Several Brocade SANnav Storage Area Network (SAN) management application flaws could compromise vulnerable appliances. Pierre Barre, an independent security researcher, found and reported 18 flaws in all versions up to 2.3.0. Due to incorrect firewall rules, insecure root access, Docker misconfigurations, and lack of authentication and encryption, an attacker can intercept credentials, overwrite arbitrary files, and breach the device. This article continues to discuss the potential exploitation and impact of the Brocade SANnav SAN security vulnerabilities.

A new campaign called "Dev Popper" is using fake job interviews to trick software developers into installing a Python Remote Access Trojan (RAT). To make the interview seem legitimate, developers are asked to download and run code from GitHub.

Bitwarden surveyed 2,400 people in the US, UK, Australia, France, Germany, and Japan about password habits. Twenty-five percent of respondents globally reuse passwords across 11 to over 20 accounts, and 36 percent use personal information in their credentials publicly accessible on social media platforms and online forums. Most respondents use memory (53 percent) and handwriting (34 percent) for work account passwords.

According to the Cybersecurity and Infrastructure Security Agency (CISA), the US government and critical infrastructure entities were sent 1754 ransomware vulnerability notifications under the Ransomware Vulnerability Warning Pilot (RVWP) program in 2023, resulting in 852 vulnerable devices being secured or taken offline. The highest number of alerts were sent to government facilities (641), which encompasses a range of federal, state, and local government organizations, including schools and higher education facilities.

Security researchers at Sekoia have sinkholed a command and control server for a variant of the PlugX malware and observed in six months more than 2.5 million connections from unique IP addresses. Since last September, the sinkhole server received over 90,000 requests every day from infected hosts in more than 170 countries. Since September 2023, when the security researchers captured the unique IP address associated with the particular C2, it has logged over 2,495,297 unique IPs from 170 countries interacting with the sinkhole.