Surge in ESXiArgs Ransomware Attacks as Questions Linger Over Exploited Vulnerability

Hundreds of new servers were compromised in the past days as part of ESXiArgs ransomware attacks, but it’s still unclear which vulnerability is being exploited.
The post Surge in ESXiArgs Ransomware Attacks as Questions Linger Over Exploited Vulnerabil… Continue reading Surge in ESXiArgs Ransomware Attacks as Questions Linger Over Exploited Vulnerability→

Recently Patched IBM Aspera Faspex Vulnerability Exploited in the Wild

A vulnerability affecting IBM’s Aspera Faspex file transfer solution, tracked as CVE-2022-47986, has been exploited in attacks.
The post Recently Patched IBM Aspera Faspex Vulnerability Exploited in the Wild appeared first on SecurityWeek.
Continue reading Recently Patched IBM Aspera Faspex Vulnerability Exploited in the Wild→

ICS Patch Tuesday: 100 Vulnerabilities Addressed by Siemens, Schneider Electric

Siemens and Schneider Electric address nearly 100 vulnerabilities across several of their products with their February 2023 Patch Tuesday advisories.
The post ICS Patch Tuesday: 100 Vulnerabilities Addressed by Siemens, Schneider Electric appeared fir… Continue reading ICS Patch Tuesday: 100 Vulnerabilities Addressed by Siemens, Schneider Electric→

ICS Vulnerabilities Chained for Deep Lateral Movement and Physical Damage 

Cybersecurity firm Forescout shows how various ICS vulnerabilities can be chained for an exploit that allows hackers to cause damage to a bridge.
The post ICS Vulnerabilities Chained for Deep Lateral Movement and Physical Damage  appeared first on Secu… Continue reading ICS Vulnerabilities Chained for Deep Lateral Movement and Physical Damage →

2022 ICS Attacks: Fewer-Than-Expected on US Energy Sector, But Ransomware Surged

Dragos ICS/OT Cybersecurity Year in Review 2022 report covers state-sponsored attacks, ransomware, and vulnerabilities.
The post 2022 ICS Attacks: Fewer-Than-Expected on US Energy Sector, But Ransomware Surged appeared first on SecurityWeek.
Continue reading 2022 ICS Attacks: Fewer-Than-Expected on US Energy Sector, But Ransomware Surged→

GoAnywhere Zero-Day Attack Victims Start Disclosing Significant Impact

Organizations hit by exploitation of the GoAnywhere MFT zero-day vulnerability CVE-2023-0669 have started coming forward.
The post GoAnywhere Zero-Day Attack Victims Start Disclosing Significant Impact appeared first on SecurityWeek.
Continue reading GoAnywhere Zero-Day Attack Victims Start Disclosing Significant Impact→

Apple Patches Actively Exploited WebKit Zero-Day Vulnerability 

Apple has released updates for macOS, iOS and Safari and they all include a WebKit patch for a zero-day vulnerability tracked as CVE-2023-23529.
The post Apple Patches Actively Exploited WebKit Zero-Day Vulnerability  appeared first on SecurityWeek.
Continue reading Apple Patches Actively Exploited WebKit Zero-Day Vulnerability →