Mandiant announced that cyber attacks involving USB infection drives as an attack vector increased three-fold in 2023. SOGU and SNOWYDRIVE, two campaigns currently employing this strategy, target …
JumpCloud Says Sophisticated Nation-State Hackers Targeted Specific Customers
JumpCloud, a directory, identity, and access management company, announced it was attacked by advanced nation-state actors. The hackers breached company systems in search of specific customer data. …
Continue Reading about JumpCloud Says Sophisticated Nation-State Hackers Targeted Specific Customers
Exploitation of ColdFusion Vulnerability Reported as Adobe Patches Another Critical Flaw
Adobe released patches on Friday for a critical-severity vulnerability in its web development product ColdFusion. The issue, tracked as CVE-2023-38203 , involved the deserialization of untrusted data …
Hackers Target Reddit Alternative Lemmy via Zero-Day Vulnerability
In recent days, several instances of the Reddit alternative Lemmy were hacked due to a zero-day vulnerability that attackers exploited. The open source software, which facilitates self-hosted news …
Continue Reading about Hackers Target Reddit Alternative Lemmy via Zero-Day Vulnerability
Critical Cisco SD-WAN Vulnerability Leads to Information Leaks
A critical vulnerability has been discovered in the Cisco SD-WAN vManage software, posing a significant risk to organizations. Tracked as CVE-2023-20214 with a CVSS score of 9.1, the flaw stems from …
Continue Reading about Critical Cisco SD-WAN Vulnerability Leads to Information Leaks
Industry Reactions to EU-US Data Privacy Framework: Feedback Friday
The European Union and the United States have recently reached an agreement on the Data Privacy Framework, which focuses on facilitating secure data transfers from Europe to the US. The framework aims …
Continue Reading about Industry Reactions to EU-US Data Privacy Framework: Feedback Friday
Zluri Raises $20 Million for SaaS Management Platform
SaaS management platform Zluri has raised $20 million in a Series B funding round led by Lightspeed, with participation from existing investors. The US-based startup helps organizations manage their …
Continue Reading about Zluri Raises $20 Million for SaaS Management Platform
Apple Re-Releases Urgent Zero-Day Patches With Fix for Website Access Issue
Apple re-released its recent Rapid Security Response updates for iOS and macOS after the original patches caused a website access issue. MacOS Ventura 13.4.1 (a), iOS 16.5.1 (a), iPadOS 16.5.1 (a), …
Continue Reading about Apple Re-Releases Urgent Zero-Day Patches With Fix for Website Access Issue
Ransomware Extortion Skyrockets in 2023, Reaching $449.1 Million and Counting
Chainalysis reported that ransomware is the only cryptocurrency-based crime that has grown in 2023. Cybercriminals have extorted about $176 million more than they did this time last year. At the …
Continue Reading about Ransomware Extortion Skyrockets in 2023, Reaching $449.1 Million and Counting
APT Exploit Targeting Rockwell Automation Flaws Threatens Critical Infrastructure
Rockwell Automation issued an advisory in conjunction with the US government regarding an exploit capability in its ControlLogix EtherNet/IP communication modules. Tracked as CVE-2023-3595, the flaw …