Collaborate Disseminate
The Transportation Security Administration (TSA) has updated its directive for oil and natural gas pipeline cybersecurity, providing owners and operators more flexibility in achieving the outlined goals.
read more Continue reading Updated TSA Pipeline Cybersecurity Requirements Offer More Flexibility
A recently patched Chrome vulnerability that appears to have been exploited by an Israeli spyware company also impacts Microsoft’s Edge and Apple’s Safari web browsers.
read more Continue reading Chrome Flaw Exploited by Israeli Spyware Firm Also Impacts Edge, Safari
A new cross-platform ransomware named Luna can encrypt files on Windows, Linux and ESXi, but its developers are only offering it to Russian-speaking affiliates.
read more Continue reading New Cross-Platform ‘Luna’ Ransomware Only Offered to Russian Affiliates
Drupal developers have announced the release of updates that patch several vulnerabilities in the open source content management system (CMS).
read more Continue reading Code Execution and Other Vulnerabilities Patched in Drupal
An actively exploited Chrome zero-day that Google patched on July 4 has been linked to an Israeli spyware company and used in targeted attacks aimed at entities in the Middle East.
read more Continue reading Exploitation of Recent Chrome Zero-Day Linked to Israeli Spyware Company
More than 600 industrial control system (ICS) product vulnerabilities were disclosed in the first half of 2022 by the US Cybersecurity and Infrastructure Security Agency (CISA), according to an analysis conducted by industrial asset and network monitor… Continue reading Hundreds of ICS Vulnerabilities Disclosed in First Half of 2022
Data security company Netwrix recently patched a vulnerability in its Auditor product that could allow attackers to execute arbitrary code and possibly compromise an organization’s Active Directory domain.
read more Continue reading Netwrix Auditor Vulnerability Can Facilitate Attacks on Enterprises
Russia-linked Turla threat actor spotted using Android malware for first time
Google and the European Union have issued separate warnings this week over Russian cyberattacks and misinformation campaigns.
read more Continue reading Google, EU Warn of Malicious Russian Cyber Activity
Researchers at cybersecurity company ESET have analyzed a previously undocumented macOS malware that appears to have been used in targeted attacks to steal valuable information from compromised systems.
read more Continue reading New ‘CloudMensis’ macOS Spyware Used in Targeted Attacks
Widely used vehicle GPS trackers from Micodus are affected by critical vulnerabilities that can be exploited by hackers to stalk people and remotely disable cars, according to cybersecurity company BitSight.
read more Continue reading Unpatched Micodus GPS Tracker Vulnerabilities Allow Hackers to Remotely Disable Cars