CISA: Patch Critical GeoServer GeoTools Bug Now
The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal government agencies to patch a critical vulnerability in a...
Month: July 2024
Understanding NullBulge, the New AI-Fighting ‘Hacktivist’ Group
NullBulge is a new threat actor emerged in Spring 2024, targeting AI-centric applications and games.The group claimed on July 12...
ICO Reprimands London Council for Mass Data Breach
A London Council has been reprimanded for cybersecurity failings that led to a data breach affecting at least 280,000 residents.The...
Paris 2024 Olympics Face Escalating Cyber-Threats
Cybersecurity analysts have warned of a significant uptick in cyber-threats targeting the upcoming Paris 2024 Olympics. According to a recent report...
Qilin Ransomware’s Sophisticated Tactics Unveiled By Experts
Security researchers have unveiled more information about the Qilin ransomware group, which recently targeted the healthcare sector with a $50...
CISA: Adobe Releases Security Updates for Multiple Products
Adobe Releases Security Updates for Multiple Products Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber...
CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
CISA: CISA Releases Seven Industrial Control Systems Advisories
CISA Releases Seven Industrial Control Systems Advisories CISA released seven Industrial Control Systems (ICS) advisories on July 9, 2024. These...
CISA: CISA and FBI Release Secure by Design Alert on Eliminating OS Command Injection Vulnerabilities
CISA and FBI Release Secure by Design Alert on Eliminating OS Command Injection Vulnerabilities Today, CISA and FBI are releasing...
CISA: CISA Releases Twenty-one Industrial Control Systems Advisories
CISA Releases Twenty-one Industrial Control Systems Advisories CISA released twenty-one Industrial Control Systems (ICS) advisories on July 11, 2024. These...
CISA: CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth
CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth Today, CISA released...
CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA: CISA Releases One Industrial Control Systems Advisory
CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on July 16, 2024. These...
CISA: AT&T Discloses Breach of Customer Data
AT&T Discloses Breach of Customer Data On July 12, AT&T released a public statement on unauthorized access of customer data...
North Korean Hackers Update BeaverTail Malware to Target MacOS Users
Cybersecurity researchers have discovered an updated variant of a known stealer malware that attackers affiliated with the Democratic People's Republic...
HackerOne Bug Bounty Disclosure: xss-in-ibm-infocenter-redyetihacks
Company Name: IBM Company HackerOne URL: https://hackerone.com/ibm Submitted By:redyetihacksLink to Submitters Profile:https://hackerone.com/redyetihacks Report Title:XSS in IBM InfoCenterReport Link:https://hackerone.com/reports/2343548Date Submitted:17 July...
Black Basta Ransomware Victim: hpecds[.]com
Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Black Basta Ransomware Victim: posiplus[.]com
Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Critical Vulnerability in Exim Software
Exim has released security updates addressing a critical vulnerability (CVE-2024-39929) in their mail transfer agent (MTA). Successful exploitation of the vulnerability...
Critical Vulnerability in GitLab Products
GitLab has released security updates addressing a critical vulnerability (CVE-2024-6385) in their GitLab Community Edition (CE) and Enterprise Edition (EE)...
Navigating Insider Risks: Are your Employees Enabling External Threats?
Attacks on your network are often meticulously planned operations launched by sophisticated threats. Sometimes your technical fortifications provide a formidable...
FIN7 Group Advertises Security-Bypassing Tool on Dark Web Forums
The financially motivated threat actor known as FIN7 has been observed using multiple pseudonyms across several underground forums to likely...
China-linked APT17 Targets Italian Companies with 9002 RAT Malware
A China-linked threat actor called APT17 has been observed targeting Italian companies and government entities using a variant of a...
