Collaborate Disseminate
LogoFAIL is an UEFI image parser attack allowing hackers to compromise consumer and enterprise devices using malicious logo images.
The post Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images appeared first on SecurityWeek.
Continue reading Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images
The Dragos Community Defense Program is offering free OT cybersecurity software to small electric, water, and natural gas utilities in the US.
The post Dragos Offering Free OT Cybersecurity Technology to Small US Utilities appeared first on SecurityWe… Continue reading Dragos Offering Free OT Cybersecurity Technology to Small US Utilities
US government agency was targeted in attacks that involved exploitation of an Adobe ColdFusion vulnerability tracked as CVE-2023-26360.
The post Adobe ColdFusion Vulnerability Exploited in Attacks on US Government Agency appeared first on SecurityWeek.
Continue reading Adobe ColdFusion Vulnerability Exploited in Attacks on US Government Agency
Forescout has found 21 vulnerabilities in Sierra Wireless OT/IoT routers that could expose critical infrastructure organizations to remote attacks.
The post 21 Vulnerabilities in Sierra Wireless Routers Could Expose Critical Infrastructure to Attacks … Continue reading 21 Vulnerabilities in Sierra Wireless Routers Could Expose Critical Infrastructure to Attacks
The details of 10 unpatched Loytec building automation product vulnerabilities have been disclosed two years after their discovery.
The post Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery appeared first on SecurityWeek.
Continue reading Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery
Thirty-four cybersecurity-related merger and acquisition (M&A) deals were announced in November 2023.
The post Cybersecurity M&A Roundup: 34 Deals Announced in November 2023 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 34 Deals Announced in November 2023
Security agencies say the Cyber Av3ngers group targeting ICS at multiple water facilities is affiliated with the Iranian government.
The post ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government appeared first on … Continue reading ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government
Noteworthy stories that might have slipped under the radar: Utilities in US and Europe targeted in attacks, aerospace hacks, and Killnet leader unmasked.
The post In Other News: Utilities Targeted by Hackers, Aerospace Attacks, Killnet Leader Unmasked … Continue reading In Other News: Utilities Targeted by Hackers, Aerospace Attacks, Killnet Leader Unmasked
New Turtle macOS ransomware is not sophisticated but shows that cybercriminals continue to target Apple devices.
The post New ‘Turtle’ macOS Ransomware Analyzed appeared first on SecurityWeek.
Continue reading New ‘Turtle’ macOS Ransomware Analyzed
The US has announced sanctions against North Korean cyberespionage group Kimsuky over its intelligence gathering activities.
The post US Sanctions North Korean Cyberespionage Group Kimsuky appeared first on SecurityWeek.
Continue reading US Sanctions North Korean Cyberespionage Group Kimsuky