Archive | Cyber Syrup

Apple Releases Security Updates for iOS, macOS, and More — Over 100 Vulnerabilities Fixed

Apple has released a significant wave of security updates across its platforms, addressing more than 100 vulnerabilities affecting iOS, macOS, and related operating systems

TEE.fail: New DDR5 Interposer Attack Against CPU Trusted Environments

Researchers from Purdue University and Georgia Institute of Technology disclosed a new hardware-focused attack method called TEE.fail that targets DDR5 memory

Google Chrome 142 Fixes 20 Security Vulnerabilities, Pays $130,000 in Bounties

Google awarded a total of $130,000 in bug bounty rewards to security researchers for responsibly disclosing issues

Ribbon Communications Confirms Cyberattack Linked to Suspected Nation-State Actor

Ribbon Communications, a U.S.-based provider of communications and networking technologies, has confirmed a cybersecurity breach that may have exposed limited customer data

Japan Issues Comprehensive OT Security Guidance for Semiconductor Industry

Japan’s Ministry of Economy, Trade and Industry (METI) has released an extensive operational technology (OT) cybersecurity guide for the semiconductor manufacturing sector.

Australian National Pleads Guilty to Selling U.S. Defense Cyber Exploits to Russian Broker

An Australian citizen has pleaded guilty in a U.S. federal court to stealing and selling classified cyber exploit technology from a defense contractor to a Russian broker

Surge in Automated Botnet Attacks Targeting PHP Servers, IoT Devices, and Cloud Gateways

Cybersecurity researchers have reported a significant rise in automated cyberattacks aimed at compromising PHP servers, Internet of Things (IoT) devices, and cloud infrastructure gateways

Herodotus: A New Android Banking Trojan Mimicking Human Behavior to Evade Detection

Cybersecurity researchers have uncovered a sophisticated new Android banking trojan known as Herodotus

Schneider Electric and Emerson Named in Oracle E-Business Suite Data Breach

Two industrial technology firms — Schneider Electric and Emerson — have been named by as victims in the widespread Oracle E-Business Suite exploitation campaign