Aug 24, 2024 | Podcast
https://unit42.paloaltonetworks.com/github-repo-artifacts-leak-tokens A security vulnerability in GitHub Actions has exposed authentication tokens for multiple high-profile open-source projects, including those from Google, Microsoft, AWS, and Red Hat. These exposed...
Aug 23, 2024 | Podcast
https://static.flightaware.com/pdf/fa_data_notification.pdf Popular flight tracking platform FlightAware suffered a data breach due to a configuration error that left user information exposed from January 1, 2021, to July 25, 2024. The breach potentially exposed a...
Aug 22, 2024 | Podcast
2024 Crypto Crime Mid-year Update Part 1: Cybercrime Climbs as Exchange Thieves and Ransomware Attackers Grow Bolder Ransomware attacks are seeing a surge in profitability in 2024, with victims on track to pay a record-breaking $459.8 million in the first half of the...
Aug 21, 2024 | Podcast
https://www.linkedin.com/pulse/warning-microsoft-apps-macos-allows-hackers-spy-sgfwe Security researchers have discovered vulnerabilities in several popular Microsoft applications for macOS that could have allowed hackers to access your camera and microphone without...
Aug 20, 2024 | Speaking
Was a panelist speaker at the Future of Security event where we discussed the following: Achieving Cyber Resilience – Developing Preventative and Proactive Cyber Strategies in Financial Services Preventative Strategies: Acknowledging the inevitability of...
Aug 19, 2024 | Podcast
https://www.csoonline.com/article/3488207/aws-environments-compromised-through-exposed-env-files.html Researchers at Palo Alto Networks’ Unit 42 have uncovered a large-scale extortion campaign targeting AWS environments. Attackers exploited a common...
Aug 17, 2024 | Podcast
https://www.mobileguardian.com/security-incident-august-2024 Mobile Guardian, a company providing security software for educational institutions, has suffered a major data breach impacting students globally. The company confirmed unauthorized access to its platform...
Aug 16, 2024 | Podcast
https://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser Cybersecurity researchers have discovered a critical vulnerability affecting all major web browsers (Google Chrome, Mozilla Firefox, Apple Safari) that could allow malicious...
Aug 15, 2024 | Podcast
https://evolutionmining.com.au/storage/2024/08/2759355-Cyber-Security-Incident.pdf Evolution Mining, a major Australian gold producer, has been targeted by a ransomware attack impacting its IT systems. The company announced the incident on August 8th, 2024, and...
Aug 14, 2024 | Podcast
Trojan Infects 300,000 Chrome and Edge Users with Unremovable Extensions Cybersecurity firm ReasonLabs has uncovered a large-scale Trojan malware campaign targeting Google Chrome and Microsoft Edge users. The campaign, active since 2021, has affected over 300,000...