Wednesday, January 1, 2025

Security News Bundle.

"News 'doubleclicking' exploit bypasses clickjacking protections o major websites."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 01 January 2025, 2236 UTC.

Content and Source:  Security News Bundle-a compilation of top security information from https://feedly.com.

 https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

22

Most popular

New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections on Major Websites

6 TTPs
•
74The Hacker News / 7h
•
DoubleClickjacking exploits user interactions
Threat hunters have disclosed a new "widespread timing-based vulnerability class" that leverages a double-click sequence to facilitate clickjacking attacks and account takeovers in almost all major websites. The technique has been codenamed DoubleClickjacking by security researcher Paulos Yibelo. "Instead of relying on a single click, it takes advantage of a double-click sequence," Yibelo said.

Proposed updates to HIPAA Security Rule mandate to restore the loss of certain relevant electronic information systems and data within 72 hours

HIPAA to receive cybersecurity updates
•
Security Affairs / 3h
HHS OCR proposed updates to the HIPAA Security Rule to boost cybersecurity for electronic protected health information (ePHI). On December 27, 2024, the United States Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) proposed updates to the HIPAA Security Rule to enhance cybersecurity for electronic protected health information (ePHI). The proposed updates to the Securi

Today

U.S. Treasury sanctions Russian and Iranian entities for interfering in the presidential election

US sanctions Iranian Russian entities
•
Security Affairs / 8h
The U.S. Treasury sanctioned entities for disinformation tied to Russian and Iranian intelligence before the 2024 presidential elections. The U.S. Treasury sanctioned entities for spreading disinformation linked to Russian and Iranian intelligence ahead of the 2024 presidential elections . The U.S. Treasury sanctioned Moscow’s Center for Geopolitical Expertise (CGE), founded by OFAC-designated Al

Iranian and Russian Entities Sanctioned for Election Interference Using AI and Cyber Tactics

3 TTPs
•
75The Hacker News / 10h
•
US sanctions Iranian Russian entities
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) on Tuesday leveled sanctions against two entities in Iran and Russia for their attempts to interfere with the November 2024 presidential election. The federal agency said the entities – a subordinate organization of Iran's Islamic Revolutionary Guard Corps and a Moscow-based affiliate of Russia's Main Intelligence

Yesterday

Rhode Island ’s data from health benefits system leaked on the dark web

4 TTPs
•
Security Affairs / 1d
•
HealthSource RI extends call center hours
Rhode Island ’s health benefits system was hacked, and threat actors leaked residents’ data on the dark web. Cybercriminals leaked data stolen from Rhode Island ‘s health benefits system on the dark web . Gov. Daniel McKee stated the state had prepared for this and is informing impacted individuals. RIBridges supports state programs like Medicaid, SNAP, Rhode Island Works, childcare assistance, l

Hacking campaign compromised at least 16 Chrome browser extensions

14 TTPs
•
Security Affairs / 1d
•
Cyberhaven Chrome extension compromised attack
Threat actors compromised at least 16 Chrome browser extensions leading to the exposure of data from over 600,000 users. A supply chain attack compromised 16 Chrome browser extensions, exposing over 600,000 users. Threat actors targeted the publishers of the extensions on the Chrome Web Store via phishing messages, then once obtained access to their account inserted a malicious code into the code

New U.S. DoJ Rule Halts Bulk Data Transfers to Adversarial Nations to Protect Privacy

US final rule protects personal data
•
94The Hacker News / 1d
The U.S. Department of Justice (DoJ) has issued a final rule carrying out Executive Order (EO) 14117, which prevents mass transfer of citizens' personal data to countries of concern such as China (including Hong Kong and Macau), Cuba, Iran, North Korea, Russia, and Venezuela. "This final rule is a crucial step forward in addressing the extraordinary national security threat posed of our

Dec 30, 2024

China-linked actors hacked US Treasury Department

Security Affairs / 1d
China-linked threat actors breached the U.S. Treasury Department by hacking a remote support platform used by the agency. China-linked threat actors breached the U.S. Treasury Department via a compromised remote support platform. The Treasury Department discovered the security breach on December 8th from its vendor BeyondTrust , according to a letter to lawmakers. BeyondTrust provides Privileged

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation

6 TTPs
•
65The Hacker News / 1d
Cybersecurity researchers have uncovered three security weaknesses in Microsoft's Azure Data Factory Apache Airflow integration that, if successfully exploited, could have allowed an attacker to gain the ability to conduct various covert actions, including data exfiltration and malware deployment. "Exploiting these flaws could allow attackers to gain persistent access as shadow administrators

End of feed

at No comments:
Labels:

ZDNet | Security.

"7 rules to follow before installing a home security camera and where you should never put one."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 01 January 2025, 1500 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.zdnet.com%2Fblog%2Fsecurity%2Frss

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

ZDNet | Security

154K followers76 articles per week#security#tech
12

Most popular

Yesterday

End of feed

at No comments:
Labels:
Subscribe to: Posts (Atom)

ZDNet | Security.

"It's official:  All your Office apps are getting AI and a price increase." Views expressed in this cybersecurity, cyber crime...

  • The Cyberwire Daily Briefing
    "Fortinet confirms breach of customer data." Views expressed in this cybersecurity, cyber crime update are those of the reporters ...
  • Cyber War News Today.
    "International Defence Cooperation:  A key to regional stability." Views expressed in this cybersecurity, cyber espionage, and cyb...
  • SecurityWeek Briefing
    "New RAMBO attack allows air-gapped data theft." Views expressed in this cybersecurity, cyber crime update are those of the report...