Security News
Critical Bugs in Canon Small Office Printers Allow Code Execution, DDoS
A grouping of serious printer bugs, unveiled at last summer's Pwn2Own, were patchless for months, but are finally fixed now.
Dark Reading
7 Feb 2024 1009 Views
Deepfake colleagues trick HK clerk into paying HK$200m
A clerk working for the Hong Kong branch of a multinational company gave HK$200 million of the firm's money to fraudsters after being tricked into joining a video conference where all the other participants were AI-generated deepfakes, police said on Sunday. [...
RTHK
7 Feb 2024 1104 Views
Fortinet FortiSIEM Hit by Two 10/10 Severity Vulnerabilities
The FortiSIEM product from Fortinet has been found to have two new critical vulnerabilities, CVE-2024-23108 and CVE-2024-23109, which allow for remote code execution by unauthenticated attackers.
Cyware News
7 Feb 2024 655 Views
Ivanti devices hit by wave of exploits for latest security hole
At this point you might be better off just shutting the stuff down
Various miscreants are attempting to exploit the latest Ivanti flaw, a server-side request forgery (SSRF) vulnerability tracked as CVE-2024-21893 that can be used to hijack equipment....
The Register
6 Feb 2024 3755 Views
Microsoft Outlook December updates trigger ICS security alerts
Microsoft is investigating an issue that triggers Outlook security alerts when trying to open .ICS calendar files after installing December 2023 Patch Tuesday Office security updates. [...]
Bleepingcomputer
6 Feb 2024 872 Views
Deepfake scammer walks off with $25 million in first-of-its-kind AI heist
Hong Kong firm tricked by simulation of multiple real people in video chat, including voices.
Ars Technica
5 Feb 2024 3567 Views
Clorox says cyberattack caused $49 million in expenses
Clorox has confirmed that a September 2023 cyberattack has so far cost the company $49 million in expenses related to the response to the incident. [...]
Bleepingcomputer
4 Feb 2024 1058 Views
AnyDesk Hacked: Popular Remote Desktop Software Mandates Password Reset
Remote desktop software maker AnyDesk disclosed on Friday that it suffered a cyber attack that led to a compromise of its production systems. The German company said the incident, which it discovered following a security audit, is not a ransomware attack and that it has notified relevant...
The Hacker News
3 Feb 2024 895 Views
More Android apps riddled with malware spotted on Google Play
An Android remote access trojan (RAT) known as VajraSpy was found in 12 malicious applications, six of which were available on Google Play from April 1, 2021, through September 10, 2023. [...]
Bleepingcomputer
2 Feb 2024 1062 Views
Hackers push USB malware payloads via news, media hosting sites
A financially motivated threat actor using USB devices for initial infection has been found abusing legitimate online platforms, including GitHub, Vimeo, and Ars Technica, to host encoded payloads embedded in seemingly benign content. [...]
Bleepingcomputer
1 Feb 2024 674 Views
