Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability 

The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.
The post Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability  appeared first on SecurityWeek.
Continue reading Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability →

Default ICS Credentials Exploited in Destructive Attack on Polish Energy Facilities

Poland’s CERT has published a report on the recent attack, providing new details on targeted ICS and attribution.
The post Default ICS Credentials Exploited in Destructive Attack on Polish Energy Facilities appeared first on SecurityWeek.
Continue reading Default ICS Credentials Exploited in Destructive Attack on Polish Energy Facilities→

Notepad++ Supply Chain Hack Conducted by China via Hosting Provider

The likely state-sponsored threat actor had access to the hosting provider for months and targeted only certain Notepad++ customers.
The post Notepad++ Supply Chain Hack Conducted by China via Hosting Provider appeared first on SecurityWeek.
Continue reading Notepad++ Supply Chain Hack Conducted by China via Hosting Provider→

ICS Devices Bricked Following Russia-Linked Intrusion Into Polish Power Grid

Sandworm/Electrum hackers targeted communication and control systems at 30 sites.
The post ICS Devices Bricked Following Russia-Linked Intrusion Into Polish Power Grid appeared first on SecurityWeek.
Continue reading ICS Devices Bricked Following Russia-Linked Intrusion Into Polish Power Grid→

PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense

The announcement comes just weeks after Palo Alto Networks and Google Cloud announced a multibillion-dollar AI and cloud security deal.
The post PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense appeared first on SecurityWeek.
Continue reading PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense→