@Grid32InfoSec

Penetration testing services from the industry experts. #infosec #cybersecurity

 Jersey City, NJ
grid32.com
Joined October 2013
  • Tweets7.3K
  • Following0
  • Followers6.5K
Microsoft ties executive pay to security following multiple failures and breaches | Ars Technica arstechnica.com/information-… #infosec #cybersecurity

Microsoft ties executive pay to security following multiple failures and breaches

Microsoft has been criticized for "preventable" failures and poor communication.

arstechnica.com
146
CEO who sold fake Cisco devices to US military gets 6 years in prison bleepingcomputer.com/news/se… #infosec #cybersecurity

CEO who sold fake Cisco devices to US military gets 6 years in prison

Onur Aksoy, the CEO of a group of companies controlling multiple online storefronts, was sentenced to six and a half years in prison for selling $100 million worth of counterfeit Cisco network...

bleepingcomputer.com
108
The US Government Is Asking Big Tech to Promise Better Cybersecurity | WIRED wired.com/story/cisa-cyberse… #infosec #cybersecurity

The US Government Is Asking Big Tech to Promise Better Cybersecurity

The Biden administration is asking tech companies to sign a pledge, obtained by WIRED, to improve their digital security, including reduced default password use and improved vulnerability disclosures.

wired.com
79
Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks thehackernews.com/2024/05/fo… #infosec #cybersecurity

Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

Aruba Networking has released critical security patches for ArubaOS. Four flaws could allow remote code execution, giving attackers full control.

thehackernews.com
76
Microsoft plans to lock down Windows DNS like never before. Here’s how. | Ars Technica arstechnica.com/security/202… #infosec #cybersecurity

Microsoft plans to lock down Windows DNS like never before. Here’s how.

ZTDNS brings the best of both worlds to DNS: encryption and fine-grained control.

arstechnica.com
59
City of Wichita shuts down IT network after ransomware attack bleepingcomputer.com/news/se… #infosec #cybersecurity

City of Wichita shuts down IT network after ransomware attack

The City of Wichita, Kansas, disclosed it was forced to shut down portions of its network after suffering a weekend ransomware attack.

bleepingcomputer.com
69
Finland warns of Android malware attacks breaching bank accounts bleepingcomputer.com/news/se… #infosec #cybersecurity

Finland warns of Android malware attacks breaching bank accounts

Finland's Transport and Communications Agency (Traficom) has issued a warning about an ongoing Android malware campaign targeting banking accounts.

bleepingcomputer.com
98
NSA warns of North Korean hackers exploiting weak DMARC email policies bleepingcomputer.com/news/se… #infosec #cybersecurity

NSA warns of North Korean hackers exploiting weak DMARC email policies

The NSA and FBI warned that the APT43 North Korea-linked hacking group exploits weak email Domain-based Message Authentication Reporting and Conformance (DMARC) policies to mask spearphishing attacks.

bleepingcomputer.com
44
Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution thehackernews.com/2024/05/cr… #infosec #cybersecurity

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

Critical unpatched flaw (CVE-2023-49606) in Tinyproxy could lead to remote code execution. Over 50% of 90K+ exposed hosts are vulnerable.

thehackernews.com
40
Telcos keep using “insecure” Chinese gear because of congressional inaction | Ars Technica arstechnica.com/tech-policy/… #infosec #cybersecurity

Telcos keep using “insecure” Chinese gear because of congressional inaction

Congress only gave 38% of funds needed for "rip and replace," FCC chair says.

arstechnica.com
30
Vulnerability Summary for the Week of April 29, 2024 | CISA cisa.gov/news-events/bulleti… #infosec #cybersecurity

Vulnerability Summary for the Week of April 29, 2024 | CISA

High Vulnerabilities PrimaryVendor -- Product Description Published

cisa.gov
71
Verizon’s 2024 Data Breach Investigations Report: 5 key takeaways | SC Media scmagazine.com/news/verizons… #infosec #cybersecurity

Verizon’s 2024 Data Breach Investigations Report: 5 key takeaways

Vulnerability exploits, pure extortion and internal risks are on the rise, while AI threats fall short.

scworld.com
74
Health care giant comes clean about recent hack and paid ransom | Ars Technica arstechnica.com/security/202… #infosec #cybersecurity

Health care giant comes clean about recent hack and paid ransom

Ransomware attack on the $371 billion company hamstrung US prescription market.

arstechnica.com
36
The Dangerous Rise of GPS Attacks | WIRED wired.com/story/the-dangerou… #infosec #cybersecurity

The Dangerous Rise of GPS Attacks

Thousands of planes and ships are facing GPS jamming and spoofing. Experts warn these attacks could potentially impact critical infrastructure, communication networks, and more.

wired.com
34
CISA urges software devs to weed out path traversal vulnerabilities bleepingcomputer.com/news/se… #infosec #cybersecurity

CISA urges software devs to weed out path traversal vulnerabilities

​CISA and the FBI urged software companies today to review their products and eliminate path traversal security vulnerabilities before shipping.

bleepingcomputer.com
30
Hackers Compromised Dropbox eSignature Service - SecurityWeek securityweek.com/dropbox-dat… #infosec #cybersecurity
47
CISA says GitLab account takeover bug is actively exploited in attacks bleepingcomputer.com/news/se… #infosec #cybersecurity

CISA says GitLab account takeover bug is actively exploited in attacks

​CISA warned today that attackers are actively exploiting a maximum-severity GitLab vulnerability that allows them to take over accounts via password resets.

bleepingcomputer.com
36
New R Programming Vulnerability Exposes Projects to Supply Chain Attacks thehackernews.com/2024/04/ne… #infosec #cybersecurity

New R Programming Vulnerability Exposes Projects to Supply Chain Attacks

A critical vulnerability (CVE-2024-27322) has been discovered in the R programming language. It could allow attackers to execute arbitrary code.

thehackernews.com
37
Critical infrastructure blueprint gets long-awaited update but maintains status quo on key sectors - Nextgov/FCW nextgov.com/cybersecurity/20… #infosec #cybersecurity

Critical infrastructure blueprint gets long-awaited update but maintains status quo on key sectors

The memorandum reaffirms the statutory authority of America’s top cyber agency, but doesn’t update the primary list of critical sectors that can be targeted in cyberattacks, notably leaving out space...

nextgov.com
29
US govt warns of pro-Russian hacktivists targeting water facilities bleepingcomputer.com/news/se… #infosec #cybersecurity

US govt warns of pro-Russian hacktivists targeting water facilities

The US government is warning that pro-Russian hacktivists are seeking out and hacking into unsecured operational technology (OT) systems used to disrupt critical infrastructure operations.

bleepingcomputer.com
29
Load more