News
-
"Critical Vulnerabilities in Exim Threaten Over 250K Email Servers Worldwide"According to researchers, thousands of servers running the Exim mail transfer agent are vulnerable to attacks involving the exploitation of critical vulnerabilities that enable remote execution of malicious code with little or no user interaction. -
"Security Researchers Believe Mass Exploitation Attempts Against WS_FTP Have Begun"Researchers suspect the mass exploitation of vulnerabilities in Progress Software's WS_FTP Server. Researchers at Rapid7 first observed evidence of exploitation across multiple instances of WS_FTP on September 30. -
"Hackers Steal User Database From European Telecommunications Standards Body"A nonprofit organization that develops communications standards reported that hackers stole a database containing user information. The European Telecommunications Standards Institute (ETSI) disclosed the incident last week. -
"AI-Generated Phishing Emails Almost Impossible to Detect, Report Finds"The potential for cybercriminals to use AI chatbots to create phishing campaigns has been cause for concern, and now security researchers at Egress have found that it is almost impossible to detect AI-generated phishing emails. -
"Transforming Vulnerability Management: CISA Adds OASIS CSAF 2.0 Standard to ICS Advisories"The US Cybersecurity and Infrastructure Security Agency (CISA) has announced that its security advisories for Industrial Control Systems (ICS), Operational Technology (OT), and medical devices now include the OASIS Common Security Advisory Framework (C -
"Recently Patched TeamCity Vulnerability Exploited to Hack Servers"According to security researchers at GreyNoise, in-the-wild exploitation of a critical vulnerability in JetBrains’ TeamCity continuous integration and continuous deployment (CI/CD) server started just days after the availability of a patch was announce -
NSA Codebreaker Challenge 2023: Calling All Student Codebreakers to the Ultimate Challenge!The National Security Agency (NSA) recently launched the NSA Codebreaker Challenge 2023, igniting the minds of aspiring codebreakers across the nation. -
"Hackers Attack US Healthcare Giant, More Than 190K People Affected"Prospect Medical Holdings operates over 150 clinics and dozens of hospitals in Southern California, Connecticut, Pennsylvania, and Rhode Island. -
"BunnyLoader: New Malware-as-a-Service Threat Emerges in the Cybercrime Underground"Researchers have found BunnyLoader, another Malware-as-a-Service (MaaS) threat, being sold on the cybercrime underground. -
"Meet LostTrust Ransomware — A Likely Rebrand of the MetaEncryptor Gang"The LostTrust ransomware campaign is believed to be a rebranding of MetaEncryptor, using nearly identical data leak sites and encryptors. -
"Johnson Controls Ransomware Attack Could Impact DHS"Sensitive Department of Homeland Security (DHS) information might have been compromised in a recent ransomware attack aimed at government contractor Johnson Controls International.
-
"Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain"An Israeli surveillanceware company used the three recently revealed Apple zero-day vulnerabilities to create an exploit chain for iPhones, and a Chrome zero-day to exploit Androids in a novel attack against Egyptian organizations.