October 3, 2023 | By Your Name, Digital Security Editor In a striking reminder of the growing threat posed by cybercriminals, researchers revealed that hackers have successfully targeted the heating systems of a Ukrainian city using malware. This incident underscores the pressing need for enhanced digital security measures, especially when it comes to critical infrastructure… Continue reading Cyber Warfare: Malware Targets Critical Infrastructure in Ukraine
Category: Digital Security
Meta Faces E.U. Deadlines Over Controversial ‘Pay or Consent’ Model
In a significant turn of events for digital privacy advocates, Meta, the tech behemoth behind platforms like Facebook and Instagram, has been given a stringent deadline by the European Union (E.U.) to address concerns regarding its newly proposed data handling model dubbed ‘Pay or Consent.’ This approach raises fundamental questions about the way businesses monetize… Continue reading Meta Faces E.U. Deadlines Over Controversial ‘Pay or Consent’ Model
Securing Your Onboarding Process: Best Practices for Digital Security
By Your News Editor October 12, 2023 The Challenge of Digital Security in Employee Onboarding In today’s fast-paced digital landscape, the need for robust security practices has never been more critical. One of the most significant vulnerabilities organizations face is during the onboarding process of new employees. Typically, companies resort to sharing temporary passwords as… Continue reading Securing Your Onboarding Process: Best Practices for Digital Security
Magento Stores Under Siege: A Closer Look at Sneaky Credit Card Skimmers
Date: October 17, 2023 In a chilling reminder of the vulnerabilities that exist in the digital marketplace, a recent wave of attacks has targeted Magento e-commerce websites. Cybercriminals are deploying sophisticated credit card skimmers that masquerade as harmless files, utilizing a technique that experts are labeling as particularly insidious. It’s a stark warning: while e-commerce… Continue reading Magento Stores Under Siege: A Closer Look at Sneaky Credit Card Skimmers
Ukrainian Institutions Targeted by HATVIBE and CHERRYSPY Malware
In an alarming escalation of cyber threats, several Ukrainian institutions have become the focus of sophisticated cyber-attacks utilizing two formidable types of malware known as HATVIBE and CHERRYSPY. These malware programs pose significant risks not only to the integrity of sensitive data but also to the operational stability of essential services. What is HATVIBE? HATVIBE… Continue reading Ukrainian Institutions Targeted by HATVIBE and CHERRYSPY Malware
New ICS Malware ‘FrostyGoop’ Targeting Critical Infrastructure
In a recent escalation in the digital security landscape, a novel type of malware dubbed FrostyGoop has emerged, specifically targeting Industrial Control Systems (ICS) that are pivotal to our nation’s critical infrastructure. This alarming trend highlights the growing vulnerabilities within systems that manage essential services including power generation, water supply, and transportation. What Is FrostyGoop?… Continue reading New ICS Malware ‘FrostyGoop’ Targeting Critical Infrastructure
Chinese Hackers Target Taiwan and US NGOs with MgBot Malware
By Digital Security Insights Team In a concerning trend that underscores the growing threat of cyber espionage, Chinese hackers have intensified their focus on organizations in Taiwan and non-governmental organizations (NGOs) based in the United States. The malicious software used in these attacks is known as MgBot, a potent strain of malware that allows cybercriminals… Continue reading Chinese Hackers Target Taiwan and US NGOs with MgBot Malware
CVE-2024-6714: Understanding the Apache ProvD Setuid Privilege Escalation Vulnerability
Date: October 2023 Author: Digital Security News Editor What is CVE-2024-6714? CVE-2024-6714 is a critical vulnerability identified in Apache ProvD, a versatile process used in the Apache software suite for handling background tasks. This security flaw allows attackers to exploit the setuid feature—short for “set user ID”—to escalate their privileges, meaning they could potentially gain… Continue reading CVE-2024-6714: Understanding the Apache ProvD Setuid Privilege Escalation Vulnerability
CVE-2024-6793: Understanding the Deserialization Vulnerability
Published on October 23, 2023 In an increasingly digital world where data is currency, staying informed about vulnerabilities is paramount. Recently, a critical security flaw known as CVE-2024-6793 has come to the forefront, spotlighting the perils of deserialization of untrusted data. What Is Deserialization? To understand the threat posed by CVE-2024-6793, we first need to… Continue reading CVE-2024-6793: Understanding the Deserialization Vulnerability
The Importance of Digital Rights in the Age of Information: Advocating for Privacy, Security, and Access to Knowledge
As the digital landscape continues to evolve and increasingly becomes intertwined with our lives, the importance of digital rights cannot be overstated. These rights, which encompass privacy, security, and access to knowledge, are critical for the media industry and all individuals operating within the digital realm. This blog post will delve into these core principles of digital rights and their significance, and how organizations like Jidar are advocating for these rights to promote a secure, open, and equitable internet for all.