June, 2023

• 30 June

  MITRE releases new list of top 25 most dangerous software bugs

  

  MITRE, a non-profit organization that provides research and development in the areas of cybersecurity and information assurance, has released its list of the top 25 most dangerous software weaknesses. The list is based on data from the Common Vulnerabilities and Exposures (CVE) database, which is a repository of known security …

  Read More »
• 29 June

  Saudi Arabia’s Cyber Capabilities Ranked Second Globally

  

  The Kingdom of Saudi Arabia has been ranked second in the Global Cybersecurity Index in the World Competitiveness Yearbook for 2023. The index is compiled by the International Institute for Management Development (IMD) and assesses the cybersecurity capabilities of 63 economies around the world. Saudi Arabia’s strong performance in the …

  Read More »
• 29 June

  Daily Cybersecurity Update, June-28, 2023

  

  In January, Atlantic General Hospital underwent a ransomware attack that compromised the PHI of thousands of people. However, according to the latest revelations, the actual number is five times greater than the initially disclosed one. In other news, the LetMeSpy Android stalkerware got hacked, exposing user information. Coming to the …

  Read More »
• 29 June

  Submarine Cables at Growing Risk of Cyber-Attacks

  

  Insikt Group research examines the complex and dynamic risk environment of submarine cables, the information superhighways that underpin the global economy and facilitate worldwide telecommunications. The rapid expansion of the submarine cable network in the 21st century, driven by data demands, cloud computing, and the needs of hyperscalers like Amazon, …

  Read More »
• 29 June

  Oracle’s AI to revolutionize human resources software

  

  Oracle Corp announced on Wednesday that it will add generative AI features to its human resources software. The new features will help businesses draft job descriptions and employee performance goals, among other tasks. Generative AI systems like ChatGPT have become popular in recent years, but some businesses have been hesitant …

  Read More »
• 29 June

  Ireland: Draconian law to make data protection procedures confidential

  

  Ahead of a discussion in the Oireachtas (Irish parliament) today on a proposed amendment to a bill that would allow the Irish Data Protection Commission (DPC) to label all matters before it as confidential, Rasha Abdul-Rahim, Programme Director at Amnesty Tech, said: “The government’s attempt to allow the Irish Data …

  Read More »
• 28 June

  IBM QRadar SIEM Users at Risk of XSS Attack and Information Disclosure

  

  IBM QRadar is a popular SIEM (Security Incident and Event Management) tool that organizations use to detect and monitor threats. It can be used in the form of a physical appliance, a software-only solution, or a virtual appliance. As of 2023, over 1,130 companies worldwide use IBM QRadar as part …

  Read More »
• 28 June

  Cisco AsyncOS Software Flaw Let Remote Hackers Launch XSS Attack

  

  Cisco AsyncOS Software, used by Cisco Secure Email and Web Manager, Cisco Secure Email Gateway (previously Cisco Email Security Appliance; ESA), and Cisco Secure Web Appliance (WSA), has multiple flaws in its web-based management interface. The vulnerabilities could allow a remote attacker to launch cross-site scripting (XSS) attack against a …

  Read More »
• 27 June

  Daily Cybersecurity Update, June 27, 2023

  

  Local government bodies across the U.S. are facing the wrath of growing cyber intrusions. The latest such victim is a Texan city that suffered a data breach affecting half a million government files. Meanwhile, the Cl0p ransomware continued to claim more victims of MOVEit Transfer zero-day exploitation, this time including …

  Read More »
• 27 June

  Two big energy giant hit by cyber attack, who are in list next?

  

  Petro-Canada gas stations, following a cyberattack on parent company Suncor: Suncor is a Canada-based energy company that owns a network of more than 1,800 Petro-Canada retail and wholesale locations. On June 25, Suncor said it had experienced a cybersecurity incident that may impact some transactions with suppliers and customers. The …

  Read More »