Industrial giants Siemens and Schneider Electric have addressed less than a dozen vulnerabilities in their August 2022 Patch Tuesday advisories, far fewer than in most of the previous months.
Black Hat 2022: Ten Presentations Worth Your Time and Attention
LAS VEGAS – The security industry makes its annual pilgrimage to the hot Sonoran desert this week for skills training, hacking demos, research presentations and cybersecurity vendors showing off shiny new products.
IBM Patches High-Severity Vulnerabilities in Cloud, Voice, Security Products
IBM on Monday announced patches for multiple high-severity vulnerabilities impacting products such as Netezza for Cloud Pak for Data, Voice Gateway, and SiteProtector.
US Sanctions Crypto ‘Laundering’ Service Tornado
The United States placed sanctions Monday on Tornado Cash, a leading “crypto mixer” for transactions in virtual currency that US officials describe as a hub for laundering stolen funds, including by North Korean hackers.
Open Redirect Flaws in American Express and Snapchat Exploited in Phishing Attacks
Open redirect vulnerabilities affecting American Express and Snapchat websites were exploited earlier this year as part of phishing campaigns targeting Microsoft 365 users, email security firm Inky reports.
Twilio Hacked After Employees Tricked Into Giving Up Login Credentials
Enterprise software vendor Twilio (NYSE: TWLO) has been hacked by a relentless threat actor who successfully tricked employees into giving up login credentials that were then used to steal third-party customer data.
7-Eleven Closes Stores in Denmark After Hacker Attack
US convenience store chain, 7-Eleven, said Monday that it had closed its outlets in Denmark after a suspected hacker attack knocked out their cash tills.
Meta Disrupted Two Cyberespionage Operations in South Asia
Facebook’s parent company Meta took action earlier this year against two cross-platform cyberespionage operations that relied on various online services for malware distribution.
HYAS Unveils New Tool for Continuous DNS Monitoring
Canadian security firm HYAS Infosec has released a new DNS protection tool dubbed HYAS Confront that was designed to provide clear visibility into DNS transactions into production networks.
Cyberspying Aimed at Industrial Enterprises in Russia and Ukraine Linked to China
A recent cyberespionage operation aimed at industrial enterprises and public institutions in Eastern Europe and Afghanistan has been linked to a threat actor that is likely sponsored by the Chinese government.
