Aggregator

Hackers Targeted a PAN-OS Flaw Days After Its Disclosure
A suspected Chinese hacking campaign that began in November is exploiting a vulnerability in Palo Alto firewalls to install a custom malware backdoor for espionage. UNC5325 activity aligns with the Chinese hacking strategy of targeting edge devices.

Spend more on security! Car and truck dealers fall back on pen and paper as huge SaaS provider gets hacked (again).

The post Best of 2024: 30,000 Dealerships Down — ‘Ransomware’ Outage Outrage no. 2 at CDK Global appeared first on Security Boulevard.

Car and truck dealers fall back on pen and paper as huge SaaS provider gets hacked  (again).CDK

California has passed revolutionary legislation to regulate artificial intelligence, requiring companies to disclose training data and label AI-generated content. Starting 2026, these laws will transform how AI companies operate and how consumers interact with AI-generated materials.

The post California’s Pioneering AI Legislation: Shaping the Future of Artificial Intelligence appeared first on Security Boulevard.

Palo Alto, Calif., Dec. 30, 2024, CyberNewswire — SquareX, an industry-first Browser Detection and Response (BDR) solution, leads the way in browser security. About a week ago, SquareX reported large-scale attacks targeting Chrome Extension developers aimed at taking over … (more…)

The post News alert: SquareX exposes OAuth attack on Chrome extensions — days before a major breach first appeared on The Last Watchdog.

The post News alert: SquareX exposes OAuth attack on Chrome extensions — days before a major breach appeared first on Security Boulevard.

German prosecutors have charged three Russian-German nationals with spying for the Kremlin, accordi

Authors/Presenters: Matt Thomassen, Sean McKeever

Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – Warflying in a Cessna appeared first on Security Boulevard.

The messaging app Telegram has blocked access to channels belonging to major Russian state-owned ne

Threat actors are exploiting a post-authentication remote command injection vulnerability in

hello, i know that i'm not exactly in the right place in this subreddit, but unfortunately

Threat actors are exploiting a post-authentication remote command injection vulnerability in Four-Faith routers tracked as CVE-2024-12856 to open reverse shells back to the attackers. [...]

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Sun Avoidance’ appeared first on Security Boulevard.