27 Nov 2024
By Mary

InfoSec News Nuggets 11/27/2024

US government agencies told to patch these critical security flaws or face attack The US Cybersecurity and Infrastructure Security Agency (CISA) has added a new critical vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning federal agencies they have a three-week deadline to apply the available patch, or stop using the affected software altogether. The agency added a missing authentication vulnerability to KEV tracked under CVE-2023-28461, which has a severity score of 9.8, and allows…
Read More
23 Sep 2024
By Mary

InfoSec News Nuggets 9/23/2024

Hacker Claims “Minor” Data Breach at DELL; Leaks Over 10,000 Employee Details A hacker claims Dell suffered a “minor” breach, exposing over 10,000 employee records. The incident raises cybersecurity concerns amid ongoing threats targeting businesses by tricking employees into phishing and phone call scams. A hacker using the alias “grep” claims that the technology giant Dell has experienced a “minor” data breach, resulting in the theft of over ten thousand (10,863) employee records. This information…
Read More
11 May 2021
By Mary

InfoSec News Nuggets 05/11/2021

1 - Thousands of Tor exit nodes attacked cryptocurrency users over the past year For more than 16 months, a threat actor has been seen adding malicious servers to the Tor network in order to intercept traffic and perform SSL stripping attacks on users accessing cryptocurrency-related sites. The attacks, which began in January 2020, consisted of adding servers to the Tor network and marking them as “exit relays,” which are the servers through which traffic…
Read More