Collaborate Disseminate
Organizations hit by exploitation of the GoAnywhere MFT zero-day vulnerability CVE-2023-0669 have started coming forward.
The post GoAnywhere Zero-Day Attack Victims Start Disclosing Significant Impact appeared first on SecurityWeek.
Continue reading GoAnywhere Zero-Day Attack Victims Start Disclosing Significant Impact
Apple has released updates for macOS, iOS and Safari and they all include a WebKit patch for a zero-day vulnerability tracked as CVE-2023-23529.
The post Apple Patches Actively Exploited WebKit Zero-Day Vulnerability appeared first on SecurityWeek.
Continue reading Apple Patches Actively Exploited WebKit Zero-Day Vulnerability
Cybersecurity company Group-IB claims it was repeatedly targeted by a Chinese APT called Tonto Team, CactusPete, and Karma Panda.
The post Cybersecurity Firm Group-IB Repeatedly Targeted by Chinese APT appeared first on SecurityWeek.
Continue reading Cybersecurity Firm Group-IB Repeatedly Targeted by Chinese APT
Forty cybersecurity-related M&A deals were announced in January 2023.
The post Cybersecurity M&A Roundup: 40 Deals Announced in January 2023 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 40 Deals Announced in January 2023
More than 1,300 ICS vulnerabilities were discovered in 2022, including nearly 1,000 that have a high or critical severity rating.
The post Siemens Drives Rise in ICS Vulnerabilities Discovered in 2022: Report appeared first on SecurityWeek.
Continue reading Siemens Drives Rise in ICS Vulnerabilities Discovered in 2022: Report
The exploitation of a GoAnywhere MFT zero-day vulnerability has been linked to a cybercrime group and ransomware attacks.
The post GoAnywhere MFT Zero-Day Exploitation Linked to Ransomware Attacks appeared first on SecurityWeek.
Continue reading GoAnywhere MFT Zero-Day Exploitation Linked to Ransomware Attacks
Reddit says its systems were hacked following a sophisticated phishing attack aimed at employees.
The post Documents, Code, Business Systems Accessed in Reddit Hack appeared first on SecurityWeek.
Continue reading Documents, Code, Business Systems Accessed in Reddit Hack
A vulnerability affecting Dahua cameras and video recorders can be exploited by threat actors to modify a device’s system time.
The post Vulnerability Allows Hackers to Remotely Tamper With Dahua Security Cameras appeared first on SecurityWeek.
Continue reading Vulnerability Allows Hackers to Remotely Tamper With Dahua Security Cameras
There have been some new developments in the case of the ESXiArgs ransomware attacks, including related to the encryption method used by the malware, victims, and the vulnerability exploited by the hackers. After the US Cybersecurity and Infrastructure Security Agency (CISA) announced the availability of an open source tool designed to help some victims of […]
The post ESXiArgs Ransomware Hits Over 3,800 Servers as Hackers Continue Improving Malware appeared first on SecurityWeek.
Continue reading ESXiArgs Ransomware Hits Over 3,800 Servers as Hackers Continue Improving Malware
The Siemens Automation License Manager is affected by two serious vulnerabilities that could be chained to hack industrial control systems (ICS).
The post Siemens License Manager Vulnerabilities Allow ICS Hacking appeared first on SecurityWeek.
Continue reading Siemens License Manager Vulnerabilities Allow ICS Hacking