE bugs in access rights audit solution
2024-02-16 18:32

SolarWinds has patched five remote code execution flaws in its Access Rights Manager solution, including three critical severity vulnerabilities that allow unauthenticated exploitation.Access Rights Manager allows companies to manage and audit access rights across their IT infrastructure to minimize insider threat impact and more.

What Is a Passphrase? Examples, Types & Best Practices
2024-02-16 17:22

A passphrase functions as a password, granting you access to a system or application, but instead of a string of random characters, it's a combination of words, numbers and symbols. In this article, we provide examples of passphrases and discuss the different types and best practices for using them for personal or business-related accounts.

Zeus, IcedID malware kingpin faces 40 years in slammer
2024-02-16 16:39

Vyacheslav Igorevich Penchukov, 37, pleaded guilty to two counts related to his leadership role in both the Zeus and IcedID malware operations this week, netting millions of dollars in the process. Penchukov first became involved in the Zeus banking trojan as early as May 2009 but was only arrested over a decade later in Geneva, Switzerland in 2022.

Alpha ransomware linked to NetWalker operation dismantled in 2021
2024-02-16 16:07

Security researchers analyzing the Alpha ransomware payload and modus operandi discovered overlaps with the now-defunct Netwalker ransomware operation. The Alpha ransomware operation emerged in February 2023 but kept a low profile, didn't promote on hacker forums, nor did its operators carry out many attacks.

CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability
2024-02-16 15:42

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched security flaw impacting Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)...