Collaborate Disseminate
Over a dozen vulnerabilities patched by GE in its Cimplicity HMI/SCADA product are reminiscent of ICS attacks conducted by the Russian Sandworm group.
The post Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks appeared … Continue reading Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks
Citrix has patched several vulnerabilities, including CVE-2023-3519, a critical remote code execution zero-day that has been exploited in attacks.
The post Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned appeared first on S… Continue reading Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned
Olalekan Jacob Ponle, a Nigerian national living in the UAE, was sentenced to 8 years in a US prison for his role in an $8 million BEC scheme.
The post Nigerian Man Sentenced to 8 Years in US Prison for $8 Million BEC Scheme appeared first on SecurityW… Continue reading Nigerian Man Sentenced to 8 Years in US Prison for $8 Million BEC Scheme
At least two new Adobe ColdFusion vulnerabilities have been exploited in the wild, including one that has not been completely patched by the software giant.
The post Two New Adobe ColdFusion Vulnerabilities Exploited in Attacks appeared first on Securi… Continue reading Two New Adobe ColdFusion Vulnerabilities Exploited in Attacks
The number of entities impacted by the MOVEit hack — either directly or indirectly — reportedly exceeds 340 organizations and 18 million individuals.
The post MOVEit Hack: Number of Impacted Organizations Exceeds 340 appeared first on SecurityWeek.
Continue reading MOVEit Hack: Number of Impacted Organizations Exceeds 340
An analysis conducted by SecurityWeek shows that more than 210 cybersecurity-related mergers and acquisitions were announced in the first half of 2022.
The post SecurityWeek Analysis: Over 210 Cybersecurity M&A Deals Announced in First Half of 2023… Continue reading SecurityWeek Analysis: Over 210 Cybersecurity M&A Deals Announced in First Half of 2023
Feedback Friday: industry professionals comment on the implications of the recently approved EU-US Data Privacy Framework.
The post Industry Reactions to EU-US Data Privacy Framework: Feedback Friday appeared first on SecurityWeek.
Continue reading Industry Reactions to EU-US Data Privacy Framework: Feedback Friday
Several instances of the Reddit alternative Lemmy were hacked in recent days by attackers who had exploited a zero-day vulnerability.
The post Hackers Target Reddit Alternative Lemmy via Zero-Day Vulnerability appeared first on SecurityWeek.
Continue reading Hackers Target Reddit Alternative Lemmy via Zero-Day Vulnerability
Google researchers have discovered that a Zimbra zero-day vulnerability has been exploited in the wild, with users being advised to manually patch their installations.
The post Google Researchers Discover In-the-Wild Exploitation of Zimbra Zero-Day ap… Continue reading Google Researchers Discover In-the-Wild Exploitation of Zimbra Zero-Day
Cybersecurity company Armis has identified several vulnerabilities in Honeywell ICS products that could expose industrial organizations to attacks.
The post Honeywell DCS Platform Vulnerabilities Can Facilitate Attacks on Industrial Organizations appea… Continue reading Honeywell DCS Platform Vulnerabilities Can Facilitate Attacks on Industrial Organizations