Tenable CEO Amit Yoran Dead at 54

Israeli entities spanning academia, engineering, local government, manufacturing, technology, transportation, and utilities sectors have emerged as the target of a new set of attacks undertaken by Iranian nation-state actors that have delivered a previously undocumented backdoor called MuddyViper. The activity has been attributed by ESET to a hacking group known as MuddyWater (aka Mango

Cybersecurity researchers are calling attention to a new type of credential phishing scheme that ensures that the stolen information is associated with valid online accounts. The technique has been codenamed precision-validating phishing by Cofense, which it said employs real-time email validation so that only a select set of high-value targets are served the fake login…

“LLMbotomy” research reveals how Trojans can be injected into Large Language Models, and how to disarm them.

Top Class Actions reports a settlement stemming from the Citrix Bleed” data breach it suffered in 2023. NOTE: You cannot sign up for a claim at this time. Nor can you sign up via DataBreaches.net. Wait for the official settlement site and follow the instructions on that site to find out if you are eligible……

On November 19, Salesforce posted a security advisory on its site: Security Advisory: Unusual Activity Related to Gainsight Applications Salesforce has identified unusual activity involving Gainsight-published applications connected to Salesforce, which are installed and managed directly by customers. Our investigation indicates this activity may have enabled unauthorized access to certain customers’ Salesforce data through the……

Corey Levitan reports: A teenage boy suspected of involvement in the 2023 cyberattacks that disrupted the two largest Las Vegas casino companies has surrendered to authorities, according to the Las Vegas Metropolitan Police Department (LVMPD). The suspect, whose name has not been released due to his status as a minor, is currently being held at……