CyberSecurity Updates

The vision behind Starmus – A Q&A with the festival’s co-founder Garik Israelian

Video Dr. Israelian talks about Starmus’s vision and mission, the importance of inspiring and engaging audiences, and the strong sense of community within the Starmus universe 23 Apr 2024 In this exclusive interview, we delve into the heart of the Starmus Festival with Dr. Garik Israelian, an astrophysicist and the visionary force behind the festival. Join us as Dr. Israelian shares his views about Starmus’s vision and mission, the importance of inspiring and engaging audiences,…

Read More

How technology drives progress – A Q&A with Nobel laureate Michel Mayor

Join us as we speak to the Nobel Prize-winning astronomer Michel Mayor about the intersection of technology and scientific discovery, the art of making science accessible to all, and the imperative of nurturing environmental stewardship among the youth. In this short video, Professor Mayor offers his quick takes on: the role of technology in driving scientific progress strategies for communicating complex scientific concepts to the broader public fostering a sense of responsibility among the youth…

Read More

Cisco Releases Security Updates Addressing ArcaneDoor, Vulnerabilities in Cisco Firewall Platforms

Today, Cisco released security updates to address ArcaneDoor—exploitation of Cisco Adaptive Security Appliances (ASA) devices and Cisco Firepower Threat Defense (FTD) software. A cyber threat actor could exploit vulnerabilities (CVE-2024-20353, CVE-2024-20359, CVE-2024-20358) to take control of an affected system.  Cisco has reported active exploitation of CVE 2024-20353 and CVE-2024-20359 and CISA has added these vulnerabilities to its Known Exploited Vulnerabilities Catalog.  CISA strongly encourages users and administrators to apply the necessary updates, hunt for any malicious activity,…

Read More

eXotic Visit campaign: Tracing the footprints of Virtual Invaders

ESET researchers have discovered an active espionage campaign targeting Android users with apps primarily posing as messaging services. While these apps offer functional services as bait, they are bundled with open-source XploitSPY malware. We have named this campaign eXotic Visit and have tracked its activities from November 2021 through to the end of 2023. The targeted campaign has been distributing malicious Android apps through dedicated websites and, for some time, through the Google Play store…

Read More

How often should you change your passwords?

Digital Security And is that actually the right question to ask? Here’s what else you should consider when it comes to keeping your accounts safe. Phil Muncaster 03 Apr 2024  •  , 5 min. read Much has been made over the past few years about the growing potential in passwordless authentication and passkeys. Thanks to the near-ubiquity of smartphone-based facial recognition, the ability to log into your favorite apps or other services by looking into…

Read More

Russian FSB Counterintelligence Chief Gets 9 Years in Cybercrime Bribery Scheme

The head of counterintelligence for a division of the Russian Federal Security Service (FSB) was sentenced last week to nine years in a penal colony for accepting a USD $1.7 million bribe to ignore the activities of a prolific Russian cybercrime group that hacked thousands of e-commerce websites. The protection scheme was exposed in 2022 when Russian authorities arrested six members of the group, which sold millions of stolen payment cards at flashy online shops…

Read More

Giving NIST Digital Identity Guidelines a Boost: Supplement for Incorporating Syncable Authenticators

We all need supplements sometimes. Whether it’s a little extra vitamin C during flu season or some vitamin D during the dark days of Winter. When used correctly, supplements help our body adjust to the changing conditions around us. Similarly, we are applying this same concept for the first time to our NIST SP 800-63B, Digital Identity Guidelines: Authentication and Lifecycle Management. Today, we published a supplement that provides interim guidance for agencies seeking to…

Read More

7 reasons why cybercriminals want your personal data

Whenever we’re online, we leave a trail of data behind. As our lives are increasingly intertwined with digital technology, our digital footprints continue to grow larger. Some pieces of data that we generate, such as when posting on social media or purchasing products online, could hold immense value to cybercriminals lurking in the shadows of the internet. Meanwhile, data breaches and leaks remain rampant while cybercriminals hone their craft to exploit the treasure troves of…

Read More

Malware hiding in pictures? More likely than you think

Malware, Digital Security There is more to some images than meets the eye – their seemingly innocent façade can mask a sinister threat. Márk Szabó 02 Apr 2024  •  , 4 min. read Cybersecurity software has grown quite capable of detecting suspicious files, and with businesses becoming increasingly aware of the need to up their security posture with additional layers of protection, subterfuge to evade detection has become necessary. In essence, any cybersecurity software is…

Read More

The devil is in the fine print – Week in security with Tony Anscombe

Video Temu’s cash giveaway where people were asked to hand over vast amounts of their personal data to the platform puts the spotlight on the data-slurping practices of online services today 05 Apr 2024 Temu, the popular China-based online marketplace, recently launched a promotion where people received cash in exchange for new sign-ups that involved handing over vast amounts of their personal data, including their ‘voice’ and ‘biographical information’. Many people bagged Temu’s offer and…

Read More