Nicolás Correa

BBTok Abuses Legitimate Windows Utility Command Tool to Stay Undetected: Cybercriminals in Latin America have increased their use of phishing scams targeting business transactions and judicial-related matters.  By leveraging trust and fear, respectively, these attacks often involve malicious links or file attachments that lead to malware infections, which include common tactics like embedded links in emails directing users to fake websites and malicious PDF and […] The post BBTok Abuses Legitimate Windows Utility Command Tool to Stay Undetected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Genexus Protection Server 9.7.2.10 Unquoted Service Path: Genexus Protection Server version 9.7.2.10 suffers from an unquoted service path vulnerability.

Guardians of the Cloud: The Latest Security Findings https://lnkd.in/e__HjSQv This post was originally published here by  Juan Lugo . With the emergence of cloud adoption and BYOD in the workplace, companies are experiencing an overwhelming amount of data breaches. This is largely because they are not taking the appropriate steps to secure data in the cloud. As such, Bitglass conducted a survey with IT professionals from a leading cybersecurity community in order to uncover the state of security within organizations today. The results showed that the top three security priorities in the average enterprise are defending against malware, reaching regulatory compliance, and securing major apps in use. Additionally, 85% of […]

Data Breach Alert: ShinyHunters Strikes Again, Targeting Santander and Ticketmaster Santander has acknowledged a cyber attack by the ShinyHunters hacking group, impacting both employees and customers in Spain, Chile, and Uruguay. In a separate incident, ShinyHunters has been connected to a cyber attack on Ticketmaster, where customer data is reportedly sold on the dark web. Despite the data breach, Santander has reassured the public that no transactional or online banking information was exposed during the attack. As a precautionary measure, Ticketmaster users are strongly advised to change their account passwords in light of the security breach. #SantanderCyberAttack #ShinyHunters #DataBreach #BankSecurity #CustomerProtection #TicketmasterIncident #DarkWebSale #NoDataLeakage #PasswordChangeAdvice #CyberSecurity

The latest update for #getastra includes "Top #Cybersecurity Trends Shaping 2024" and "Stored XSS & Insecure File Upload In Cervantes Alpha 0.5". #webprotection #pentesting https://lnkd.in/e7GHcu6K

Malware Monday -password stealing via HDMI cables. Security researchers have uncovered a shocking new method that hackers can use to steal sensitive information, such as passwords, by eavesdropping on HDMI cables. This discovery is extremely concerning for computer users. In a recent study, researchers at Universidad de la República in Uruguay revealed a technique that utilizes artificial intelligence to decode electromagnetic emissions from HDMI connections and reconstruct what appears on a computer screen. By capturing the electromagnetic radiation emitted by HDMI cables with readily available software-defined radio equipment and employing deep learning algorithms to analyze these captured signals, the researchers were able to reconstruct text and images from a computer display with up to 70% accuracy. This accuracy is sufficiently high for attackers to comprehend passwords, sensitive data, or even encrypted communications displayed on a screen. Moreover, the team's AI system has significantly improved on previous eavesdropping attempts, reducing character error rates by over 60 percentage points. While similar vulnerabilities were previously known for older CRT monitors, the complexity of digital signaling used by modern HDMI connections was believed to make such attacks impractical. However, this new research demonstrates that AI can overcome these obstacles, potentially putting millions of computer users at risk. Thankfully, executing such an attack demands considerable technical expertise and specialized equipment. Nevertheless, the researchers warn that government agencies or corporations could be at higher risk from sophisticated attackers. To protect against this threat, cybersecurity experts advise being vigilant about your surroundings when working with sensitive information, particularly near windows or in public spaces. Additionally, using encrypted connections and refraining from displaying passwords on external monitors connected via HDMI can help mitigate risks. If you're looking for someone to help with your cyber security and to protect against future attacks look no further than Intelligent Performance. We can help with your IT protection, Construction and support needs. Contact us today at 01293 530683 or Info@intelligentperformance.co.uk

Changes to security personnel requirements and reporting - UNOS: Changes to security personnel requirements and reporting  UNOS #CyberSecurity #InfoSec #SecurityInsights

#HackingVillage 🔒 "Securing the Perimeter: A Deep Dive into Attack Surfaces, Ransomware Threats, and Insurance Issues", a talk highlighting the evolving landscape of #cyberthreats in 2024. 🗣️ Marc Rivero Lopez, Lead Security Researcher at Kaspersky, will discuss the sophistication of #ransomware attacks and their extensive impact across various sectors. Uncover the significance of cyber insurance in mitigating the financial and operational toll of these threats on organizations. 🚨 Navigate the complexities of ransomware and cyber risk management! 🔗 https://lnkd.in/d7vyafza #Cybersecurity #Ransomware #CyberInsurance #BCC24

We are sharing crucial information about a recent security vulnerability in GLPI, an open-source asset and IT management software. The identified vulnerability, tracked as CVE-2024-37148, poses a severe risk to organizations utilizing this software. This could lead to unauthorized access, data breaches, and system compromise. Stay informed and take necessary actions to secure your systems. Read the full post here: https://buff.ly/4bDs2sM. #CVE #cybersecurity #News

GLPI 10.x.x Remote Command Execution: GLPI versions 10.x.x suffers from a remote command execution vulnerability via the shell commands plugin.