Google Chrome emergency update fixes 6th zero-day exploited in 2023


Google has fixed the sixth Chrome zero-day vulnerability this year in an emergency security update released today to counter ongoing exploitation in attacks. [...]


https://www.bleepingcomputer.com/news/se...d-in-2023/

New BLUFFS attack lets attackers hijack Bluetooth connections

Researchers at Eurecom have developed six new attacks collectively named 'BLUFFS' that can break the secrecy of Bluetooth sessions, allowing for device impersonation and man-in-the-middle (MitM) attacks. [...]


https://www.bleepingcomputer.com/news/se...nnections/

Exploited Vulnerabilities Can Take Months to Make KEV List

The Known Exploited Vulnerabilities (KEV) catalog is a high-quality source of information on software flaws being exploited in the wild, but updates are often delayed, which means companies need other sources of threat intelligence.


https://www.darkreading.com/vulnerabilit...e-kev-list

CISA Launches Pilot Program to Address Critical Infrastructure Threats

CISA expects to extend this program to include up to 100 critical infrastructure entities in its first year.


https://www.darkreading.com/ics-ot-secur...re-threats

Amid Military Buildup, China Deploys Mustang Panda in the Philippines

China pairs cyber and kinetic attacks in the South Pacific as it continues to wrangle control of the South China Sea.


https://www.darkreading.com/cyberattacks...hilippines

Major Saudi University to Offer AI, Cybersecurity Studies

University of Jeddah partners with Resecurity to teach cybersecurity skills.


https://www.darkreading.com/cybersecurit...ty-studies

GenAI Requires New, Intelligent Defenses

Understanding the risks of generative AI and the specific defenses to build to mitigate those risks is vital for effective business and public use of GenAI.


https://www.darkreading.com/application-...t-defenses

Maximize Cybersecurity Returns: 5 Key Steps to Enhancing ROI

Cybersecurity isn't a one-time task. It's an ongoing effort that needs regular checks, updates, and teamwork.


https://www.darkreading.com/cyber-risk/m...ancing-roi

What Healthcare Cybersecurity Leaders Should Know About the FDA's Section 524B Guide

New cybersecurity regulations from the FDA outline specific steps that medical device companies must take in order to get their devices approved for market. 


https://www.darkreading.com/cloud-securi...guidelines

Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Ta

BOSTON, MASS. and TEL AVIV, ISRAEL, November 28, 2023 – A severe design flaw in…

Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Takeover, Says Cybersecurity Company Hunters on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.