Collaborate Disseminate
The Russia-linked ICS malware named CosmicEnergy does not pose a direct threat to OT systems as it contains errors and lacks maturity.
The post CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored appeared first on SecurityWeek.
Continue reading CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored
New research conducted by IOActive shows the potential of electromagnetic fault injection (EMFI) attacks against drones.
The post New Research Shows Potential of Electromagnetic Fault Injection Attacks Against Drones appeared first on SecurityWeek.
Continue reading New Research Shows Potential of Electromagnetic Fault Injection Attacks Against Drones
Fortinet has warned customers that the critical CVE-2023-27997 vulnerability that was patched recently could be a zero-day exploited in limited attacks.
The post Fortinet Warns Customers of Possible Zero-Day Exploited in Limited Attacks appeared first … Continue reading Fortinet Warns Customers of Possible Zero-Day Exploited in Limited Attacks
Researchers discover new MOVEit vulnerabilities related to the zero-day, just as more organizations hit by the attack are coming forward.
The post New MOVEit Vulnerabilities Found as More Zero-Day Attack Victims Come Forward appeared first on SecurityW… Continue reading New MOVEit Vulnerabilities Found as More Zero-Day Attack Victims Come Forward
Fortinet has patched CVE-2023-27997, a critical FortiGate SSL VPN vulnerability that can be exploited for unauthenticated remote code execution.
The post Fortinet Patches Critical FortiGate SSL VPN Vulnerability appeared first on SecurityWeek.
Continue reading Fortinet Patches Critical FortiGate SSL VPN Vulnerability
Cybersecurity news that you may have missed this week: AI regulation, layoffs, US aerospace malware attacks, and post-quantum encryption.
The post In Other News: AI Regulation, Layoffs, US Aerospace Attacks, Post-Quantum Encryption appeared first on S… Continue reading In Other News: AI Regulation, Layoffs, US Aerospace Attacks, Post-Quantum Encryption
Evidence suggests that the Cl0p ransomware group has known about and conducted tests with the recently patched MOVEit zero-day since mid-2021.
The post Evidence Suggests Ransomware Group Knew About MOVEit Zero-Day Since 2021 appeared first on Security… Continue reading Evidence Suggests Ransomware Group Knew About MOVEit Zero-Day Since 2021
Vulnerabilities found by a researcher in a Honda ecommerce platform used for equipment sales exposed customer and dealer information.
The post Vulnerabilities in Honda eCommerce Platform Exposed Customer, Dealer Data appeared first on SecurityWeek.
Continue reading Vulnerabilities in Honda eCommerce Platform Exposed Customer, Dealer Data
Barracuda Networks is telling customers to immediately replace hacked ESG email security appliances regardless of the patches they installed.
The post Barracuda Urges Customers to Replace Hacked Email Security Appliances appeared first on SecurityWeek.
Continue reading Barracuda Urges Customers to Replace Hacked Email Security Appliances
Researchers show how ChatGPT/AI hallucinations can be exploited to distribute malicious code packages to unsuspecting software developers.
The post ChatGPT Hallucinations Can Be Exploited to Distribute Malicious Code Packages appeared first on Security… Continue reading ChatGPT Hallucinations Can Be Exploited to Distribute Malicious Code Packages