Apple Enhances macOS Security with Gatekeeper Update On Tuesday, Apple unveiled a significant update to its advanced macOS version, aiming to bolster security measures by tightening Gatekeeper protections. Gatekeeper plays a pivotal role in safeguarding macOS, allowing only verified applications to run on the system. This security feature becomes particularly active when users attempt to…
Napad TCP Flood Zadel Sisteme Windows 2012 V nedavno objavljeni novici na portalu Cyberpress.org so poročali o intenzivnem napadu TCP Flood, ki je prizadel računalniško infrastrukturo, temelječo na sistemih Windows 2012. Napad, ki je trajal več mesecev, je imel za posledico, da je bila mrežna aplikacija popolnoma nepraktična in skoraj neuporabna. Po navedbah portala z…
INTERPOL’s Global Stop-Payment Mechanism Thwarts BEC Scam INTERPOL has recently introduced a groundbreaking “global stop-payment mechanism” that played a pivotal role in the retrieval of funds in what is now known as the largest-ever recovery from a business email compromise (BEC) scam. The innovative mechanism came into play following an unfortunate incident where an undisclosed…
“`html Zgodovina in Opis Seks ključni skupina je razvila ločeno raširilo za operacijske sisteme Windows in Linux, kar predstavlja pomemben napredek in tudi potencialno tveganje za računalniško varnost uporabnikov. Doslej je bilo običajno, da so bila raširila razvita predvsem za en operacijski sistem, kar je omogočilo določenim uporabnikom, da so bili varni, če so uporabljali…
Opazili smo znatno povečanje skeniranja za ranljivost CVE-2017-9841, nadaljnje povečanje skeniranja za CVE-2023-1389 in skeniranje za novo odkrito ranljivost v PHP – CVE-2024-4577. V tem blogu bomo podrobneje raziskali te ranljivosti, njihovo zgodovino, vpliv ter kako se lahko zaščitimo pred njimi. Poleg tega bomo obravnavali, kako lahko F5 WAF (Web Application Firewall) uporabimo kot zaščito…
High-Severity Security Bypass Vulnerability Discovered in Rockwell Automation ControlLogix 1756 Devices A recent disclosure has shed light on a high-severity security bypass vulnerability present in Rockwell Automation ControlLogix 1756 devices. This vulnerability opens the door for potential exploitation, enabling threat actors to execute common industrial protocol (CIP) programming and configuration commands undetected. Vulnerability Details: CVE-2024-6242…
Cybersecurity Threat Alert: BlankBot Android Banking Trojan In the vast and intricate world of cybersecurity, a new threat has emerged that has caught the attention of researchers. Named BlankBot, this Android banking trojan has been specifically crafted to target users in Turkey, aiming to covertly steal sensitive financial information for nefarious purposes. The Modus Operandi…
Evasive Panda Strikes Again: Compromising ISP for Malicious Updates In a bold move showcasing their evolving sophistication, the China-linked threat actor, Evasive Panda, recently breached an undisclosed internet service provider (ISP) to distribute malicious software updates to target companies around mid-2023. This unsettling development sheds light on the group’s increasingly advanced tactics and highlights the…
V svetu kibernetske varnosti je nedavno prišlo do pomembnega dogodka, ki je pritegnil pozornost medijev in strokovnjakov. Podjetje je namreč plačalo rekordno odkupnino v višini 75 milijonov dolarjev skupini Dark Angels, kar je največja zabeležena odkupnina doslej. Ta dogodek ne le da postavlja nove mejnike v svetu izsiljevalske programske opreme (ransomware), temveč tudi odpira vprašanja…
“`html Masivna phishing kampanja prizadela uporabnike po vsem svetu V zadnjih dneh je bilo odkrito, da je v veliki meri napadalec izvedel masivno kampanjo phishinga, ki je vplivala na veliko število uporabnikov po vsem svetu. Napadalec je uporabljal podatke o uporabnikih, ki so bili zbirani s pomočjo nevarnih spletnih strani in e-poštnih napadov, da bi…