The Department of Energy and other federal agencies were compromised in a global hack by a Russian cyber-extortion group targeting the file-transfer program MOVEit. While the impact on federal …
Microsoft Says Early June Disruptions to Outlook, Cloud Platform, Were Cyberattacks
Microsoft has disclosed that distributed denial-of-service (DDoS) attacks by a group called Anonymous Sudan were responsible for the recent service disruptions in its flagship office suite, including …
MOVEit Customers Urged to Patch Third Critical Vulnerability
Progress Software is urging its MOVEit customers to apply patches for a critical SQL injection vulnerability, CVE-2023-35708, which could enable unauthorized access to the MOVEit Transfer database. …
Continue Reading about MOVEit Customers Urged to Patch Third Critical Vulnerability
Fake Security Researcher Accounts Pushing Malware Disguised as Zero-Day Exploits
VulnCheck discovered fake security researcher accounts sharing malware disguised as zer0-day exploits for Chrome, Discord, Signal, Whatsapp, and Exchange. The fake accounts mainly operated on GitHub …
Chinese spies breached hundreds of public, private networks, security firm says
Mandiant stated on Thursday that they have "high confidence" that the Chinese-backed group UNC 4841 is behind the exploitation of Barracuda Network's Email Security Gateway. Starting in October 2022, …
Ransomware Group Starts Naming Victims of MOVEit Zero-Day Attacks
The CIOp ransomware group named over two dozen organizations they targeted during a recent campaign. The hackers utilized CVE-2023-34362, a zero-day vulnerability in the MOVEit managed file transfer …
Continue Reading about Ransomware Group Starts Naming Victims of MOVEit Zero-Day Attacks
EU Passes Landmark Artificial Intelligence Act
The European Parliament has adopted the latest draft of the EU's Artificial Intelligence Act, which aims to strictly regulate AI services to mitigate risks. The legislation introduces measures to …
Continue Reading about EU Passes Landmark Artificial Intelligence Act
Hundreds of Thousands of eCommerce Sites Impacted by Critical Plugin Vulnerability
A critical vulnerability in the WooCommerce Stripe Payment Gateway plugin exposes hundreds of thousands of ecommerce websites to potential attacks. Tracked as CVE-2023-34000, the issue is an …
CISA Instructs Federal Agencies to Secure Internet-Exposed Devices
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive requiring federal agencies to secure the network management interfaces of specific device classes. These …
Continue Reading about CISA Instructs Federal Agencies to Secure Internet-Exposed Devices
Microsoft Outs New Russian APT Linked to Wiper Attacks in Ukraine
Microsoft has publicly identified a new APT group called Cadet Blizzard, associated with Russia's GRU, which has carried out destructive cyber attacks in Ukraine using wiper malware. The group is …
Continue Reading about Microsoft Outs New Russian APT Linked to Wiper Attacks in Ukraine