Collaborate Disseminate
3CX hack is the first known cascading supply chain attack, with the breach starting after an employee downloaded compromised software from a different firm.
The post Cascading Supply Chain Attack: 3CX Hacked After Employee Downloaded Trojanized App app… Continue reading Cascading Supply Chain Attack: 3CX Hacked After Employee Downloaded Trojanized App
Fortra has shared a summary of its investigation into the GoAnywhere zero-day incident that hit dozens of the company’s customers earlier this year.
The post Fortra Completes Investigation Into GoAnywhere Zero-Day Incident appeared first on SecurityWe… Continue reading Fortra Completes Investigation Into GoAnywhere Zero-Day Incident
Russian national Denis Dubnikov has been sentenced to time served after he pleaded guilty to charges related to laundering money for the Ryuk ransomware group.
The post Russian Man Who Laundered Money for Ryuk Ransomware Gang Sentenced appeared first o… Continue reading Russian Man Who Laundered Money for Ryuk Ransomware Gang Sentenced
Discarded enterprise routers are often not wiped and contain secrets that could be highly useful to malicious hackers.
The post Enterprises Exposed to Hacker Attacks Due to Failure to Wipe Discarded Routers appeared first on SecurityWeek.
Continue reading Enterprises Exposed to Hacker Attacks Due to Failure to Wipe Discarded Routers
US and UK government agencies have issued a joint warning for Russian group APT28 targeting Cisco routers by exploiting an old vulnerability.
The post US, UK: Russia Exploiting Old Vulnerability to Hack Cisco Routers appeared first on SecurityWeek.
Continue reading US, UK: Russia Exploiting Old Vulnerability to Hack Cisco Routers
NSO Group used at least three iOS zero-click exploits in Pegasus attacks in 2022: FindMyPwn, PwnYourHome, and LatentImage.
The post NSO Group Used at Least 3 iOS Zero-Click Exploits in 2022: Citizen Lab appeared first on SecurityWeek.
Continue reading NSO Group Used at Least 3 iOS Zero-Click Exploits in 2022: Citizen Lab
CISA has added two vulnerabilities to its ‘must patch’ list, including a recently fixed Chrome flaw and a macOS flaw exploited by the DazzleSpy malware.
The post CISA Adds Chrome, macOS Bugs to Known Exploited Vulnerabilities Catalog appeared first on … Continue reading CISA Adds Chrome, macOS Bugs to Known Exploited Vulnerabilities Catalog
Sixteen cybersecurity-related M&A deals were announced in the first half of April 2023.
The post Cybersecurity M&A Roundup for April 1-15, 2023 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup for April 1-15, 2023
UK-based creative software developer Affinity recently informed the 175,000 users of its forum of a data breach that occurred on April 6.
The post Creative Software Maker Affinity Informs Customers of Forum Breach appeared first on SecurityWeek.
Continue reading Creative Software Maker Affinity Informs Customers of Forum Breach
Web security and threat intelligence firm ZeroFox is acquiring threat intelligence company LookingGlass for $26 million.
The post ZeroFox to Acquire Threat Intelligence Firm LookingGlass for $26 Million appeared first on SecurityWeek.
Continue reading ZeroFox to Acquire Threat Intelligence Firm LookingGlass for $26 Million