Blog – Page 1129 – Cyber Mike

Mozilla Faces Privacy Complaint for Enabling Tracking in Firefox Without User Consent

Vienna-based privacy non-profit noyb (short for None Of Your Business) has filed a complaint with the Austrian data protection authority (DPA) against Firefox maker Mozilla for enabling a new feature called Privacy Preserving Attribution (PPA) without explicitly seeking users’ consent.
“Contrary to its reassuring name, this technology allows Firefox to track user behavior on websites,” noyb said

AI Security Firm Shows How Threat Actors Could Abuse Google Gemini for Workspace

HiddenLayer has discovered that Google Gemini for Workspace is prone to indirect prompt injection attacks.

The post AI Security Firm Shows How Threat Actors Could Abuse Google Gemini for Workspace appeared first on SecurityWeek.

Hacker Conversations: Joe Grand – MischiefMaker, TroubleMaker, Teacher

Joe Grand is the epitome of a hacker. Childhood curiosity followed by mischief-making tipping over into illegal behavior before developing into a responsible good faith hacker.

The post Hacker Conversations: Joe Grand – MischiefMaker, TroubleMaker, Teacher appeared first on SecurityWeek.

DefectDojo Raises $7 Million for Application Security Platform

Application security and vulnerability management platform DefectDojo has raised $7 million in Series A funding.

The post DefectDojo Raises $7 Million for Application Security Platform appeared first on SecurityWeek.

Cybersecurity Researchers Warn of New Rust-Based Splinter Post-Exploitation Tool

Cybersecurity researchers have flagged the discovery of a new post-exploitation red team tool called Splinter in the wild.
Palo Alto Networks Unit 42 shared its findings after it discovered the program on several customers’ systems.
“It has a standard set of features commonly found in penetration testing tools and its developer created it using the Rust programming language,” Unit 42’s Dominik

Researcher Says Healthcare Facility’s Doors Hackable for Over a Year

A researcher analyzing building access control vulnerabilities says a US healthcare facility has yet to patch security holes one year after being notified.

The post Researcher Says Healthcare Facility’s Doors Hackable for Over a Year appeared first on SecurityWeek.

CISA Releases Anonymous Threat Response Guidance and Toolkit for K-12 Schools

India-Linked Hackers Targeting Pakistani Government, Law Enforcement

The India-linked threat actor SloppyLemming has been targeting government, law enforcement, and other entities in Pakistan.

The post India-Linked Hackers Targeting Pakistani Government, Law Enforcement appeared first on SecurityWeek.

Second Pwn2Own Automotive Contest Offers Over $1 Million in Prizes

ZDI offers over $1 million in cash and prizes at the next Pwn2Own Automotive hacking contest, set for January 2025 in Tokyo.

The post Second Pwn2Own Automotive Contest Offers Over $1 Million in Prizes appeared first on SecurityWeek.

Third Recent Ivanti Vulnerability Exploited in the Wild

CVE-2024-7593 is the third Ivanti product vulnerability patched in recent months that has been exploited in the wild.

The post Third Recent Ivanti Vulnerability Exploited in the Wild appeared first on SecurityWeek.

Cyber News