MOVEit auth bypass flaws quietly fixed - Open-source Rafel RAT leveraged by threat actors to compromise Android devices

New security loophole allows spying on internet users' online activity -

July 1, 2024 View in your browser. Help Net Security weekly newsletter Meet Your SLTT's Cybersecurity Needs with Vetted, Cost-Effective Solutions  U.S. State, Local, Tribal, and Territorial (SLTT) entities like yours need to make the most of their limited cybersecurity budgets. With CIS CyberMarket, you gain access to vetted solutions tailored to you and available at a negotiated price point.  Get Started Today   Latest news: Guide to mitigating credential stuffing attacks CISOs' new ally: Qualys CyberSecurity Asset Management 3.0 Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets Androids CISOs becoming more comfortable with risk levels Leveraging AI and automation for enhanced security operations Web scraping is not just a security or fraud problem New infosec products of the week: June 28, 2024 Largest Croatian hospital under cyberattack PoC exploit for critical Fortra FileCatalyst flaw published (CVE-2024-5276) US offers $10 million for information on indicted WhisperGate malware suspect Gitleaks: Open-source solution for detecting secrets in your code New ransomware, infostealers pose growing risk in 2024 75% of new vulnerabilities exploited within 19 days Enterprises increasingly turn to cloud and AI for database management Malware peddlers experimenting with BPL sideloading and masking malicious payloads as PGP keys Developer errors lead to long-term exposure of sensitive data in Git repos Compromised plugins found on WordPress.org Cybersecurity jobs available right now: June 26, 2024 Future trends in cyber warfare: Predictions for AI integration and space-based operations B+ security rating masks healthcare supply chain risks Progress quietly fixes MOVEit auth bypass flaws (CVE-2024-5805, CVE-2024-5806) Ransomware disrupts Indonesia's national data centre, LockBit gang claims US Federal Reserve breach New security loophole allows spying on internet users' online activity Zeek: Open-source network traffic analysis, security monitoring Breaking down the numbers: Q2 2024 cybersecurity funding activity recap Open-source Rafel RAT steals info, locks Android devices, asks for ransom Why are threat actors faking data breaches? 1 out of 3 breaches go undetected Cracking down on cybercrime: Who you gonna call? Videos: Enterprises increasingly turn to cloud and AI for database management Securing the video market: From identification to disruption Industry news: USX Cyber GUARDIENT helps MSPs protect their clients Lastwall Quantum Shield delivers protection against Q-Day threats Datadog LLM Observability secures generative AI applications Lattice launches two solutions to help users stay ahead of cyberthreats Cofense enhances PhishMe to identify engagement and resilience gaps across all employee levels ARMO launches behavioral-based cloud detection and response Kivu Consulting introduces CyberCertainty Managed XDR Grammarly delivers enhanced security and control features for safer AI use eSentire introduces MDR for GenAI Visibility Provenir's AI-powered risk decisioning platform increases fraud detection Enzoic appoints Kristen Ranta Haikal Wilson as CEO Copyright © 2024 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list