Collaborate Disseminate
OpenSSL 1.1.1 will reach EoL in six months and users are instructed to either upgrade to a newer version or pay for extended support to continue receiving security patches.
The post OpenSSL 1.1.1 Nears End of Life: Security Updates Only Until Septembe… Continue reading OpenSSL 1.1.1 Nears End of Life: Security Updates Only Until September 2023
Google has linked several zero-day vulnerabilities used last year to target Android and iOS devices to commercial spyware vendors.
The post Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors appeared first on SecurityWeek.
Continue reading Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors
OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an actively exploited vulnerability.
The post ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exp… Continue reading ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation
The UK’s National Crime Agency has been running several DDoS-for-hire websites to collect information about individuals looking to launch such attacks.
The post Thousands Access Fake DDoS-for-Hire Websites Set Up by UK Police appeared first on Security… Continue reading Thousands Access Fake DDoS-for-Hire Websites Set Up by UK Police
Intel shares information on the security improvements brought by its new vPro platform powered by 13th Gen Core processors.
The post Intel Boasts Attack Surface Reduction With New 13th Gen Core vPro Platform appeared first on SecurityWeek.
Continue reading Intel Boasts Attack Surface Reduction With New 13th Gen Core vPro Platform
Dole has admitted in an SEC filing that its investigation into the recent ransomware attack found that the hackers had accessed employee information.
The post Dole Says Employee Information Compromised in Ransomware Attack appeared first on SecurityWeek.
Continue reading Dole Says Employee Information Compromised in Ransomware Attack
Cisco Talos researchers found two high-severity vulnerabilities in WellinTech’s KingHistorian industrial data historian software.
The post High-Severity Vulnerabilities Found in WellinTech Industrial Data Historian appeared first on SecurityWeek.
Continue reading High-Severity Vulnerabilities Found in WellinTech Industrial Data Historian
CISA announces adding more experts to its Cybersecurity Advisory Committee and updating the Cybersecurity Performance Goals.
The post CISA Expands Cybersecurity Committee, Updates Baseline Security Goals appeared first on SecurityWeek.
Continue reading CISA Expands Cybersecurity Committee, Updates Baseline Security Goals
Mandiant has conducted an analysis of the zero-day vulnerabilities disclosed in 2022 and over a dozen were linked to cyberespionage groups.
The post Exploitation of 55 Zero-Day Vulnerabilities Came to Light in 2022: Mandiant appeared first on SecurityW… Continue reading Exploitation of 55 Zero-Day Vulnerabilities Came to Light in 2022: Mandiant
Industrial organizations using HMI and SCADA products from Aveva have been informed about potentially serious vulnerabilities.
The post Organizations Notified of Remotely Exploitable Vulnerabilities in Aveva HMI, SCADA Products appeared first on Securi… Continue reading Organizations Notified of Remotely Exploitable Vulnerabilities in Aveva HMI, SCADA Products