Security Leftovers

posted by Roy Schestowitz on Jun 12, 2023

• 2023-06-08 [Older] How a carmaker’s mistake created the ultimate internet challenge

• 2023-06-08 [Older] VMware Releases Security Update for Aria Operations for Networks

• 2023-06-08 [Older] VMware Releases Security Update for Aria Operations for Networks

• 2023-06-08 [Older] CISA Releases Two Industrial Control Systems Advisories

• 2023-06-08 [Older] Atlas Copco Power Focus 6000

• 2023-06-08 [Older] ​Sensormatic Electronics Illustra Pro Gen 4

• 2023-06-07 [Older] CISA Adds One Known Exploited Vulnerability to Catalog

• 2023-06-07 [Older] CISA and FBI Release #StopRansomware: CL0P Ransomware Gang Exploits MOVEit Vulnerability

• 2023-06-06 [Older] CISA and Partners Release Joint Guide to Securing Remote Access Software

• 2023-06-06 [Older] CISA Releases Two Industrial Control Systems Advisories

• 2023-06-06 [Older] Delta Electronics CNCSoft-B DOPSoft

• 2023-06-06 [Older] Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series

• 2023-06-05 [Older] CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Bishop Fox’s Vinnie Liu talks offensive security skills

  There is growing demand for offensive security testing, but it needs a multi-layered skillset that can be hard to quantify. Bishop Fox’s CEO and co-founder explains why and some potential mitigation strategies

• Singapore regulator decision reminds entities of duty to monitor vendors

  On May 11, the Singapore Personal Data Protection Commission (PDPC) issued a decision involving Kingsforce Management Services Pte Ltd.

  On January 31, 2022, the firm had notified the PDPC that on or about December 27, 2021, data from its jobseeker database had been seen for sale on RAIDForums. According to the decision released by the PDPC, that database held approximately 54,900 jobseeker datasets, comprising name, address, email address, telephone number, date of birth, job qualifications, last and expected salary, highest qualification, and other data related to job searches.

  Outdated website coding technology, with critical vulnerabilities, was determined by external investigators to be the cause of the Incident.

• Two arrested following warrants as part of cyber investigation

  Two people have been arrested in connection with an investigation into cyber offences following warrants executed yesterday (8/6).

  A 28-year-old man and a 23-year-old woman, both from Camarthenshire, were arrested after South East Regional Organised Crime Unit (SEROCU) officers carried out warrants at addresses in Bletchley, Buckinghamshire and Newcastle Emlyn, Wales.

• Ukrainian hackers take down service provider for Russian banks

  A group of Ukrainian hackers known as the Cyber.Anarchy.Squad claimed an attack that took down Russian telecom provider Infotel JSC on Thursday evening.

  Among other things, Moscow-based Infotel provides connectivity services between the Russian Central Bank and other Russian banks, online stores, and credit institutions.