Meta warns that a WhatsApp vulnerability on Apple devices allowed hackers to target some users with zero-click spyware. WhatsApp describes the zero-day vulnerability as “incomplete authorization of linked device synchronization messages.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
WhatsApp told media outlets that it had "high confidence" that journalists and activists were targeted by Paragon spyware and that they were "possibly compromised." It did not provide names of people it believed to be compromised.”
The best way to ensure your business is prepared to face cybersecurity threats is to foster a culture of cybersecurity awareness. Convenience is not the same thing as laziness.
Tracking and managing digital certificates has become an overwhelming challenge. Here are four pillars of certificate automation designed to take enterprises from tactical to strategic certificate management.
The 'only install applications from a trusted source' mantra no longer holds true, as supply chain attacks bypass malware detection solutions and practices.
Hackers donated thousands of dollars in stolen Bitcoins to various charitable causes. While it's unclear what the true motives are, the donations will almost certainly be forfeit.
A recent survey by the SANS Research Program showed 58% of respondents identified IT compromises as a leading initial attack vector for ICS/OT incidents. This reflects the increasingly interconnected nature of IT and OT environments and highlights the risks associated with this convergence.
Security leaders often assume patching failures stem from technical limitations. In reality, many of the most disruptive patching delays originate from coordination breakdowns across teams, tools, and timelines.
Preloaded apps on current Lenovo, HP and Dell systems are found to have unique and serious security vulnerabilities that require end users to take extra steps to fix.
In military parlance, the phrase “when the balloon goes up” refers to the moment when hostilities with an adversary are imminent. The Chinese spy balloon that sailed over the continental United States signifies something different: a vast—and increasingly brazen—penetration of American networks and communications systems.










