SuperCISO

Remote desktop connections are so powerful a magnet for hackers that an exposed connection can average more than 37,000 times every day from various IP addresses. buff.ly/3NpLlgm @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso #compliance #RDP

A widespread brand impersonation campaign targeting over a hundred popular apparel, footwear, and clothing brands, tricking people into entering their account credentials and financial information on fake websites. buff.ly/3N7l98Y @superciso #ciso #cybersecurity #security

Microsoft is adding native support for RAR, 7-Zip, and GZ archives to an upcoming version of Windows 11. Having native support for these file formats will be very useful for Windows users. buff.ly/3ICCXrn @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso

Facebook's parent company Meta has been fined a record $1.3 billion by European Union data protection regulators for transferring the personal data of users in the region to the U.S. buff.ly/45njWCK @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso

CISA warned today of a security vulnerability affecting #Samsung devices used in attacks to bypass Android address space layout randomization (ASLR) protection. buff.ly/3WrkELq @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso #compliance #dataprotection

Why High Tech Companies Struggle with SaaS #Security. The majority of data breaches impacting tech companies stem from stolen credentials and tokens. The threat actor enters the system through the front door, using valid credentials of the user. buff.ly/3MrS7BS @superciso

Several security vulnerabilities have been disclosed in cloud management platforms of three industrial cellular router vendors that could expose operational #technology (OT) networks to external attacks. buff.ly/45dlrDI @superciso #ciso #cybersecurity #security

One of #WordPress's most popular #Elementor plugins, "Essential Addons for Elementor," was found to be vulnerable to an unauthenticated privilege escalation that could allow remote attacks to gain administrator rights on the site. buff.ly/3o0O9GS @superciso #vciso

#FBI and #CISA issued a joint advisory to warn that the Bl00dy #Ransomware gang is now also actively exploiting a #PaperCut remote-code execution vulnerability to gain initial access to networks. buff.ly/3BnAiNW @superciso #cybersecurity #security #infosec #riskigy #vciso

The Cybersecurity and Infrastructure Security Agency (CISA) warned today of a critical remote code execution (RCE) flaw in the #Ruckus Wireless Admin panel actively exploited by a recently discovered DDoS botnet. buff.ly/41yjv5F @superciso #ciso #cybersecurity #vciso

Microsoft has released security updates to address a Secure Boot zero-day vulnerability exploited by BlackLotus UEFI malware to infect fully patched Windows systems. buff.ly/44ICeOC @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso #compliance #defender

MageCart skimmers are now hijacking legitimate online store's payment pages. #Hackers are hijacking online stores to display modern, realistic-looking fake payment forms to steal credit cards from unsuspecting customers. buff.ly/41Z9u28 @superciso #ciso #cybersecurity

#VMware released security updates to address #zeroday vulnerabilities that could be chained to gain code execution systems running unpatched versions of the company's Workstation and Fusion software hypervisors. buff.ly/3mVlkvi @superciso #ciso #cybersecurity #security

Google obtained a temporary court order in the U.S. to disrupt the distribution of a Windows-based information-stealing malware called CryptBot and "decelerate" its growth. buff.ly/3oJguBD @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso #compliance

The CFPB said an employee forwarded the personal information of more than a quarter-million consumers to a personal email account, an incident that the bureau described as a “major” breach. buff.ly/422Ps6O @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso

Researchers have disclosed details of a now-patched #zeroday flaw in Google Cloud Platform #GCP that could have enabled threat actors to conceal an unremovable, malicious application inside a victim's #Google account. buff.ly/3Nl1wMH @superciso #vciso #cybersecurity

A nation-state group has previously employed #ScreenConnect, #RemoteUtilities, and Syncro, a new analysis from Group-IB has revealed the adversary's use of the #SimpleHelp remote support software in June 2022. buff.ly/3UKxvY8 @superciso #vciso #cybersecurity #security

Microsoft reminded customers today that multiple editions of Windows 10, version 21H2, will reach the end-of-service (EOS) in two months, on June 13, 2023. buff.ly/3K92UOU @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso #compliance #dataprotection

British IT outsourcing services provider #Capita announced that a #cyberattack prevented access to its internal Microsoft Office 365 applications. buff.ly/434VXHE @superciso #ciso #cybersecurity #security #infosec #riskigy #vciso #compliance #dataprotection #regulation

#Hackers are adding malicious functionality to #WinRAR and 7-Zip self-extracting archives that contain harmless decoy files, allowing them to plant backdoors without triggering the #security agent on the target system. buff.ly/3Kwbhps @superciso #ciso #cybersecurity