Collaborate Disseminate
CISA has warned users of Zyxel NAS products that the recently patched critical vulnerability CVE-2023-27992 has been exploited in attacks.
The post CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks appeared first on SecurityWeek.
Continue reading CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks
The Cl0p ransomware gang has listed more than two dozen victims of the MOVEit zero-day attack on its leak website.
The post Ransomware Group Starts Naming Victims of MOVEit Zero-Day Attacks appeared first on SecurityWeek.
Continue reading Ransomware Group Starts Naming Victims of MOVEit Zero-Day Attacks
Attacks exploiting the Barracuda zero-day CVE-2023-2868 have been linked to a Chinese cyberespionage group that has targeted government and other organizations.
The post Barracuda Zero-Day Attacks Attributed to Chinese Cyberespionage Group appeared fir… Continue reading Barracuda Zero-Day Attacks Attributed to Chinese Cyberespionage Group
Fake security researcher accounts seen distributing malware disguised as Chrome, Signal, WhatsApp, Discord and Exchange zero-day exploits.
The post Fake Security Researcher Accounts Pushing Malware Disguised as Zero-Day Exploits appeared first on Secu… Continue reading Fake Security Researcher Accounts Pushing Malware Disguised as Zero-Day Exploits
Detection-focused threat intelligence firm Silent Push, which maps out the entire internet every day, has launched with $10 million in seed funding.
The post Threat Intelligence Firm Silent Push Launches With $10 Million in Seed Funding appeared first … Continue reading Threat Intelligence Firm Silent Push Launches With $10 Million in Seed Funding
ICS Patch Tuesday: Siemens and Schneider Electric have published more than a dozen advisories addressing over 200 vulnerabilities.
The post ICS Patch Tuesday: Siemens Addresses Over 180 Third-Party Component Vulnerabilities appeared first on SecurityWe… Continue reading ICS Patch Tuesday: Siemens Addresses Over 180 Third-Party Component Vulnerabilities
The Russia-linked ICS malware named CosmicEnergy does not pose a direct threat to OT systems as it contains errors and lacks maturity.
The post CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored appeared first on SecurityWeek.
Continue reading CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored
New research conducted by IOActive shows the potential of electromagnetic fault injection (EMFI) attacks against drones.
The post New Research Shows Potential of Electromagnetic Fault Injection Attacks Against Drones appeared first on SecurityWeek.
Continue reading New Research Shows Potential of Electromagnetic Fault Injection Attacks Against Drones
Fortinet has warned customers that the critical CVE-2023-27997 vulnerability that was patched recently could be a zero-day exploited in limited attacks.
The post Fortinet Warns Customers of Possible Zero-Day Exploited in Limited Attacks appeared first … Continue reading Fortinet Warns Customers of Possible Zero-Day Exploited in Limited Attacks
Researchers discover new MOVEit vulnerabilities related to the zero-day, just as more organizations hit by the attack are coming forward.
The post New MOVEit Vulnerabilities Found as More Zero-Day Attack Victims Come Forward appeared first on SecurityW… Continue reading New MOVEit Vulnerabilities Found as More Zero-Day Attack Victims Come Forward