Collaborate Disseminate
CISA and the FBI have released an alert on XSS vulnerabilities, urging organizations to adopt a secure by design approach and eliminate them.
The post CISA, FBI Urge Organizations to Eliminate XSS Vulnerabilities appeared first on SecurityWeek.
Continue reading CISA, FBI Urge Organizations to Eliminate XSS Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2024-40766 – a recently fixed improper access control vulnerability affecting SonicWall’s firewalls – to its Known Exploited Vulnerabilities catalog, thus co… Continue reading CISA confirms that SonicWall vulnerability is getting exploited (CVE-2024-40766)
The US Department of Justice has named five Russian computer hackers as members of Unit 29155 – i.e., the 161st Specialist Training Center of the Russian General Staff Main Intelligence Directorate (GRU) – which they deem resposible for the… Continue reading Exposed: Russian military Unit 29155 does digital sabotage, espionage
The roadmap for enhancing internet routing security follows action from the FCC and others.
The post White House publishes latest plan to protect a key component of the internet appeared first on CyberScoop.
Continue reading White House publishes latest plan to protect a key component of the internet
The US oil giant updated an SEC filing to confirm malicious hackers “accessed and exfiltrated information” from its corporate systems.
The post Halliburton Confirms Data Stolen in Cyberattack appeared first on SecurityWeek.
Continue reading Halliburton Confirms Data Stolen in Cyberattack
If elected again, the former president might draw both on returning officials and yet-untapped pockets of talent.
The post Who would be the cyber pros in a second Trump term? appeared first on CyberScoop.
Continue reading Who would be the cyber pros in a second Trump term?
RansomHub, a ransomware-as-a-service (RaaS) outfit that “popped up” earlier this year, has already amassed at least 210 victims (that we know of). Its affiliates have hit government services, IT and communication companies, healthcare insti… Continue reading How RansomHub went from zero to 210 victims in six months
State-Sponsored Espionage Meets Ransomware! Continue reading Iranian State Hackers Team Up with Ransomware Gangs in Attacks on US
Iranian state-sponsored APT Lemon Sandstorm is working closely with ransomware groups on monetizing network intrusions.
The post US Sees Iranian Hackers Working Closely With Ransomware Groups appeared first on SecurityWeek.
Continue reading US Sees Iranian Hackers Working Closely With Ransomware Groups
A group of Iranian hackers – dubbed Pioneer Kitten by cybersecurity researchers – is straddling the line between state-contracted cyber espionage group and initial access provider (and partner in crime) for affiliates of several ransomware … Continue reading Pioneer Kitten: Iranian hackers partnering with ransomware affiliates