FDA Announces New Cybersecurity Requirements for Medical Devices

The FDA is asking medical device manufacturers to provide cybersecurity-related information when submitting an application for a new product.
The post FDA Announces New Cybersecurity Requirements for Medical Devices appeared first on SecurityWeek.
Continue reading FDA Announces New Cybersecurity Requirements for Medical Devices→

Mandiant Investigating 3CX Hack as Evidence Shows Attackers Had Access for Months

Several cybersecurity companies have published blog posts, advisories and tools to help organizations that may have been hit by the 3CX supply chain attack.
The post Mandiant Investigating 3CX Hack as Evidence Shows Attackers Had Access for Months appe… Continue reading Mandiant Investigating 3CX Hack as Evidence Shows Attackers Had Access for Months→

Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks

Water pumping systems made by ProPump and Controls are affected by several vulnerabilities that could allow hackers to cause significant problems.
The post Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks appeared first … Continue reading Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks→

3CX Confirms Supply Chain Attack as Researchers Uncover Mac Component 

3CX confirms investigating a security breach as the cybersecurity community is sharing more information on what appears to be a sophisticated supply chain attack.
The post 3CX Confirms Supply Chain Attack as Researchers Uncover Mac Component  appeared… Continue reading 3CX Confirms Supply Chain Attack as Researchers Uncover Mac Component →

OpenSSL 1.1.1 Nears End of Life: Security Updates Only Until September 2023

OpenSSL 1.1.1 will reach EoL in six months and users are instructed to either upgrade to a newer version or pay for extended support to continue receiving security patches.
The post OpenSSL 1.1.1 Nears End of Life: Security Updates Only Until Septembe… Continue reading OpenSSL 1.1.1 Nears End of Life: Security Updates Only Until September 2023→

Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors

Google has linked several zero-day vulnerabilities used last year to target Android and iOS devices to commercial spyware vendors.
The post Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors appeared first on SecurityWeek.
Continue reading Google Links More iOS, Android Zero-Day Exploits to Spyware Vendors→

ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an actively exploited vulnerability.
The post ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exp… Continue reading ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation→