Collaborate Disseminate
A Windows zero-day tracked as CVE-2023-28252 and fixed by Microsoft with its April Patch Tuesday updates has been exploited in Nokoyawa ransomware attacks.
The post Windows Zero-Day Exploited in Nokoyawa Ransomware Attacks appeared first on SecurityWe… Continue reading Windows Zero-Day Exploited in Nokoyawa Ransomware Attacks
3CX has confirmed previous reports that the recently disclosed supply chain attack was likely conducted by North Korean hackers.
The post Mandiant Also Links 3CX Supply Chain Attack to North Korean Hackers appeared first on SecurityWeek.
Continue reading Mandiant Also Links 3CX Supply Chain Attack to North Korean Hackers
Microsoft and Citizen Lab release information on the activities, malware and victims of Israeli spyware vendor QuaDream.
The post Details Emerge on Israeli Spyware Vendor QuaDream and Its iOS Malware appeared first on SecurityWeek.
Continue reading Details Emerge on Israeli Spyware Vendor QuaDream and Its iOS Malware
Siemens and Schneider Electric’s Patch Tuesday advisories for April 2023 address a total of 38 vulnerabilities found in their products.
The post ICS Patch Tuesday: Siemens, Schneider Electric Address Dozens of Vulnerabilities appeared first on Securit… Continue reading ICS Patch Tuesday: Siemens, Schneider Electric Address Dozens of Vulnerabilities
Three days after announcing patches for new zero-days affecting iOS and macOS, Apple released fixes for devices running older operating system versions.
The post Apple Rolls Out Zero-Day Patches to Older iOS, macOS Devices appeared first on SecurityWeek.
Continue reading Apple Rolls Out Zero-Day Patches to Older iOS, macOS Devices
Microsoft Exchange Server 2013 has reached end of support on April 11, 2023, and will no longer receive security patches.
The post Microsoft Exchange Server 2013 Reaches End of Support appeared first on SecurityWeek.
Continue reading Microsoft Exchange Server 2013 Reaches End of Support
Microsoft, Fortra and Health-ISAC have taken legal and technical action to prevent the abuse of the Cobalt Strike exploitation tool and Microsoft software.
The post Technical, Legal Action Taken to Prevent Abuse of Cobalt Strike, Microsoft Software ap… Continue reading Technical, Legal Action Taken to Prevent Abuse of Cobalt Strike, Microsoft Software
An innocent-looking portable speaker can hide a hacking device that launches CAN injection attacks, which have been used to steal cars.
The post Thieves Use CAN Injection Hack to Steal Cars appeared first on SecurityWeek.
Continue reading Thieves Use CAN Injection Hack to Steal Cars
Forty-one cybersecurity-related M&A deals were announced in March 2023.
The post Cybersecurity M&A Roundup: 41 Deals Announced in March 2023 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 41 Deals Announced in March 2023
Law enforcement announced the takedown of Genesis Market, but the impact on the cybercrime marketplace’s infrastructure may be limited.
The post Success of Genesis Market Takedown Attempt Called Into Question appeared first on SecurityWeek.
Continue reading Success of Genesis Market Takedown Attempt Called Into Question