News
-
"Attackers Injected Novel DSLog Backdoor Into 670 Vulnerable Ivanti Devices"Actors are exploiting a vulnerability, tracked as CVE-2024-21893, in Ivanti Connect Secure, Policy Secure, and Neurons for ZTA to inject a backdoor called DSLog.
-
"Bank of America Warns Customers of Data Breach After Vendor Hack"Bank of America is warning customers about a data breach after one of its service providers, Infosys McCamish Systems (IMS), was hacked in 2023.
-
"Notorious Bumblebee Malware Re-emerges with New Attack Methods"According to security researchers at Proofpoint, Bumblebee malware has recently re-emerged following a four-month absence from the cyber threat landscape.
-
"IARPA Kicks off Cybersecurity Research Focused on Attackers' Psychology"The Intelligence Advanced Research Projects Activity (IARPA) has launched a program that, for the first time, directly focuses on the psychology of cyberattackers.
-
"The IC Is Reigning-in Trojan AI Intruders"The Intelligence Advanced Research Projects Activity (IARPA) launched the Trojans in Artificial Intelligence (TrojAI) program, which aims to defend AI systems by researching and developing technology capable of detecting and mitigating Trojan attacks.
-
"CISA: Roundcube Email Server Bug Now Exploited in Attacks"According to the Cybersecurity and Infrastructure Security Agency (CISA), a Roundcube email server vulnerability patched in September 2023 is being actively exploited in Cross-Site Scripting (XSS) attacks.
-
"US DOJ Dismantles Warzone RAT Infrastructure, Arrests Key Operators"The US Department of Justice (DOJ) has announced the seizure of online infrastructure used to sell a Remote Access Trojan (RAT) called Warzone RAT.
-
"Critical Fortinet FortiOS Flaw Exploited in The Wild (CVE-2024-21762)"Fortinet has recently patched critical remote code execution vulnerabilities in FortiOS (CVE-2024-21762 and CVE-2024-23313), one of which is “potentially” being exploited in the wild.
-
"Ongoing Azure Compromises Target Senior Execs, Microsoft 365 Apps"Many environments and individual user accounts have been compromised as part of an ongoing campaign that targets Microsoft Azure corporate clouds.
-
"Decryptor for Rhysida Ransomware Is Available!"Rhysida ransomware victims can successfully decrypt files encrypted by the ransomware because of an implementation vulnerability discovered by researchers and used to create a decryptor.
-
"Canada to Ban The Flipper Zero to Stop Surge in Car Thefts"The Canadian government plans to ban Flipper Zero and similar devices after tagging them as tools thieves can use to steal cars.
-
"Ransomware Attack Forces 18 Romanian Hospitals to go Offline"At least 18 hospitals in Romania were recently knocked offline after a ransomware attack took down their healthcare management system.