CISA Warns of FXC Router, QNAP NVR Vulnerabilities Exploited in the Wild

CISA released ICS advisories for FXC router and QNAP NRV flaws and added them to its known exploited vulnerabilities catalog. 
The post CISA Warns of FXC Router, QNAP NVR Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.
Continue reading CISA Warns of FXC Router, QNAP NVR Vulnerabilities Exploited in the Wild→

Malicious GPT Can Phish Credentials, Exfiltrate Them to External Server: Researcher

A researcher has shown how malicious actors can create custom GPTs that can phish for credentials and exfiltrate them to external servers. 
The post Malicious GPT Can Phish Credentials, Exfiltrate Them to External Server: Researcher appeared first on S… Continue reading Malicious GPT Can Phish Credentials, Exfiltrate Them to External Server: Researcher→

ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature

ESET has patched CVE-2023-5594, a high-severity vulnerability that can cause a browser to trust websites that should not be trusted.
The post ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature appeared first on SecurityWeek.
Continue reading ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature→

BlackCat Strikes Back: Ransomware Gang “Unseizes” Website, Vows No Limits on Targets

The BlackCat/Alphv ransomware group is dealing with the government operation that resulted in website seizures and a decryption tool.
The post BlackCat Strikes Back: Ransomware Gang “Unseizes” Website, Vows No Limits on Targets appeared first on Securi… Continue reading BlackCat Strikes Back: Ransomware Gang “Unseizes” Website, Vows No Limits on Targets→

2022 Election Not Impacted by Chinese, Russian Cyber Activity: DOJ, DHS

Hackers, including from Russia and China, launched cyberattacks and collected information, but it did not impact the integrity and security of the 2022 US election.
The post 2022 Election Not Impacted by Chinese, Russian Cyber Activity: DOJ, DHS appea… Continue reading 2022 Election Not Impacted by Chinese, Russian Cyber Activity: DOJ, DHS→

Xfinity Customer Data Compromised in Attack Exploiting CitrixBleed Vulnerability

Comcast’s Xfinity says customer data, including credentials, were compromised in an attack exploiting the CitrixBleed vulnerability
The post Xfinity Customer Data Compromised in Attack Exploiting CitrixBleed Vulnerability appeared first on SecurityWeek… Continue reading Xfinity Customer Data Compromised in Attack Exploiting CitrixBleed Vulnerability→

CISA Urges Manufacturers to Eliminate Default Passwords After Recent ICS Attacks

CISA is advising device makers to stop relying on customers to change default passwords following attacks targeting water sector ICS.
The post CISA Urges Manufacturers to Eliminate Default Passwords After Recent ICS Attacks appeared first on SecurityWe… Continue reading CISA Urges Manufacturers to Eliminate Default Passwords After Recent ICS Attacks→