Collaborate Disseminate
MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.
The post VMware Abused in Recent MITRE Hack for Persistence, Evasion appeared first on SecurityWeek.
Continue reading VMware Abused in Recent MITRE Hack for Persistence, Evasion
The Association of California School Administrators (ACSA) is informing nearly 55,000 individuals that they have been impacted by a ransomware attack.
The post 55,000 Impacted by Cyberattack on California School Association appeared first on SecurityW… Continue reading 55,000 Impacted by Cyberattack on California School Association
Intercontinental Exchange, the company that operates NYSE and other exchanges, has agreed to pay a $10 million fine related to a 2021 hack.
The post NYSE Operator Intercontinental Exchange Gets $10M SEC Fine Over 2021 Hack appeared first on SecurityWeek.
Continue reading NYSE Operator Intercontinental Exchange Gets $10M SEC Fine Over 2021 Hack
Rockwell Automation is concerned about internet-exposed ICS due to heightened geopolitical tensions and adversarial cyber activity globally.
The post Rockwell Automation Urges Customers to Disconnect ICS From Internet appeared first on SecurityWeek.
Continue reading Rockwell Automation Urges Customers to Disconnect ICS From Internet
Claroty shows how Honeywell ControlEdge Virtual UOC vulnerability can be exploited for unauthenticated remote code execution.
The post Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution appeared first on SecurityWeek.
Continue reading Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution
Zoom is announcing post-quantum end-to-end encryption on Meetings, with Phone and Rooms coming soon.
The post Zoom Adding Post-Quantum End-to-End Encryption to Products appeared first on SecurityWeek.
Continue reading Zoom Adding Post-Quantum End-to-End Encryption to Products
CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog.
The post CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw appeared first on SecurityWeek.
Continue reading CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw
The EPA has issued an enforcement alert, outlining the steps needed to comply with the Safe Drinking Water Act.
The post EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems appeared first on SecurityWeek.
Continue reading EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems
Linguistic Lumberjack (CVE-2024-4323) is a critical vulnerability in the Fluent Bit logging utility that can allow DoS, information disclosure and possibly RCE.
The post Vulnerability Found in Fluent Bit Utility Used by Major Cloud, Tech Companies appe… Continue reading Vulnerability Found in Fluent Bit Utility Used by Major Cloud, Tech Companies
Roundup of the cybersecurity-related merger and acquisition (M&A) deals announced in the first half of May 2024.
The post Cybersecurity M&A Roundup for First Half of May 2024 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup for First Half of May 2024