Collaborate Disseminate
Ivanti EPMM customers have been warned of CVE-2023-35081, a second zero-day vulnerability that has been exploited in targeted attacks.
The post Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks appeared first on SecurityWeek.
Continue reading Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks
Several industry professionals comment on the SEC’s new cybersecurity incident disclosure rules and their implications.
The post Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday appeared first on SecurityWeek.
Continue reading Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday
Several vulnerabilities found in Weintek Weincloud could have allowed hackers to manipulate and damage ICS, including PLCs and field devices.
The post Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices appeared first on Sec… Continue reading Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices
The TSA has released updated cybersecurity requirements for pipeline owners and operators, instructing them to test assessment and incident response plans.
The post TSA Updates Pipeline Cybersecurity Requirements appeared first on SecurityWeek.
Continue reading TSA Updates Pipeline Cybersecurity Requirements
An Axis network door controller vulnerability can be exploited to target facilities, exposing them to both physical and cyber threats.
The post Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats appeared first on SecurityW… Continue reading Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats
The SEC has adopted new rules requiring public companies to disclose cybersecurity breaches that have a material impact within four days.
The post Companies Required by SEC to Disclose Cybersecurity Incidents in 4 Days appeared first on SecurityWeek.
Continue reading Companies Required by SEC to Disclose Cybersecurity Incidents in 4 Days
The NHL Stenden University of Applied Sciences in the Netherlands has launched MCAD, the Maritime Cyber Attack Database.
The post Maritime Cyberattack Database Launched by Dutch University appeared first on SecurityWeek.
Continue reading Maritime Cyberattack Database Launched by Dutch University
French aerospace, defense, and security giant Thales is acquiring cybersecurity firm Imperva from Thoma Bravo in a $3.6 billion deal.
The post Thales Acquiring Imperva From Thoma Bravo for $3.6 Billion appeared first on SecurityWeek.
Continue reading Thales Acquiring Imperva From Thoma Bravo for $3.6 Billion
AMD has released microcode patches to address Zenbleed, a vulnerability in its Zen 2 CPUs that can allow an attacker to access sensitive information.
The post AMD CPU Vulnerability ‘Zenbleed’ Can Expose Sensitive Information appeared first … Continue reading AMD CPU Vulnerability ‘Zenbleed’ Can Expose Sensitive Information
An Ivanti EPMM product zero-day vulnerability tracked as CVE-2023-35078 has been exploited in an attack aimed at the Norwegian government.
The post Ivanti Zero-Day Vulnerability Exploited in Attack on Norwegian Government appeared first on SecurityWeek.
Continue reading Ivanti Zero-Day Vulnerability Exploited in Attack on Norwegian Government