Fortinet released updates to patch vulnerabilities in its FortiNAC network access control solution. The company described CVE-2023-33299 as a Java untrusted object deserialization that could allow …
Companies Call for Changes to UK’s Cyber Essentials Scheme
The UK government has acknowledged concerns about its Cyber Essentials scheme, revealing that only 35,000 organizations in the country have been certified, a small fraction of the estimated 5.5 …
Continue Reading about Companies Call for Changes to UK’s Cyber Essentials Scheme
British Twitter Hacker Sentenced to Prison in US
Joseph James O'Connor, also known as 'PlugwalkJoe', a British national, has been sentenced to five years in prison in the US after being involved in hacking schemes targeting cryptocurrency wallets, …
Continue Reading about British Twitter Hacker Sentenced to Prison in US
Fortinet Patches Critical RCE Vulnerability in FortiNAC
Fortinet has issued patches for a critical vulnerability (CVE-2023-33299) in its FortiNAC network access control solution, which could allow remote code execution. The flaw relates to the …
Continue Reading about Fortinet Patches Critical RCE Vulnerability in FortiNAC
American Airlines, Southwest Airlines Impacted by Data Breach at Third-Party Provider
American Airlines and Southwest Airlines have notified their pilots about a data breach at Pilot Credentials, a vendor managing pilot and cadet recruitment applications. The breach occurred on or …
Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers
Microsoft detected a sharp increase in credential-stealing attacks from the Russian-affiliated group Midnight Blizzard. The group is also known as Nobelium, APT29, Cozy Bear, Iron Hemlock, and The …
Continue Reading about Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers
CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) announced that a vulnerability in some Zyxel network-attached storage (NAS) products has been exploited. The Taiwanese company advised …
Continue Reading about CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks
British Twitter Hacker Sentenced to Prison in US
British national Joseph James O'Connor, known online as "PlugwalkJoe," was arrested in Spain in 2021 and extradited to the US in April 2023. O'Connor engaged in SIM swapping attacks and stole …
Continue Reading about British Twitter Hacker Sentenced to Prison in US
Remotely Exploitable DoS Vulnerabilities Patched in BIND
The Internet Systems Consortium (ISC) released multiple patches for denial-of-service (DoS) issues in DNS's BIND software. The vulnerabilities could be utilized to overwhelm and crash named, BIND's …
Continue Reading about Remotely Exploitable DoS Vulnerabilities Patched in BIND
China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor
Symantec has issued a warning that a China-linked hacking group known as APT15 is targeting foreign affairs ministries in the Americas using a new backdoor called Graphican. The group utilized …
Continue Reading about China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor