Critical Security Bug Opens Cisco BroadWorks to Complete Takeover

Cyberattackers could exploit CVE-2023-20238 to carry out a variety of nefarious deeds, from data theft and code execution to phishing, fraud, and DoS.

https://www.darkreading.com/vulnerabilit...e-takeover

3 Ways to Expand the Cyber Talent Pool From Splash Pad to Watering Hole

Why — and how — "unqualified" candidates will fill the reservoir with the security workers America is thirsty for.

https://www.darkreading.com/edge/3-ways-...ering-hole

New WiKI-Eve attack can steal numerical passwords over WiFi


A new attack dubbed 'WiKI-Eve' can intercept the cleartext transmissions of smartphones connected to modern WiFi routers and deduce individual numeric keystrokes at an accuracy rate of up to 90%, allowing numerical passwords to be stolen. [...]


https://www.bleepingcomputer.com/news/se...over-wifi/

'Redfly' hackers infiltrated power supplier's network for 6 months

An espionage threat group tracked as 'Redfly' hacked a national electricity grid organization in Asia and quietly maintained access to the breached network for six months. [...]


https://www.bleepingcomputer.com/news/se...-6-months/

J.D. Power to acquire European, Australian vehicle analytics provider Autovista Group

<p>Autovista will become J.D. Power's auto market intelligence platform for Europe and Australia; senior leadership, 700 employees will stay on.</p>

https://www.autonews.com/suppliers/jd-po...ista-group

Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild - Update

Google on Monday rolled out out-of-band security patches to address a critical security flaw in its Chrome web browser that it said has been exploited in the wild.
Tracked as CVE-2023-4863, the issue has been described as a case of heap buffer overflow that resides in the WebP image format that could result in arbitrary code execution or a crash.
Apple Security Engineering and Architecture (SEAR

https://thehackernews.com/2023/09/google...hrome.html

Beware: MetaStealer Malware Targets Apple macOS in Recent Attacks

A new information stealer malware called MetaStealer has set its sights on Apple macOS, making the latest in a growing list of stealer families focused on the operating system after Stealer, Pureland, Atomic Stealer, and Realst.
"Threat actors are proactively targeting macOS businesses by posing as fake clients in order to socially engineer victims into launching malicious payloads," SentinelOne

https://thehackernews.com/2023/09/beware...rgets.html

Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Cli

A sophisticated phishing campaign is using a Microsoft Word document lure to distribute a trifecta of threats, namely Agent Tesla, OriginBotnet, and OriginBotnet, to gather a wide range of information from compromised Windows machines.
"A phishing email delivers the Word document as an attachment, presenting a deliberately blurred image and a counterfeit reCAPTCHA to lure the recipient into

https://thehackernews.com/2023/09/sophis...paign.html

Chinese Redfly Group Compromised a Nation's Critical Grid in 6-Month ShadowPad Campa

A threat actor called Redfly has been linked to a compromise of a national grid located in an unnamed Asian country for as long as six months earlier this year using a known malware referred to as ShadowPad.
"The attackers managed to steal credentials and compromise multiple computers on the organization's network," the Symantec Threat Hunter Team, part of Broadcom, said in a report shared with

https://thehackernews.com/2023/09/chines...mised.html

7 Steps to Kickstart Your SaaS Security Program

SaaS applications are the backbone of modern businesses, constituting a staggering 70% of total software usage. Applications like Box, Google Workplace, and Microsoft 365 are integral to daily operations. This widespread adoption has transformed them into potential breeding grounds for cyber threats. Each SaaS application presents unique security challenges, and the landscape constantly evolves

https://thehackernews.com/2023/09/7-step...urity.html