Popular streaming media platform Plex is scrambling to reset user passwords after a database hack that included the theft of emails, usernames, and encrypted passwords.
Class Action Lawsuit Filed Against Oracle Over Data Collection Practices
A class action lawsuit filed against Oracle on Friday in the Northern District of California claims that the tech giant has built a worldwide surveillance machine.
Security Pros Believe Cybersecurity Now Aligned With Cyberwar
More than three-quarters of security professionals in large organizations believe the world is now in a state of perpetual cyberwar – and 82% consider that geopolitics and cybersecurity are fundamentally linked.
Over 80,000 Unpatched Hikvision Cameras Exposed to Takeover
Cybersecurity firm Cyfirma has identified more than 80,000 Hikvision cameras that haven’t been patched against a critical code execution vulnerability exploited in the wild.
IBM Patches Severe Vulnerabilities in MQ Messaging Middleware
IBM this week announced patches for high-severity vulnerabilities in IBM MQ, warning that attackers could exploit them to bypass security restrictions or access sensitive information.
French Hospital Diverts Patients Following Cyberattack
French hospital Center Hospitalier Sud Francilien (CHSF) has fallen victim to a cyberattack that took down most of its IT network.
CHSF is located near Paris, has roughly 1,000 beds, and employs over 3,500 professionals, serving tens of thousands of patients per year, with hundreds of emergencies passing through the hospital’s emergency room each day.
Old, Inconspicuous Vulnerabilities Commonly Targeted in OT Scanning Activity
Data collected by IBM shows that old and inconspicuous vulnerabilities affecting industrial products are commonly targeted in scanning activity seen by organizations that use operational technology (OT). SecurityWeek has talked to several experts to find out what this data means and determine the threat posed by these security holes.
Privilege Escalation Flaw Haunts VMware Tools
Virtualization technology software giant VMware on Tuesday released patches to fix an important-severity security flaw in the VMware Tools suite of utilities.
The vulnerability, tracked as CVE-2022-31676, could be exploited by attackers to escalate privileges on a compromised system.
Ethernet LEDs Can Be Used to Exfiltrate Data From Air-Gapped Systems
A researcher from the Ben-Gurion University of the Negev in Israel has published a paper describing a method that can be used to silently exfiltrate data from air-gapped systems using the LEDs of various types of networked devices.
GitLab Patches Critical Remote Code Execution Vulnerability
DevOps platform GitLab has issued patches for a critical remote code execution vulnerability impacting its GitLab Community Edition (CE) and Enterprise Edition (EE) releases.
Tracked as CVE-2022-2884 (CVSS 9.9/10 severity), the security flaw can be exploited via the GitHub import API, but requires authentication to be triggered.
