InfosSec Watchtower

06/12/2024

GitHub Surpasses $4 Million in Bug Bounty Payouts






https://infosecwatchtower.com/articles/github-surpasses-4-million-in-bug-bounty-payouts.html

06/11/2024

Apple Addresses First Vision Pro-Specific Vulnerability



https://infosecwatchtower.com/articles/apple-addresses-first-vision-pro-specific-vulnerability.html

06/10/2024

Nvidia Releases Critical Security Updates for GPU Drivers and vGPU Software



https://infosecwatchtower.com/articles/nvidia-releases-critical-security-updates-for-gpu-drivers-and-vgpu-software.html

05/31/2024

Critical WordPress Plugin Vulnerabilities Exploited to Create Rogue Admin Accounts






https://infosecwatchtower.com/articles/critical-wordpress-plugin-vulnerabilities-exploited-to-create-rogue-admin-accounts.html

05/21/2024

Cybercriminals Exploit Foxit PDF Reader Flaw to Spread Malware and Evade Detection



https://infosecwatchtower.com/articles/cybercriminals-exploit-foxit-pdf-reader-flaw-to-spread-malware-and-evade-detection.html

05/14/2024

Google Issues Emergency Patches for Actively Exploited Chrome Zero-Day Vulnerability



https://infosecwatchtower.com/articles/google-issues-emergency-patches-for-actively-exploited-chrome-zero-day-vulnerability.html

05/13/2024

MITRE Corporation Launches EMB3D






https://infosecwatchtower.com/articles/mitre-corporation-launches-emb3d.html

05/09/2024

Polish Government Targeted by Russian-Linked APT28 in Sophisticated Malware Campaign






https://infosecwatchtower.com/articles/polish-government-targeted-by-russian-linked-apt28-in-sophisticated-malware-campaign.html

05/02/2024

FTC Charges Ring with Privacy Violations, Orders Sweeping Security Overhauls and Consumer Refunds






https://infosecwatchtower.com/articles/ftc-charges-ring-with-privacy-violations-orders-sweeping-security-overhauls-and-consumer-refunds.html

05/01/2024

UK Sets Global Precedent with New Smart Device Security Law Banning Default Passwords

The UK

04/30/2024

Securing Operational Technology: Balancing Cybersecurity with Real-World Efficiency

Operational Technology (OT) encompasses the various hardware and software systems used to interact with and control physical processes and devices within enterprises. Distinct from conventional Information Technology (IT), OT has the unique ability to affect the physical world directly, thus bringin...

04/30/2024

New U.S. Guidelines to Fortify Critical Infrastructure Against AI Threats

The U.S. government recently introduced a new set of security guidelines specifically designed to protect critical infrastructure from emerging threats linked to artificial intelligence (AI). This initiative, as announced by the Department of Homeland Security (DHS), leverages a comprehensive, gover...

04/26/2024

Elaborate Cyber Attack by Lazarus Group Uses Job Lures to Deploy Kaolin RAT in Asia

In the summer of 2023, a North Korea-associated cyber group known as Lazarus Group launched a sophisticated cyber attack targeting individuals in Asia. The attack involved the distribution of a new type of malware, the Kaolin RAT, hidden within deceptive job offer lures—a tactic the group has perf...

04/24/2024

Microsoft Warns of APT28 Exploiting Print Spooler Flaws to Deploy GooseEgg Malware in Global Cyberattacks

A cyberespionage collective with ties to Russia, known as APT28, has been exploiting vulnerabilities in Windows Print Spooler to deploy a specialized hacking tool across various entities in the US, Ukraine, and Western Europe, according to insights from Microsoft.

04/23/2024

Colorado Expands Privacy Laws to Protect Brainwave Data from Neurotech Devices

Using biometric security like fingerprint and face recognition is now commonplace, but what about technology that dives deeper, tapping into your brainwaves? With neurotech wearables, that

04/23/2024

Rising Cyber Threats: The Shift to Edge Device Exploits and the Challenges of Incident Response

Mandiant Consulting traced a sophisticated cyberattack back to an edge device within a client

04/23/2024

German Authorities Arrest Three for Alleged Espionage on Behalf of China

German officials have initiated legal action against three of their nationals for allegedly engaging in espionage activities on behalf of China, according to the Federal Prosecutor

04/23/2024

Balancing Act: Navigating the Privacy and Security Implications of End-to-End Encryption

European law enforcement officials have recently voiced concerns about the implications of end-to-end encryption (E2EE) on public safety, citing potential risks to their partnerships with the tech industry. They