Jan 13, 2023The Hacker NewsUnified CNAPP / XDR As the new year begins, it’s more important than ever to protect your business from the constantly …
FortiOS Flaw Exploited as Zero-Day in Attacks on Government and Organizations
Jan 13, 2023Ravie LakshmananZero-Day / Incident Response A zero-day vulnerability in FortiOS SSL-VPN that Fortinet addressed last month was exploited by unknown actors in attacks …
IcedID Malware Strikes Again: Active Directory Domain Compromised in Under 24 Hours
Jan 12, 2023Ravie LakshmananActive Directory / Malware A recent IcedID malware attack enabled the threat actor to compromise the Active Directory domain of an unnamed …
Over 100 Siemens PLC Models Found Vulnerable to Firmware Takeover
Jan 12, 2023Ravie LakshmananFirmware and Hardware Security Security researchers have disclosed multiple architectural vulnerabilities in Siemens SIMATIC and SIPLUS S7-1500 programmable logic controllers (PLCs) that …
Experts Detail Chromium Browser Security Flaw Putting Confidential Data at Risk
Jan 12, 2023Ravie LakshmananBrowser Security / Data Safety Details have emerged about a now-patched vulnerability in Google Chrome and Chromium-based browsers that, if successfully exploited, …
Patch where it Hurts: Effective Vulnerability Management in 2023
Jan 12, 2023The Hacker NewsVulnerability Management A recently published Security Navigator[1] report data shows that businesses are still taking 215 days to patch a reported …
Twitter Denies Hacking Claims, Assures Leaked User Data Not from its System
Jan 12, 2023Ravie LakshmananData Security / Privacy Twitter on Wednesday said that its investigation found “no evidence” that users’ data sold online was obtained by …
Alert: Hackers Actively Exploiting Critical “Control Web Panel” RCE Vulnerability
Jan 12, 2023Ravie LakshmananServer Security / Linux Malicious actors are actively attempting to exploit a recently patched critical vulnerability in Control Web Panel (CWP) that …
New Analysis Reveals Raspberry Robin Can be Repurposed by Other Threat Actors
Jan 11, 2023Ravie LakshmananCyber Threat / Malware A new analysis of Raspberry Robin’s attack infrastructure has revealed[1] that it’s possible for other threat actors to …
Australian Healthcare Sector Targeted in Latest Gootkit Malware Attacks
Jan 11, 2023Ravie LakshmananHealthcare / Cyber Threat A wave of Gootkit malware loader attacks has targeted the Australian healthcare sector by leveraging legitimate tools like …
