Collaborate Disseminate
Colorado Department of Higher Education targeted in a ransomware attack that resulted in a data breach impacting many students and teachers.
The post Colorado Department of Higher Education Discloses Ransomware Attack, Data Breach appeared first on Sec… Continue reading Colorado Department of Higher Education Discloses Ransomware Attack, Data Breach
A critical Microsoft Power Platform vulnerability exposed authentication data and other secrets, but the tech giant has been accused of handling it poorly.
The post Microsoft Criticized Over Handling of Critical Power Platform Vulnerability appeared fi… Continue reading Microsoft Criticized Over Handling of Critical Power Platform Vulnerability
Exploitation of the Ivanti EPMM flaw CVE-2023-35078 is picking up as a new critical vulnerability tracked as CVE-2023-35082 is disclosed.
The post Exploitation of Ivanti EPMM Flaw Picking Up as New Vulnerability Is Disclosed appeared first on SecurityW… Continue reading Exploitation of Ivanti EPMM Flaw Picking Up as New Vulnerability Is Disclosed
CISA disclosed 670 ICS vulnerabilities in the first half of 2023, but roughly one-third have no patches or mitigations from the vendor.
The post 670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis appeared first on SecurityWeek.
Continue reading 670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis
Forty-two cybersecurity-related merger and acquisition (M&A) deals were announced in July 2023.
The post Cybersecurity M&A Roundup: 42 Deals Announced in July 2023 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 42 Deals Announced in July 2023
Threat actors have exploited a Salesforce email service zero-day vulnerability and abused Meta features in a sophisticated phishing campaign.
The post Salesforce Email Service Zero-Day Exploited in Phishing Campaign appeared first on SecurityWeek.
Continue reading Salesforce Email Service Zero-Day Exploited in Phishing Campaign
The recently patched Ivanti EPMM zero-day CVE-2023-35078 has been exploited to hack the Norwegian government since at least April 2023.
The post Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack appeared first on Se… Continue reading Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack
A new power side-channel attack named Collide+Power can allow an attacker to obtain sensitive information and it works against nearly any modern CPU.
The post Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack appeared first on S… Continue reading Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack
The number of ransomware attacks targeting industrial organizations and infrastructure has doubled since the second quarter of 2022, according to Dragos.
The post Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report appeared firs… Continue reading Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report
Ivanti EPMM customers have been warned of CVE-2023-35081, a second zero-day vulnerability that has been exploited in targeted attacks.
The post Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks appeared first on SecurityWeek.
Continue reading Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks